27 August 2026

23 releases across 31 tracked projects, including 3 with security fixes.

One week of Release Radar, 8 stories, as published.

Argo CD 3.4.8

Release Signatures and Provenance · All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify. · Release Notes Blog Post…

Why it matters — Patch release — routine upgrade. Fixes CVE-2026-49978, CVE-2026-14257, CVE-2026-69152 — patch promptly.

GitHub · argoproj/argo-cd · 27 August 2026 · Read the original →

Networking

Envoy 1.39.1

Summary of changes · Security fixes · CVE-2026-73511: url normalization: strip path parameters from individual path segments per RFC 3986 section 3.3. Revert with envoy.reloadable_features.strip_path_parameters_per_segment…

Why it matters — Patch release — routine upgrade. Fixes CVE-2026-73511, CVE-2026-73512, CVE-2026-73513 — patch promptly. Also released on 2 other maintenance lines: 1.37.6, 1.36.10.

GitHub · envoyproxy/envoy · 27 August 2026 · Read the original →

Orchestration

Kubernetes 1.37.0

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

Why it matters — Minor release — new functionality, backward compatible. Also released on 1 other maintenance line: 1.34.11.

GitHub · kubernetes/kubernetes · 27 August 2026 · Read the original →

Runtimes

Node.js 26.8.0

Notable Changes · \[74234ee30e] - (SEMVER-MINOR) benchmark: add --analyze mode to compare.js (James M Snell) #65416 · \[4232997fa2] - crypto: update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495…

Why it matters — Minor release — new functionality, backward compatible. Also released on 1 other maintenance line: 26.8.1.

GitHub · nodejs/node · 27 August 2026 · Read the original →

IaC

Terraform 1.16.0

1.16.0 (August 26, 2026) · NEW FEATURES · Terraform now stores planned private data for providers, allowing provider-specific state to be preserved across plan and apply. · terraform_data: The new store block can hold ephemeral and sensitive values across plan and apply…

Why it matters — Minor release — new functionality, backward compatible.

GitHub · hashicorp/terraform · 27 August 2026 · Read the original →

Runtimes

Rust 1.98.0

Allow shortening lifetime of &mut when unsize-coercing, even in an invariant position. For example, you can now coerce a Cell to a Cell . Such shortenings were already previously allowed when coercing a &mut to a &, or coercing a & to a &…

Why it matters — Minor release — new functionality, backward compatible.

GitHub · rust-lang/rust · 27 August 2026 · Read the original →

Networking

Traefik 3.7.12

Important: Please read the migration guide. · Advisory GHSA-cjr6-pf59-jq29 · Advisory GHSA-7ghq-v6jf-g56c · Advisory GHSA-rf44-j88r-hh8c · [fastproxy] Bump github.com/valyala/fasthttp to v1.73.0 · [file] Include the filename in file provider configuration errors…

Why it matters — Patch release — routine upgrade. Notes mention breaking changes or deprecations — read before upgrading.

GitHub · traefik/traefik · 27 August 2026 · Read the original →

Also Shipped

7 more releases, nothing urgent

Data: ClickHouse 26.3.23.7-lts, ClickHouse 25.8.33.6-lts · Networking: Envoy 1.38.4, Traefik 2.11.56 · Orchestration: Argo CD 3.5.2, Kubernetes 1.35.8 · Runtimes: Node.js 24.20.0

GitHub · 27 August 2026

Read the changelog before you bump the tag.

8 stories, every Thursday

Published here every week. Follow by RSS to get it as it lands.

Subscribe by RSS All issues

← Previous issue Next issue →