A maintenance release that corrects runtime, workflow, actor, metrics, component, and sidecar defects. It adds Kafka configuration and health-check capabilities and includes two security-related dependency upgrades.
Action needed (3)
securitymedium
github.updated for CVE-2025-69725com/go-chi/chi/v5 github.is updated to v5.2.4, which resolves CVE-2025-69725.com/go-chi/chi/v5 securitymedium
go.andmongodb. org/mongo-driver github.updatescom/dapr/components-contrib go.is updated to v1.17.7, and themongodb. org/mongo-driver github.dependency is bumped to v1.18.3. The change carries advisory CVE-2026-2303.com/dapr/components-contrib breakingConflict errors for workflow instance IDs
Create requests for workflow instance IDs are rejected with a conflict error that names the blocking child workflow.