platformchangelog.dev
43 tools

Platform Changelog: what shipped in platform engineering, developer experience and DevOps

feedbefore 2026-09-17patches hidden unless security or breaking
newest entries
2026-09-161 month ago
Kubernetes v1.37: Hardening Container Storage with Bind Mount Options and EmptyDir PermissionspostKubernetes v1.37 adds alpha support for bindMountOptions on volume mounts, letting users set noexec, nosuid and nodev on the bind mount the container runtime creates. It also adds an alpha mode field for emptyDir volumes, so permissions such as 01777 or 0750 can be set natively instead of via init containers. Both features sit behind the VolumeBindMountOptions and EmptyDirVolumeMode feature gates.platform teamsPlatform teams can enforce noexec and sticky-bit emptyDir permissions in pod specs, but must enable both alpha gates on the API server and kubelet and confirm runtimes advertise the mount_options runtime feature, since kubelets reject pods on nodes lacking support.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Jenkins Security Advisory 2026-09-16announcementJenkins published a security advisory dated 2026-09-16 listing 13 affected plugins, including Bitbucket Push and Pull Request, Bitbucket Server Integration, Coverage, Gitee, GitLab, Gradle, Keycloak Authentication, OWASP Dependency-Check, Pipeline: Groovy Libraries, Pipeline: Multibranch, Robot Framework, Script Security, and Warnings. The source text does not describe the vulnerabilities, their severity, or the fixed versions.platform teamsTeams running Jenkins with any of the listed plugins should check whether they have them installed and consult the full advisory for affected and fixed versions. The source text gives no details to confirm the scope of exposure.Jenkins security advisories ↗Jenkinswritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-09-151 month ago
Crossplane2.4.1patchsecurity+*!!!!Crossplane v2.4.1 updates the Go toolchain to 1.26.7, google.golang.org/grpc to v1.83.2, and golang.org/x/crypto to v0.56.0 to pick up upstream CVE fixes, including the gRPC advisory GHSA-2v4p-qf9q-27wj. It also bumps the Crossplane apis module to v2.4.0. The release changes how package revisions take control of established objects, so an incoming revision can take over CRDs from the revision it replaces.platform teamsPlatform teams upgrading to v2.4.1 get the dependency CVE fixes without changes to their own configuration. Package upgrades that previously could leave a new provider unhealthy with a cannot establish control of object error should now hand off automatically, without deleting the stale revision or editing CRD owner references by hand.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Crossplanev2.3.6patchsecurity+*!!!!Crossplane v2.3.6 updates the Go toolchain to 1.26.7 and bumps google.golang.org/grpc to v1.83.2 and golang.org/x/crypto to v0.56.0, which the release notes say pick up upstream CVE fixes, including a gRPC advisory. It also fixes a package revision hand-off bug where an outgoing revision could fail to release CRD control, leaving the incoming provider stuck with cannot establish control of object and no pod created.platform teamsPlatform teams running Crossplane packages should pick up this patch, since providers stuck on a replaced revision previously needed manual CRD owner-reference edits or deletion of the stale revision. The security content is dependency bumps only, not a vulnerability in Crossplane's own code.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Crossplanev2.2.6patchsecurity+*!!!!Crossplane v2.2.6 updates the Go toolchain to 1.26.7 and bumps google.golang.org/grpc to v1.83.2 and golang.org/x/crypto to v0.56.0, including a gRPC advisory fix. It also changes package revision handoff so a new revision takes control of CRDs from the revision it replaces, fixing a case where the incoming provider's pod was never created and needed manual cleanup.platform teamsPlatform teams upgrading to v2.2.6 get dependency CVE fixes, and provider package upgrades no longer stall with a cannot establish control of object error that previously required deleting the stale revision or editing CRD owner references by hand. The security content is dependency bumps only, not a vulnerability in Crossplane's own code.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Kubernetes v1.37: Pod-Level Resource Managers graduated to BetapostKubernetes v1.37 graduates the Pod-Level Resource Managers feature to Beta, disabled by default and controlled by the PodLevelResourceManagers feature gate. The Topology Manager, CPU Manager and Memory Manager can now use pod-level resource declarations when making hardware placement decisions. The v1 PodResources gRPC service also adds top-level cpu_ids and memory fields for pod-level exclusive assignments.platform teamsPlatform teams running latency-sensitive workloads can reserve exclusive NUMA-aligned CPU and memory for primary containers while placing non-Guaranteed sidecars in a pod-isolated shared pool. Teams that opt in should check monitoring and device plugins that read PodResources, since they can now query pod-level assignments without double-counting containers.Kubernetes Blog ↗editorCorrection 2026-10-20: this was listed as a Amazon EKS v1.37 release by mistake. It is Kubernetes Blog coverage, not release notes from the project.