# CloudNativePG v1.28.2

> Storage & Data · 2026-04-01

A maintenance release with correctness fixes, supply-chain improvements, and operator-visible behavior changes. It includes a PostgreSQL default version bump and a security fix that prevents role passwords from appearing in logs.

## Check if affected
- **[security]** PostgreSQL role password leak prevention
  - Applies during specific reconciliation phases.
  - PostgreSQL role passwords are no longer exposed in logs during specific reconciliation phases.

## Plan ahead
- **[deprecated]** Native (in-tree) Barman Cloud support deprecation timing
  - Applies if you use `native (in-tree) Barman Cloud support`.
  - removal planned in 1.30.0
  - The deprecation notice now states that `native (in-tree) Barman Cloud support` will be removed in CloudNativePG 1.30.0 rather than 1.29.0. Users are still encouraged to migrate to the `Barman Cloud Plugin`.

## Other recorded changes
- 23 (defect_corrected 14, value_changed 5, added 3, constraint_changed 1)

[Full analysis](https://ratatosk.io/en/releases/cloudnativepg/v1.28.2)

[Original release notes](https://github.com/cloudnative-pg/cloudnative-pg/releases/tag/v1.28.2)