30 July 2026

15 releases across 31 tracked projects, including 2 with security fixes.

One week of Release Radar, 8 stories, as published.

Node.js 24.18.1

This is a security release. · Notable Changes · (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High · (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High…

Why it matters — Patch release — routine upgrade. Fixes CVE-2026-56846, CVE-2026-56848, CVE-2026-58043 — patch promptly. Also released on 1 other maintenance line: 22.23.2.

GitHub · nodejs/node · 30 July 2026 · Read the original →

Data

Redis 8.4.5

SECURITY: There are security fixes in the release. · Security fixes · A crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution…

Why it matters — Patch release — routine upgrade. Release notes reference security fixes. Also released on 4 other maintenance lines: 7.4.10, 7.2.15, 6.2.23, 8.10.0.

GitHub · redis/redis · 30 July 2026 · Read the original →

Networking

Cilium 1.20.0

🎉 Release Announcement 🎉: We are excited to announce the Cilium 1.20.0 release! · More than 2,660 new commits have landed in this release, supported by a community of over 1,100 contributors and more than 24,800 GitHub stars! 🤩…

Why it matters — Minor release — new functionality, backward compatible.

GitHub · cilium/cilium · 30 July 2026 · Read the original →

IaC

Pulumi 3.255.0

[cli] Add an --extension flag to package commands for extension-parameterized packages, reinstalled from Pulumi.yaml on pulumi install · [cli] Project files to disk and surface their paths as environment variables for all output formats when opening an ESC environment #23993…

Why it matters — Minor release — new functionality, backward compatible.

GitHub · pulumi/pulumi · 30 July 2026 · Read the original →

Containers

Docker Engine client/v0.5.1

client/pkg/jsonmessage: Display: fix godoc link. moby/moby#53070 · client: ServiceCreate, ServiceUpdate: fix duplicate and 'unkown' platforms. moby/moby#53012 · client: ServiceInspect, ContainerCommit: omit optional query args if not set. moby/moby#53010 · golangci-lint: enable perfsprint linter…

Why it matters — Patch release — routine upgrade.

GitHub · moby/moby · 30 July 2026 · Read the original →

Networking

Traefik 2.11.53

Important: Please read the migration guide. · Advisory GHSA-3ccp-42pg-hgv6 · [middleware, k8s/crd] Add missing ErrorRequestHeaders field to CRDs · [server] Defer the CONNECT payload until the backend accepts the tunnel · [server] Bump google.golang.org/grpc to v1.82.1…

Why it matters — Patch release — routine upgrade. Notes mention breaking changes or deprecations — read before upgrading.

GitHub · traefik/traefik · 30 July 2026 · Read the original →

Orchestration

etcd 3.6.14

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes). · macOS (Darwin) · etcd uses gcr.io/etcd-development/etcd as a primary container registry, and quay.io/coreos/etcd as secondary.

Why it matters — Patch release — routine upgrade. Notes mention breaking changes or deprecations — read before upgrading.

GitHub · etcd-io/etcd · 30 July 2026 · Read the original →

Also Shipped

Also shipped: 3 more releases

Data: Redis 8.2.8 · Orchestration: etcd 3.5.33 · Runtimes: Node.js 26.5.1

GitHub · 30 July 2026

A good week to test your rollback procedures.

8 stories, every Thursday

Published here every week. Follow by RSS to get it as it lands.

Subscribe by RSS All issues

← Previous issue Next issue →