KServe

v0.21.0AI & ML

2026年9月25日

ACTION 7CHECK 8OTHER 89

LLM 推論サービスを中心とした機能拡張に加え、運用面の改善と依存関係の更新を含むリリースです。既存環境では、互換性に影響し得る移行と依存関係の変更を確認してからアップグレードする必要があります。

要対応 (7)

securityhighblack を 26.3.1 に更新
black が 26.3.1 に更新され、CVE-2026-32274 に対応しました。
kserve#5953
securityhighgo-jose/go-jose/v4 を v4.1.4 に更新
go-jose/go-jose/v4 が v4.1.4 に更新され、GHSA-78h2-9frx-2jm8 に対応しました。
kserve#5985
securityhighPillow の下限を 12.2.0 以上に変更
Pillow のバージョン下限が 12.2.0 以上に引き上げられ、CVE-2026-40192 と GHSA-whj4-6x5x-4v2j に対応しました。
kserve#5959
securityhighPillow の下限を 12.3.0 以上に変更
Pillow のバージョン下限が 12.3.0 以上に引き上げられ、CVE-2026-54058 に対応しました。
kserve#5998
securityhighcryptography の下限を 50.0.0 以上に変更
cryptography のバージョン下限が 50.0.0 以上に引き上げられ、CVE-2026-69247 に対応しました。
kserve#5999
securityhighpyasn1 を 0.6.4 に更新
pyasn1 が 0.6.4 に更新され、CVE-2026-59885 に対応しました。
kserve#6011
securityhighurllib3 を 2.6.3 以上に固定
urllib3 のバージョン下限が 2.6.3 以上に固定され、CVE-2026-21441 に対応しました。
kserve#6023

影響確認 (8)

securitycriticalbgtest の golang.org/x/crypto を v0.52.0 に更新
bgtest を使用している場合に適用されます。
bgtest の golang.org/x/crypto が v0.52.0 に更新され、CVE-2026-46595 に対応しました。
kserve#5993
securityhighalibiexplainer の Pillow を 12.3.0 に更新
alibiexplainer を使用している場合に適用されます。
alibiexplainer の Pillow が 12.3.0 に更新され、CVE-2026-59200 に対応しました。
kserve#6010
securityhighqpext の opentelemetry-go を v1.43.0 に更新
qpext を使用している場合に適用されます。
qpext の opentelemetry-go が v1.43.0 に更新され、CVE-2026-39883 に対応しました。
kserve#6019
securityhighpython/kserve の setuptools を 78.1.1 に更新
python/kserve を使用している場合に適用されます。
python/kserve の setuptools が 78.1.1 に更新され、CVE-2025-47273 に対応しました。
kserve#6055
securitypython/storage の aiohttp を 3.13.3 に更新
python/storage を使用している場合に適用されます。
python/storage の aiohttp が 3.13.3 に更新され、zip bomb DoS に対応しました。
kserve#5971
breakingdisagg-sidecar の旧フラグ廃止
適用対象はリリースノートに明記されていません。
disagg-sidecar で新しい new TLS flag を使うため、old flag が廃止されました。
kserve#5875
breakingllmisvc の非推奨プラグインを削除
適用対象はリリースノートに明記されていません。
llmisvc から非推奨プラグインが削除されました。
kserve#6067
breakingllmisvc のフラグ名を変更
適用対象はリリースノートに明記されていません。
llmisvc のフラグ名が変更されました。
kserve#6067

その他の記録済み変更 89 件すべてfixes 36 · additions 21 · value changes 19 · constraints 10 · defaults 1 · removals 1 · renames 1

fixes (36)

