Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

All Security Breaking Deprecated

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Cortexv1.21.0ObservabilityApr 27, 2026

ACTION 1CHECK 1PLAN 3OTHER 81View full analysis

A feature and maintenance release that adds Store Gateway, federation, overrides, caching, metric, and query capabilities while graduating several experimental features. It also changes defaults and configuration names, updates dependencies, and fixes correctness, memory, panic, and data-corruption defects.

Action needed (1)

breakingThe blocks storage bucket index default
Blocks storage now enables the bucket index by default through -blocks-storage.bucket-store.bucket-index.enabled. Disabling it with -blocks-storage.bucket-store.bucket-index.enabled=false is not recommended for production.

Check if affected (1)

breakingThe Distributor type and unit label flag
Applies if you configure either -distributor.enable-type-and-unit-labels or -distributor.otlp.enable-type-and-unit-labels for remote write v2 and OTLP requests.

Plan ahead (3)

breakingThe Ruler API flag rename
Applies if you configure -experimental.ruler.enable-api.
breakingThe Alertmanager API flag rename
Applies if you configure -experimental.alertmanager.enable-api.
breakingThe Users Scanner user index update configuration
Applies if you configure either -*.users-scanner.user-index.cleanup-interval or clean_up_interval.

Litmus3.28.0ObservabilityApr 15, 2026

ACTION 2OTHER 3View full analysis

A maintenance release with several defect fixes, including prevention of stale configuration leakage and a frontend base-image update to address a Python vulnerability. It also includes fixes for workflow event handling, branding, and experiment image-registry behavior.

Action needed (2)

securityStale configuration across probes of the same type
Stale configuration no longer leaks across multiple probes of the same type.
securityFrontend base image updated to ubi9
The frontend base image is updated to ubi9 to resolve a Python vulnerability.

OpenCostv1.120.0ObservabilityApr 13, 2026

ACTION 1OTHER 26View full analysis

A maintenance release with dependency updates, defect corrections, expanded compatibility, and new integrations and configuration capabilities. An existing configuration source is replaced, so affected operators need to update their configuration.

Action needed (1)

breakingProvider configuration replaced by cloud-integration.json
The provider config is no longer used, and configuration is read from cloud-integration.json instead. Operators using the replaced configuration source need to update their configuration.

Prometheusv3.11.2ObservabilityApr 13, 2026

CHECK 1OTHER 2View full analysis

Release v3.11.2 fixes stored XSS in the Prometheus web UI and changes Consul service-discovery filtering. The Consul updates add health_filter support and correct how filter parameters are applied to the Health API.

Check if affected (1)

securitymediumStored XSS fix in the Prometheus web UI, CVE-2026-40179
Applies if you use the Prometheus web UI.

Prometheusv3.5.2ObservabilityApr 13, 2026

CHECK 1OTHER 1View full analysis

Prometheus v3.5.2 fixes a stored XSS vulnerability in the Prometheus web UI. The release also includes a regex performance improvement.

Check if affected (1)

securitymediumStored XSS fix in the Prometheus web UI
Applies if crafted metric names or label values can reach the Prometheus web UI.

OpenTelemetryv0.150.0ObservabilityApr 13, 2026

OTHER 5View full analysis

OpenTelemetry v0.150.0 combines a dependency update with bug fixes relevant to operators. The release addresses behavior in exporter, profile, and configuration handling.

Prometheusv3.11.1ObservabilityApr 7, 2026

OTHER 1View full analysis

This release includes an operator-facing bug fix for OTLP HTTP tracing when insecure: true is used. No change entry is displayed here.

Prometheusv3.11.0ObservabilityApr 2, 2026

CHECK 1PLAN 2OTHER 42View full analysis

A broad release with new service discovery, PromQL, TSDB, and UI capabilities, alongside performance, dependency, output, and correctness changes. It also deprecates legacy Hetzner discovery labels and corrects TSDB retention-time handling.

Check if affected (1)

breakingThe storage.tsdb.retention.time unit handling
Applies if you configure storage.tsdb.retention.time.

Plan ahead (2)

deprecatedThe __meta_hetzner_datacenter label, deprecatedremoval date not announced
Applies if you use __meta_hetzner_datacenter.
deprecatedThe Hetzner Cloud datacenter location labels, deprecated
Applies if you use __meta_hetzner_hcloud_datacenter_location or __meta_hetzner_hcloud_datacenter_location_network_zone.

Jaegerv2.17.0ObservabilityMar 30, 2026

OTHER 16View full analysis

Jaeger v2.17.0 contains bug fixes, performance improvements, and new or expanded experimental capabilities. It also changes query and configuration behavior. No security advisories or explicitly security-related flaws are disclosed.

Chaos Meshv2.8.2ObservabilityMar 25, 2026

ACTION 2CHECK 1PLAN 1OTHER 6View full analysis

A maintenance release deprecates and removes install.sh, updates the Go toolchain and JSON-RPC dependency, and corrects dashboard and webhook issues. It also includes vulnerability fixes in Go and UI packages.

Action needed (2)

securityGo package updates for vulnerability fixes
Go packages are upgraded to fix vulnerabilities.
securityUI package updates for vulnerability fixes
UI packages are upgraded to fix vulnerabilities.

Check if affected (1)

breakingThe install.sh installer, removed
Applies if you use install.sh.

Plan ahead (1)

deprecatedThe install.sh installer, deprecated
Applies if you use install.sh.

Litmus3.27.0ObservabilityMar 18, 2026

OTHER 12View full analysis

Version 3.27.0 adds support for targeting Jobs in chaos experiments and removes the 1024-character limit on CMD probe commands. It also corrects runtime, synchronization, UI, and backend defects. No security advisories or security-specific fixes are disclosed.

