# Dapr v1.18.8

> Orchestration & Management · 2026-10-21

A maintenance release focused on correctness, observability, resource cleanup, and a security-relevant Go toolchain update. It does not introduce any newly required operator configuration.

## Action needed
- **[security]** `Go 1.26.10` toolchain update
  - Dapr is built with `Go 1.26.10`. Its `crypto/x509` package rejects certificate chains that pass through compromised keys.

## Other recorded changes
- 5 (defect_corrected 5)

[Full analysis](https://ratatosk.io/en/releases/dapr/v1.18.8)

[Original release notes](https://github.com/dapr/dapr/releases/tag/v1.18.8)