* fix(llmisvc): handling stopped members in group by @bartoszmajsak in https://github.com/kserve/kserve/pull/5847
* fix(llmisvc): skip v1alpha2 InfPool reconcile when CRD absent by @bartoszmajsak in https://github.com/kserve/kserve/pull/5890
* fix: prevent agent crash when model spec unmarshal fails by @unichronic in https://github.com/kserve/kserve/pull/5700
* fix(llmisvc): escape quotes in generated --kv-transfer-config by @iasthc in https://github.com/kserve/kserve/pull/5880
* fix(llmisvc): migrate --model-server-metrics-scheme when set on Args by @zdtsw in https://github.com/kserve/kserve/pull/5892
* fix(utils): eliminate data race in API resource discovery cache by @bartoszmajsak in https://github.com/kserve/kserve/pull/5891
* fix(python): map numpy unicode string dtype to BYTES in from_np_dtype by @harshhh817 in https://github.com/kserve/kserve/pull/5889
* fix(llmisvc): strip validation from LLMIServiceConfig CRD by @bartoszmajsak in https://github.com/kserve/kserve/pull/5888
* fix(llmisvc): skip pod spec build when tokenizer disabled by @vivekk16 in https://github.com/kserve/kserve/pull/5913
* fix(router): resolve flaky TestServerTimeout nil pointer panic by @bartoszmajsak in https://github.com/kserve/kserve/pull/5887
* fix: template storage resources in inferenceservice-config ConfigMap by @mgonzalezo in https://github.com/kserve/kserve/pull/5697
* fix(llmisvc): detect scheduler plugins from template args by @vivekk16 in https://github.com/kserve/kserve/pull/5931
* fix(llmisvc): close v1alpha1 validation gaps for LoRA and DRA annotations by @bartoszmajsak in https://github.com/kserve/kserve/pull/5938
* fix(llmisvc): detect latency-producer plugin from template args by @vivekk16 in https://github.com/kserve/kserve/pull/5937
* fix(llmisvc): re-enqueue group peers when status model names change by @jlost in https://github.com/kserve/kserve/pull/5943
* fix(reconcilers): set owner refs inside RawKubeReconciler.Reconcile by @Jooho in https://github.com/kserve/kserve/pull/5934
* fix(isvc): isvc headless status.address.url has incorrect port by @spolti in https://github.com/kserve/kserve/pull/5968
* fix(isvc): gate canary traffic on readiness to prevent transient 503s by @yuzisun in https://github.com/kserve/kserve/pull/5984
* fix(deps): kin-openapi nil-pointer panic in request validation by @spolti with @Copilot in https://github.com/kserve/kserve/pull/5992
* fix: reconcile orderings with consistent keys by @bartoszmajsak in https://github.com/kserve/kserve/pull/6021
* fix: apply ${TAG} to docker image build/push targets by @Jooho in https://github.com/kserve/kserve/pull/6057
* fix(llmisvc): detect removals when reconciling generated routing rules by @bartoszmajsak in https://github.com/kserve/kserve/pull/6046
* fix: don't assume LoRA served names are valid object names by @bartoszmajsak in https://github.com/kserve/kserve/pull/6077
* fix(autoscaler): skip KEDA ScaledObject for components without autoScaling by @spolti in https://github.com/kserve/kserve/pull/6029
* fix(llmisvc): validate LoRA adapters declared in a config by @bartoszmajsak in https://github.com/kserve/kserve/pull/6092
* fix(llmisvc): disambiguate colliding LoRA adapter mount paths by @bartoszmajsak in https://github.com/kserve/kserve/pull/6085
* fix(llmisvc): give P/D engines a NixlConnector so KV actually transfers by @nickaggarwal in https://github.com/kserve/kserve/pull/6027
* fix: clean up orphaned autoscaler and OTel resources on canary promotion by @maskarb in https://github.com/kserve/kserve/pull/5899
* fix(llmisvc): template base llmisvcconfig files in the correct namespace by @NoOverflow in https://github.com/kserve/kserve/pull/6088
* fix(llmisvc): render presets against the merged configuration by @bartoszmajsak in https://github.com/kserve/kserve/pull/6126
* fix(llmisvc): match group backends by their referenced pool by @bartoszmajsak in https://github.com/kserve/kserve/pull/6149
* fix(llmisvc): release terminating members from owned routes by @bartoszmajsak in https://github.com/kserve/kserve/pull/6156
* fix(autogluon): prevent path traversal in model loading by @Wojciech-Rebisz in https://github.com/kserve/kserve/pull/5802
* fix(llmisvc): recognizes header case-insensitively by @bartoszmajsak in https://github.com/kserve/kserve/pull/6161
* fix(llmisvc): report HTTPRoutesReady after a route is observed by @bartoszmajsak in https://github.com/kserve/kserve/pull/6164
* fix(release): generate missing install manifests for v0.21.0-rc1 by @cjohannsen-cloudera in https://github.com/kserve/kserve/pull/6273

