Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Jan 2026Clear ×

Longhornv1.11.0Storage & DataJan 29, 2026

ACTION 1CHECK 7PLAN 2OTHER 134View full analysis

A substantial feature and maintenance release with V2 Data Engine changes, new capabilities, dependency updates, numerous fixes, and hotfix image replacements. It also deprecates V2 Backing Image functionality and includes a fix for an SPDK v25.05 CVE issue without a disclosed advisory identifier.

Action needed (1)

securityThe SPDK v25.05 CVE issue fix
The CVE issue in SPDK v25.05 is fixed in this release.

Check if affected (7)

breakingThe longhornio/longhorn-instance-manager:v1.11.0 image replacement
Applies if you use longhornio/longhorn-instance-manager:v1.11.0.
breakingThe longhornio/longhorn-manager:v1.11.0 image replacement
Applies if you use longhornio/longhorn-manager:v1.11.0.
breakingBackupstore-related settings removal
Applies if you configure backupstore related settings.
+ 4 more on the release page

Plan ahead (2)

deprecatedBacking Image for the V2 Data Engine deprecationremoval planned in v1.12.0
Applies if you use Backing Image and the V2 Data Engine.
deprecatedV2 Backing Image Feature deprecation
Applies if you use the V2 Backing Image Feature.

Source ↗

Falco0.43.0SecurityJan 28, 2026

CHECK 2PLAN 4OTHER 16View full analysis

A maintenance release that removes source-config-path output from release builds, deprecates several userspace interfaces, and rotates the package-signing key. It also includes correctness fixes, dependency updates, and an image-size reduction.

Check if affected (2)

breakingSource config path output in release builds
Applies if you use debug builds.
breakingGPG signing key for DEB/RPM packages, rotated
Applies if you use DEB/RPM packages.

Plan ahead (4)

deprecatedThe --gvisor-generate-config CLI option, deprecated
Applies if you use --gvisor-generate-config.
deprecatedThe legacy eBPF probe, deprecated
Applies if you use the legacy eBPF probe.
deprecatedThe gVisor engine, deprecated
Applies if you use the gVisor engine.
+ 1 more on the release page

Source ↗

Confidential Containersv0.18.0SecurityJan 23, 2026

CHECK 2PLAN 2OTHER 17View full analysis

A release that removes or deprecates several operator-facing components while adding capabilities and changing supported formats and behavior. It also updates shipped platform components, including Trustee, image-rs, guest kernels, and OVMF.

Check if affected (2)

breakingProcess-based confidential computing via enclave-cc, removed
Applies if you use enclave-cc.
breakingExperimental Secure Comms mode, removed from the Cloud API Adaptor
Applies if you configure Secure Comms mode.

Plan ahead (2)

breakingThe CoCo operator, deprecated, with Helm chart installation
Applies if you use the CoCo operator.
deprecatedpacker guest images, deprecated in favor of mkosiremoval date not announced
Applies if you use packer images.

Source ↗

Envoyv1.37.0Networking & MessagingJan 13, 2026

ACTION 1CHECK 2PLAN 1OTHER 30View full analysis

This release adds dynamic-module, filter, routing, observability, and certificate capabilities, along with fixes and performance improvements across HTTP, networking, and protocol handling. It also changes HTTP reset behavior, removes runtime guards and legacy code paths, and deprecates the OpenTelemetry access log common_config field.

Action needed (1)

breakingRuntime guards and legacy code paths removed
Multiple runtime guards and legacy code paths are removed in this release.

Check if affected (2)

breakingDefault HTTP reset code changed
Applicability is not stated in the release notes.
breakingDefault upstream protocol error reset handling changed
Applicability is not stated in the release notes.

Plan ahead (1)

deprecatedOpenTelemetry access log common_config field deprecated
Applies if you configure common_config.

Source ↗

Keycloak26.5.0SecurityJan 6, 2026

CHECK 2PLAN 1OTHER 247View full analysis

A substantial feature and maintenance release adds operator capabilities including workflows, JWT authorization grants, organization invitations, OpenTelemetry export, and Windows services. It also updates Quarkus and fixes correctness issues, while changing supported database versions and addressing a vulnerability in brute force detection settings.

Check if affected (2)

securityBrute force detection settings vulnerability, corrected
Applies if you configure brute force detection settings.
breakingPostgreSQL 13.x support removal
Applies if you depend on PostgreSQL 13.x.

Plan ahead (1)

deprecatedFine-Grained Admin Permissions v1, deprecated
Applies if you enable admin/fine-grained-permissions.

Source ↗

Browse by month