AI-analyzed release notes for CNCF graduated and incubating projects.
Release 3.31.0 contains a dependency update addressing vulnerabilities in graphql/server. It also includes correctness fixes across probes, GraphQL, authentication, infrastructure, and experiment handling.
Action needed (1)
securityDependencies in graphql/server updated
Dependencies in graphql/server are updated to fix vulnerabilities. The update ships in Release 3.31.0.
Litmus 3.30.0 adds installation charts and an exposed metrics port, while correcting GraphQL configuration and experiment creation behavior. It also tightens an RBAC operation and updates Docker base images and Go dependencies.
Source ↗Litmus 3.29.0 includes operator-facing changes across dependencies and platform behavior. This release includes a google. update to v1. for CVE-2026-33186.
Action needed (1)
securitycriticalThe google. dependency, updated for CVE-2026-33186
The release updates google. to v1.. The dependency update addresses CVE-2026-33186 in Litmus 3.29.0.
A maintenance release with several defect fixes, including prevention of stale configuration leakage and a frontend base-image update to address a Python vulnerability. It also includes fixes for workflow event handling, branding, and experiment image-registry behavior.
Action needed (2)
securityStale configuration across probes of the same type
Stale configuration no longer leaks across multiple probes of the same type.
securityFrontend base image updated to ubi9
The frontend base image is updated to ubi9 to resolve a Python vulnerability.
Version 3.27.0 adds support for targeting Jobs in chaos experiments and removes the 1024-character limit on CMD probe commands. It also corrects runtime, synchronization, UI, and backend defects. No security advisories or security-specific fixes are disclosed.
Source ↗Litmus 3.26.0 is a maintenance release focused on operator-visible corrections to UI layout behavior and image-registry validation. Other release-note material concerns headings, duplicate detail, or development and build-only changes.
Source ↗This release adds installation and setup artifacts and fixes defects in RBAC permissions, portal refresh behavior, and experiment-name handling. No security advisories or security-specific flaws are disclosed.
Source ↗