additions (21)

* feat(servingruntime): add resourceClaims support for DRA by @VedantMahabaleshwarkar in https://github.com/kserve/kserve/pull/5828
* feat: restructure CRD management for independent installation by @Jooho in https://github.com/kserve/kserve/pull/5843
* feat: integrate with cluster TLS security profile by @ugiordan in https://github.com/kserve/kserve/pull/5791
* feat: add canary traffic splitting to RawDeployment HTTPRoutes by @maskarb in https://github.com/kserve/kserve/pull/5912
* feat(llmisvc): add direct KEDA scaling by @0-Zaid-0 in https://github.com/kserve/kserve/pull/5839
* feat(transfor): inject the ca bundle env for httpx by @spolti in https://github.com/kserve/kserve/pull/5932
* feat(llmisvc): add rolloutStrategy for controlling rolling update beh… by @dagrayvid in https://github.com/kserve/kserve/pull/5916
* feat(llmisvc): validate rendered config templates by @bartoszmajsak in https://github.com/kserve/kserve/pull/5918
* feat(storage): add oci+fetch:// KServe-side OCI image pull (Step 3, #4083) by @kliukovkin in https://github.com/kserve/kserve/pull/5739
* feat: add ModelScope storage download support (ms:// URI scheme) by @xrwang8 in https://github.com/kserve/kserve/pull/5330
* feat(llmisvc): localModelCache support for LoRA adapters by @mholder6 in https://github.com/kserve/kserve/pull/5690
* feat(kernelcache): add kernelcache/mcv initial code donation by @spolti in https://github.com/kserve/kserve/pull/5590
* feat(autogluonserver): inject synthetic item ID for two-column ts by @Wojciech-Rebisz in https://github.com/kserve/kserve/pull/6009
* feat(transformer): allow ssl configuration on transformer by @spolti in https://github.com/kserve/kserve/pull/6045
* feat: reload rotated TLS certificates by @maskarb in https://github.com/kserve/kserve/pull/6106
* feat(kernelcache): add security verification framework by @Jooho in https://github.com/kserve/kserve/pull/6099
* feat(kernelcache): cert-mode signature verification by @Jooho in https://github.com/kserve/kserve/pull/6103
* feat(llmisvc): automatically label workloads with InferencePool ref by @pierDipi in https://github.com/kserve/kserve/pull/5624
* feat(kernelcache): add signing contract by @Jooho in https://github.com/kserve/kserve/pull/6118
* refactor(kernelcache): extract security data contracts into types package by @Jooho in https://github.com/kserve/kserve/pull/6130
* feat(api): add InferenceService tracing configuration by @maskarb in https://github.com/kserve/kserve/pull/6108

value changes (19)

