# Dapr v1.16.21

> Orchestration & Management · 2026-10-21

A security release updates Go so `crypto/x509` rejects certificate chains that pass through compromised eMudhra intermediate CA keys. This protects affected outbound TLS connections.

## Action needed
- **[security]** `Go 1.26.10` build and certificate-chain rejection
  - Dapr is now built with `Go 1.26.10`, whose `crypto/x509` package rejects any certificate chain that passes through the compromised keys. This protects affected outbound TLS connections.

[Full analysis](https://ratatosk.io/en/releases/dapr/v1.16.21)

[Original release notes](https://github.com/dapr/dapr/releases/tag/v1.16.21)