Jaegerv2.16.0ObservabilityMar 7, 2026

ACTION 1CHECK 2OTHER 5View full analysis

A release with breaking configuration and API changes, a Go 1.25.7 requirement, new capabilities, and bug and performance fixes. No security advisories or security-specific fixes are identified.

Action needed (1)

breakingGo 1.25.7 requirement
The codebase now requires Go 1.25.7, with Go version consistency enforced across the codebase.

Check if affected (2)

breakingLegacy response format of the remote sampling endpoint, removed
Applies if you use the remote sampling endpoint.
breakingtraces.topic renamed to traces.topics
Applies if you configure traces.topic.

Prometheusv3.10.0ObservabilityFeb 26, 2026

CHECK 1OTHER 29View full analysis

This release adds Prometheus capabilities and image/build options, changes defaults and outputs, improves performance, and fixes correctness defects. No security advisories or explicitly described vulnerabilities are present.

Check if affected (1)

breakingExpanded alert annotations hidden by default
Applies if you use the UI on the /alerts page.

Fluentdv1.19.2ObservabilityFeb 19, 2026

OTHER 9View full analysis

Fluentd v1.19.2 contains bug fixes, dependency updates, and compatibility improvements. No security advisories or explicitly described security fixes are identified for this release.

Litmus3.26.0ObservabilityFeb 18, 2026

OTHER 2View full analysis

Litmus 3.26.0 is a maintenance release focused on operator-visible corrections to UI layout behavior and image-registry validation. Other release-note material concerns headings, duplicate detail, or development and build-only changes.

Thanosv0.41.0ObservabilityFeb 12, 2026

CHECK 1OTHER 10View full analysis

This release combines performance improvements, bug fixes, and new configuration capabilities with a shuffle-sharding behavior change in Receive. It also upgrades Prometheus, deprecates a flag, and makes native histogram ingestion always enabled.

Check if affected (1)

breakingReceive shuffle sharding now uses consistent hashing
Applies if you use Receive.

OpenCostv1.119.2ObservabilityFeb 9, 2026

OTHER 28View full analysis

OpenCost v1.119.2 contains operator-facing fixes, configuration and cloud-integration changes, logging updates, and third-party dependency upgrades. No security advisories or explicit vulnerability disclosures are present.

Jaegerv2.15.1ObservabilityFeb 9, 2026

ACTION 1OTHER 2View full analysis

This release removes a deprecated v1 adapter wrapper and changes the default span kind in API v3 operations. The remaining release notes do not describe distinct operator-facing changes.

Action needed (1)

breakingDeprecated protofromtraces wrapper removal
The deprecated protofromtraces wrapper has been removed from v1adapter.

Jaegerv2.15.0ObservabilityFeb 6, 2026

CHECK 1OTHER 16View full analysis

Jaeger v2.15.0 introduces a breaking constraint for trace and metric storage configuration. It also adds experimental MCP and ClickHouse capabilities, corrects API behavior, and includes an internal implementation change without direct operator impact.

Check if affected (1)

breakingTrace and metric storage configuration backend constraint
Applies if you configure trace or metric storage with more than one backend type.

Prometheusv3.5.1ObservabilityJan 22, 2026

OTHER 2View full analysis

Prometheus v3.5.1 contains dependency and toolchain version updates without code changes. The recorded release metadata does not describe security-related changes or operator actions beyond upgrading.

Litmus3.25.0ObservabilityJan 16, 2026

OTHER 5View full analysis

This release adds installation and setup artifacts and fixes defects in RBAC permissions, portal refresh behavior, and experiment-name handling. No security advisories or security-specific flaws are disclosed.

Prometheusv3.9.1ObservabilityJan 7, 2026

OTHER 2View full analysis

Prometheus v3.9.1 is a small bug-fix release. It addresses an Agent startup crash and restores scraping relabel keep and drop rules.

Prometheusv3.9.0ObservabilityJan 7, 2026

ACTION 1CHECK 1OTHER 34View full analysis

This release updates histogram collection and TSDB behavior while adding capabilities across the API, PromQL, storage, and UI. It also includes fixes for query handling, storage validation, receivers, and interface behavior.

Action needed (1)

breakingA 10,000-set limit for the TSDB status endpoint
The TSDB status endpoint now limits responses to a maximum of 10,000 sets of statistics.

Check if affected (1)

breakingThe native-histogram feature flag has no effect
Applies if you set scrape_native_histograms to collect Native Histogram samples from exporters.

OpenCostv1.119.1ObservabilityJan 6, 2026

OTHER 3View full analysis

OpenCost v1.119.1 contains a panic fix and changes to custom-cost configuration behavior. The release also includes internal notes whose details are not described here, with no security advisories identified.

Jaegerv2.14.1ObservabilityJan 2, 2026

View full analysis

Jaeger v2.14.1 contains only section headings and no operator-facing changes.

Jaegerv2.14.0ObservabilityJan 2, 2026

CHECK 9OTHER 20View full analysis

A release focused on removing legacy v1 components and storage interfaces, while changing configuration and UI defaults. It also adds or expands experimental storage capabilities and includes fixes for storage behavior and dependency API changes.

Check if affected (9)

breakingRemaining v1 utilities published as v2.x.x versions
Applies if you use v1 utilities.
breakingThe UI theme selector, enabled by default
Applies if you use the UI.
breakingThe storage/v1/grpc interface, removed
Applies if you use storage/v1/grpc.
+ 6 more on the release page

← NewerApr 27, 2026 – Jan 2, 2026

Browse by month