# CloudNativePG v1.28.0

> Storage & Data · 2025-12-09

This release adds declarative management and security configuration, changes defaults, broadens supported operations, and includes correctness fixes. It also updates supported Kubernetes and PostgreSQL versions and adds configuration options for backups, TLS, monitoring, and reporting.

## Check if affected
- **[breaking]** The replica `tcp_user_timeout` default
  - Applies if you run replica instances.
  - The default `tcp_user_timeout` is now 5 seconds for replica instances, improving network failure detection.
- **[breaking]** Cluster-wide `postgres` and `operator` user settings, replaced
  - Applies if you configure `postgres` or `operator`.
  - The previous cluster-wide `postgres` and `operator` user settings are replaced by granular `securityContext` and `containerSecurityContext` configuration.
- **[breaking]** The PgBouncer `auth_dbname` default
  - Applies if you use PgBouncer.
  - For PgBouncer integration, `auth_dbname` is automatically set to the `pgbouncer` database, simplifying authentication setup.

## Other recorded changes
- 30 (added 10, defect_corrected 9, value_changed 6, constraint_changed 4, renamed 1)

[Full analysis](https://ratatosk.io/en/releases/cloudnativepg/v1.28.0)

[Original release notes](https://github.com/cloudnative-pg/cloudnative-pg/releases/tag/v1.28.0)