# CloudNativePG v1.30.0

> Storage & Data · 2026-06-29

A substantial feature and security release adds Kubernetes and PostgreSQL capabilities while tightening validation, compatibility, and defaults. It also includes correctness fixes and security changes affecting pooled connections, instance-manager endpoints, and role password handling.

## Action needed
- **[security · critical]** Pooled connection `search_path` pinning, `CVE-2026-55769` and `GHSA-x8c2-3p4r-v9r6`
  - For `CVE-2026-55769` and `GHSA-x8c2-3p4r-v9r6`, the operator now pins `search_path = pg_catalog, public, pg_temp` on every pooled connection.
- **[security · high]** SCRAM-SHA-256 encoding for cleartext role passwords, `CVE-2026-55765` and `GHSA-w3gf-xc94-wvmj`
  - For `CVE-2026-55765` and `GHSA-w3gf-xc94-wvmj`, the operator now SCRAM-SHA-256 encodes cleartext role passwords.
- **[security]** Certificate matching for sensitive instance-manager endpoints, `GHSA-7qwx-x8ff-3px9`
  - For `GHSA-7qwx-x8ff-3px9`, the instance manager rejects requests to sensitive endpoints that do not present a matching certificate.

## Check if affected
- **[breaking]** Immutable `cluster` references
  - Applies if you configure `cluster`.
  - The `cluster` reference is now immutable on the `Database`, `Pooler`, `Publication`, `Subscription`, and `ScheduledBackup` resources.

## Plan ahead
- **[deprecated]** Native (in-tree) Barman Cloud support removal deferred
  - Applies if you use `native (in-tree) Barman Cloud support`.
  - removal planned in 1.31.0
  - Native (in-tree) Barman Cloud support will be removed in CloudNativePG 1.31.0 rather than 1.30.0. The change concerns the Barman Cloud Plugin.
- **[deprecated]** `status.latestGeneratedNode` deprecation
  - Applies if you use `status.latestGeneratedNode`.
  - `status.latestGeneratedNode` is deprecated.

## Other recorded changes
- 48 (defect_corrected 33, added 9, value_changed 4, constraint_changed 2)

[Full analysis](https://ratatosk.io/en/releases/cloudnativepg/v1.30.0)

[Original release notes](https://github.com/cloudnative-pg/cloudnative-pg/releases/tag/v1.30.0)