# Dapr v1.17.17

> Orchestration & Management · 2026-10-21

A security and correctness maintenance release refreshes expired Entra ID credentials for Redis connections. It also updates Go so `crypto/x509` rejects certificate chains that pass through compromised keys.

## Action needed
- **[security]** `Go 1.26.10` certificate-chain validation
  - Dapr is built with `Go 1.26.10`, whose `crypto/x509` package rejects certificate chains that pass through compromised keys.

## Other recorded changes
- 1 (defect_corrected 1)

[Full analysis](https://ratatosk.io/en/releases/dapr/v1.17.17)

[Original release notes](https://github.com/dapr/dapr/releases/tag/v1.17.17)