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Kubernetes v1.37: Native Histograms Graduates to BetapostKubernetes v1.37 graduates native histogram support for Kubernetes metrics to Beta and enables it by default. Components expose classic histogram buckets alongside Prometheus native histogram spans in the same Protobuf payload, using a bucket factor of 1.1 and a cap of 160 buckets. Prometheus 3.x users can enable scraping per job with scrape_native_histograms and keep classic series with always_scrape_classic_histograms.platform teamsPlatform teams running Prometheus should plan to migrate dashboards and alerts from _bucket queries to native histogram queries while keeping always_scrape_classic_histograms true during transition. Rollback is available by setting scrape_native_histograms to false or disabling the feature gate.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-09-101 month ago
Kubernetes v1.37: Scheduler Preemption for In-Place Pod Resize (Alpha)postKubernetes v1.37 adds an Alpha feature behind the InPlacePodVerticalScalingSchedulerPreemption feature gate that lets the kube-scheduler preempt lower-priority Pods on the same node so that a running Pod's deferred in-place resize can be actuated. Previously a Deferred resize could remain pending indefinitely until node capacity freed up. The Kubelet delegates this preemption decision to the scheduler rather than evicting locally.platform teamsPlatform teams bin-packing lower-priority batch workloads can allow higher-priority Pods to scale up in place without restarts, but must enable the gate across kube-apiserver, kube-scheduler and kubelet on v1.37 clusters. The feature is Alpha, and the new spec.podPreemptionPolicy node field lets controllers opt specific nodes out of resize preemption.Kubernetes Blog ↗editorCorrection 2026-10-20: this was listed as a Amazon EKS v1.37 release by mistake. It is Kubernetes Blog coverage, not release notes from the project.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Kubernetes v1.37: Introducing Node Lifecycle ConditionspostKubernetes v1.37 reserves five well-known Node condition types: DrainInProgress, Drained, MaintenancePlanned, MaintenanceInProgress, and GracefulNodeShutdownInProgress. It also adds an Alpha NodeLifecycleConditions feature gate, disabled by default, which the release describes as a no-op in v1.37 since no core component reads the conditions yet. Administrators or authorized controllers are responsible for setting and clearing them.platform teamsPlatform teams can start publishing these conditions today from drain and maintenance automation to give dashboards, alerts and tooling a common status signal. No core controller changes behavior based on them in this release, so scheduling and eviction still rely on existing mechanisms.Kubernetes Blog ↗editorCorrection 2026-10-20: this was listed as a Amazon EKS v1.37 release by mistake. It is Kubernetes Blog coverage, not release notes from the project.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-09-081 month ago
Kubernetes v1.37: Advancing Workload-Aware SchedulingpostKubernetes v1.37 graduates the core Workload and PodGroup APIs, which enable gang scheduling, to Beta, along with workload-aware preemption and shared DRA ResourceClaims for PodGroups. The release adds a CompositePodGroup API for multi-level hierarchical scheduling, and makes minCount mutable so controllers can resize gangs. The alpha v1alpha2 API was replaced by v1alpha3, and the disruptionMode values were renamed from PodGroup and Pod to all and single.platform teamsPlatform teams running batch or AI/ML workloads on Kubernetes should plan for the v1alpha2 to v1alpha3 breaking change and the disruptionMode rename if they use the alpha APIs. Teams can also begin evaluating native gang scheduling and hierarchical scheduling for JobSet and LeaderWorkerSet workloads.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
daily email

One short email each morning: what shipped, what breaks, and a link to each change. Unsubscribe in one click. Privacy.

statuslast 30 days for lines
tools tracked43releases in registry964released in the last 30 days106entries published336breaking change lines18security lines84
change typestwo-column gutter, like git status
  • +addedNew functionality.
  • ~changedExisting behavior changed.
  • -deprecatedStill works, scheduled for removal.
  • -removedDecommissioned, gone in this version.
  • *fixedA defect corrected.
  • !securityA vulnerability closed or a dependency patched for one.
  • !breakingFlag in the first column; the change needs action before upgrading.
filter
categoryallidp & portalsai agents on platformci/cdobservabilitysupply chaincost & governancereports & dx dataenterprise app platforms
showmajor onlyreleasescase studiespostmortemsinclude patches