platformchangelog.dev
43 tools

Platform Changelog: what shipped in platform engineering, developer experience and DevOps

feedbefore 2026-06-10patches hidden unless security or breaking
newest entries
2026-05-275 months ago
Jenkins Security Advisory 2026-05-27announcementJenkins published a security advisory dated 2026-05-27 listing 11 plugins as affected, including Active Directory, Credentials Binding, GitHub Integration, LDAP and Pipeline: Groovy Libraries. The source text gives no vulnerability descriptions, severity ratings, CVE identifiers or fixed versions.platform teamsTeams running Jenkins should check whether any of the listed plugins are installed and follow the advisory for fixed versions and remediation. The source text does not say what the fixes are.Jenkins security advisories ↗Jenkinswritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-05-265 months ago
Reconciling the Past: Correcting Records for Unfixed Kubernetes CVEsannouncementThe Kubernetes project says CVE records for three older vulnerabilities (CVE-2020-8561, CVE-2020-8562, CVE-2021-25740) incorrectly listed a fixed version. The Security Response Committee will correct the records on June 1, 2026, marking them as unfixed and affecting all versions. The project says the issues are architectural trade-offs it will not fix in code, and it lists configuration mitigations for each.platform teamsVulnerability scanners may start flagging these issues on clusters that were previously clean, so platform teams should expect new findings. Teams should apply the listed mitigations, including log verbosity and profiling settings, a caching DNS resolver on control plane nodes, and an RBAC audit to remove Endpoints write access from broad roles.Kubernetes Blog ↗Amazon EKSwritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-05-046 months ago
Kubernetes v1.36: Admission Policies That Can't Be DeletedpostKubernetes v1.36 adds an alpha feature, manifest-based admission control, that lets admission webhooks and CEL-based ValidatingAdmissionPolicies be loaded from files on disk at API server startup via a staticManifestsDir field in the AdmissionConfiguration file. Manifest objects must have names ending in .static.k8s.io, and the files are watched at runtime with atomic swaps, keeping the previous configuration if validation fails. The feature can also be used to write policies that block modification or deletion of API-based admission resources.platform teamsPlatform teams can make baseline admission policies active from API server start and protect them from deletion by cluster admins, without depending on API state. Manifest-based configurations are self-contained: they cannot reference API resources, webhooks must be URL-only, and multiple API servers each load their own files with no cross-server sync.Kubernetes Blog ↗editorCorrection 2026-10-20: this was listed as a Kubernetes MCP Server v1.36 release by mistake. It is Kubernetes Blog coverage, not release notes from the project.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Jenkins Security Advisory 2026-04-29announcementJenkins published a security advisory dated 2026-04-29 listing seven affected plugins: Credentials Binding, GitHub, GitHub Branch Source, HTML Publisher, Matrix Authorization Strategy, Microsoft Entra ID, and Script Security. The source text does not describe the vulnerabilities, their severity, or the fixed versions.platform teamsPlatform teams running Jenkins should check whether any of these plugins are installed and apply the fixed versions from the full advisory. The source text does not state which versions are affected or fixed.Jenkins security advisories ↗Jenkinswritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
daily email

One short email each morning: what shipped, what breaks, and a link to each change. Unsubscribe in one click. Privacy.

statuslast 30 days for lines
tools tracked43releases in registry964released in the last 30 days106entries published336breaking change lines18security lines84
change typestwo-column gutter, like git status
  • +addedNew functionality.
  • ~changedExisting behavior changed.
  • -deprecatedStill works, scheduled for removal.
  • -removedDecommissioned, gone in this version.
  • *fixedA defect corrected.
  • !securityA vulnerability closed or a dependency patched for one.
  • !breakingFlag in the first column; the change needs action before upgrading.
filter
categoryallidp & portalsai agents on platformci/cdobservabilitysupply chaincost & governancereports & dx dataenterprise app platforms
showmajor onlyreleasescase studiespostmortemsinclude patches