03 September 2026

27 releases across 31 tracked projects, including 2 with security fixes.

One week of Release Radar, 8 stories, as published.

Grafana 12.4.10

What's new highlights · Security: Fix CVE-2026-14199 · Security: Fix CVE-2026-19475 · Dashboards: Fix adhoc and groupby variable datasource on UI import · Dashboards: Fix version dates and user display names in the legacy version history page

Why it matters — Patch release — routine upgrade. Fixes CVE-2026-14199, CVE-2026-19475 — patch promptly. Also released on 2 other maintenance lines: 13.1.5, 13.2.1.

GitHub · grafana/grafana · 03 September 2026 · Read the original →

Security

Vault 2.1.0

September 01, 2026 · core: Update go.etcd.io/etcd/client/pkg/v3 to v3.7.1 to fix security vulnerability GO-2026-6107. · core: Update software.sslmate.com/src/go-pkcs12 to v0.7.2 to fix security vulnerability GO-2026-5052…

Why it matters — Minor release — new functionality, backward compatible. Release notes reference security fixes.

GitHub · hashicorp/vault · 03 September 2026 · Read the original →

Data

Valkey 9.0.6

Valkey 9.0.6 - Released Tue 01 September 2026 · Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. · Security Fixes…

Why it matters — Patch release — routine upgrade. Release notes reference security fixes. Also released on 2 other maintenance lines: 8.1.10, 8.0.11.

GitHub · valkey-io/valkey · 03 September 2026 · Read the original →

IaC

Pulumi 3.261.0

[engine] Support state migration callbacks on resource registrations #24328 · [cli/env] Add pulumi env setup {aws,azure,gcp} to configure cloud OIDC trust and create the ESC environments that use it #23911…

Why it matters — Minor release — new functionality, backward compatible.

GitHub · pulumi/pulumi · 03 September 2026 · Read the original →

Observability

OpenTelemetry Collector 0.160.0

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.160.0 · End User Changelog · 🚩 Deprecations 🚩 · pkg/confighttp: Deprecate flat keepalive fields in client and server config in favor of the new keepalive section…

Why it matters — Minor release — new functionality, backward compatible. Notes mention breaking changes or deprecations — read before upgrading.

GitHub · open-telemetry/opentelemetry-collector · 03 September 2026 · Read the original →

Networking

Istio 1.31.0

Release Notes

Why it matters — Minor release — new functionality, backward compatible. Also released on 1 other maintenance line: 1.30.4.

GitHub · istio/istio · 03 September 2026 · Read the original →

IaC

Terraform 1.16.1

1.16.1 (September 2, 2026) · cloud: Fixed a bug causing the CLI to pause indefinitely after a run task failure with pending policy evaluations · Support referencing modules containing dynamic sources in Terraform Test…

Why it matters — Patch release — routine upgrade.

GitHub · hashicorp/terraform · 03 September 2026 · Read the original →

Also Shipped

7 more releases, nothing urgent

Data: ClickHouse 26.3.29.7-lts, Valkey 9.1.2, ClickHouse 26.3.28.5-lts · IaC: Pulumi 3.260.0 · Networking: Istio 1.29.7 · Observability: Grafana 13.0.8 · Orchestration: Argo CD 3.5.2

GitHub · 03 September 2026

Read the changelog before you bump the tag.

8 stories, every Thursday

Published here every week. Follow by RSS to get it as it lands.

Subscribe by RSS All issues

← Previous issue Next issue →