# CloudNativePG v1.29.2

> Storage & Data · 2026-06-29

A maintenance release with security fixes, stricter validation, compatibility updates for newer Kubernetes versions, and a changed PostgreSQL default. It also addresses correctness issues across cluster operations, backups, plugins, and resource handling.

## Check if affected
- **[security · critical]** Pinned `search_path` on pooled connections
  - Applies if you use pooled connections.
  - The operator now pins `search_path` to `pg_catalog, public, pg_temp` on every pooled connection. This addresses `CVE-2026-55769` and `GHSA-x8c2-3p4r-v9r6`.
- **[security · high]** `SCRAM-SHA-256` encoding for cleartext role passwords
  - Applies if you configure `cnpg.io/passwordPassthrough`.
  - The operator now encodes cleartext role passwords with `SCRAM-SHA-256` before issuing `CREATE` or `ALTER ROLE ... PASSWORD`. This addresses `CVE-2026-55765` and `GHSA-w3gf-xc94-wvmj`.
- **[security]** Validating webhook rejection and write-site checks
  - Applies if you use the values that are rejected by the validating webhook.
  - The validating webhook now rejects these values, and the write site checks them again.
- **[breaking]** Immutable `cluster` references
  - Applies if you use the `cluster` reference on `Database`, `Pooler`, `Publication`, `Subscription`, or `ScheduledBackup` resources.
  - The `cluster` reference is now immutable on `Database`, `Pooler`, `Publication`, `Subscription`, and `ScheduledBackup` resources.

## Plan ahead
- **[deprecated]** Native (in-tree) Barman Cloud support removal notice
  - Applies if you use native (in-tree) Barman Cloud support.
  - removal planned in 1.31.0
  - The deprecation notice now states that native (in-tree) Barman Cloud support will be removed in CloudNativePG 1.31.0 instead of 1.30.0.

## Other recorded changes
- 38 (defect_corrected 31, added 3, value_changed 3, constraint_changed 1)

[Full analysis](https://ratatosk.io/en/releases/cloudnativepg/v1.29.2)

[Original release notes](https://github.com/cloudnative-pg/cloudnative-pg/releases/tag/v1.29.2)