* chore(llmisvc): migrate EndpointPickerConfig apiversion by @zdtsw in https://github.com/kserve/kserve/pull/5774
* feat(llmisvc): migrate WVA from VA CRD to annotation-based discovery by @vivekk16 in https://github.com/kserve/kserve/pull/5722
* chore: bump dulwich to >=1.2.5 in kserve-storage by @mholder6 in https://github.com/kserve/kserve/pull/5840
* feat(llmisvc): migrate deprecated flag to metrics-data-source plugin by @zdtsw in https://github.com/kserve/kserve/pull/5877
* fix(rbac): harden controller manager ClusterRoles by @mholder6 in https://github.com/kserve/kserve/pull/5785
* feat(llmisvc): migrate remaining --model-server-metrics-* flags for llm-d by @zdtsw in https://github.com/kserve/kserve/pull/5930
* chore(llmisvc): aligns additional url discovery by @bartoszmajsak in https://github.com/kserve/kserve/pull/5940
* deps: bump cryptography to >=48.0.1 by @bartoszmajsak in https://github.com/kserve/kserve/pull/5957
* fix(llmisvc): fully qualify opt-125m-cpu sample image and bump to v0.23.0 by @KillianGolds in https://github.com/kserve/kserve/pull/5970
* fix(agent): migrate AWS SDK from v1 to v2 by @spolti in https://github.com/kserve/kserve/pull/5438
* fix(pmmlserver): bump pyjnius to 1.7.0 for Python 3.13 support by @kliukovkin in https://github.com/kserve/kserve/pull/5978
* deps(llmisvc): bump llm-d images to the latest 0.10 release by @zdtsw in https://github.com/kserve/kserve/pull/6026
* refactor: kustomize image overrides and add deploy-dev-kind-localmodel. by @Jooho in https://github.com/kserve/kserve/pull/6060
* fix: update kserve install script for old version/add a new install script by @Jooho in https://github.com/kserve/kserve/pull/6061
* feat: improve autogluon artifact loading security by @ZabinskiMichal in https://github.com/kserve/kserve/pull/5803
* chore(deps): upgrade Envoy AI Gateway to v1.1.0 by @cjohannsen-cloudera in https://github.com/kserve/kserve/pull/6122
* feat(deps): upgrade golang to 1.26 by @spolti in https://github.com/kserve/kserve/pull/6127
* chore(build): stamp Go toolchain into tool cache key by @bartoszmajsak in https://github.com/kserve/kserve/pull/6146
* chore(deps): upgrade KEDA to v2.20.2 by @vivekk16 in https://github.com/kserve/kserve/pull/6153

constraints (10)

* feat: add support for Python 3.13 by @noah4477 in https://github.com/kserve/kserve/pull/5897
* feat(llmisvc): allow idleReplicaCount=0 for true KEDA scale-to-zero by @vivekk16 in https://github.com/kserve/kserve/pull/5996
* fix(llmisvc): grant configmap write RBAC for CA bundle sync by @cabrinha in https://github.com/kserve/kserve/pull/5965
* fix: support both full JWK and raw key formats in JWE decryption by @maskarb in https://github.com/kserve/kserve/pull/6034
* fix(httproute): restrict canary weights to predictor rules only by @maskarb in https://github.com/kserve/kserve/pull/5944
* fix(llmisvc): allow triggerAuthName without authModes for KEDA by @ThatsMrTalbot in https://github.com/kserve/kserve/pull/6004
* fix(rbac): add leader election role for localmodel controller by @mwaykole in https://github.com/kserve/kserve/pull/6120
* fix(deps): allow pyarrow to use newer versions > 20 by @spolti in https://github.com/kserve/kserve/pull/6125
* fix(llmisvc): grant events create/patch to the scheduler Role by @UgaTheDev in https://github.com/kserve/kserve/pull/6142
* feat: adding Power support for storage-initializer. by @Sunidhi-Gaonkar1 in https://github.com/kserve/kserve/pull/5235

defaults (1)

* refactor(llmisvc): default EPP scheduler config as presets, latest plugins by @zdtsw in https://github.com/kserve/kserve/pull/5921

removals (1)

* fix(quick-install): remove stray generated script by @Jooho in https://github.com/kserve/kserve/pull/6101

renames (1)

* feat(llmisvc): replace UDS tokenizer sidecar with vLLM render deployment by @vivekk16 in https://github.com/kserve/kserve/pull/5712

KServeをスタックに追加

対応が必要なリリースが出たときに、週次メールでお知らせします。今回のセキュリティパッチと破壊的変更も、その一例です。

スタックに追加 →

公式リリースノート ↗KServeのリリース一覧 →