Platform Changelog

feedbefore 2026-09-26all releases, patches included

2026-09-251 month ago

OpenFeaturev0.17.0minorbreakingsecurity++~*!flagd: v0.17.0

Pulumiv3.265.0minor++****************Pulumi v3.265.0 adds a pulumi logout --all --delete-credentials-key option, Authenticode signing for Windows CLI and language host binaries, and a PCL error for literals that do not match a schema constant or enum. It also fixes 21 items, mostly in the PCL type checker and interpreter, code generation for Python, Node.js and Go SDKs, and engine handling of unknown outputs when a dependency fails during a --continue-on-error update.platform teamsTeams using Pulumi with --continue-on-error can now rely on Unknown=true being reported for skipped Read and Import steps, so SDK consumers no longer treat empty outputs as real values. Windows CLI binaries are now signed, which may matter for install policies.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Backstagev1.55.2patch*

Backstagev1.54.9patch*

Backstagev1.50.7patch*

2026-09-241 month ago

Open Policy Agentv1.21.0minor++++~~~~~~~-******

2026-09-231 month ago

ServiceNow SDK4.13.0minor++**SDK 4.13.0ServiceNow SDK 4.13.0 adds support for adding an index to an existing table during table augmentation. It also changes augmentation so it no longer overwrites platform-set columns such as access flags. The release fixes an inline script scriptActive field update and a label cache bug that could produce stale labels.platform teamsTeams building ServiceNow apps through the SDK can add indexes to existing tables without losing platform-managed columns like access flags. Teams should review any augmentation scripts that relied on the earlier overwrite behavior.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Pulumiv3.264.0minor++++++************

Salesforce CLI2.151.7minor++****Salesforce CLI 2.151.7 shows deploy notifications in both JSON and human-readable table output, and adds Refresh Token Rotation support so simultaneous commands no longer fail with a token-processing error. It also fixes plugin install, uninstall and update failures on Windows paths with spaces, false-positive diffs for Aura CSS edits, handling of AiAgentDefinitionVersion names containing #, and ENOENT errors on standalone Unix tarball installs.platform teamsPipelines that run project deploy start now see deploy-level notifications such as ApexApiVersionRetirement in the table output, and connected apps with RTR enabled work without extra flags. Teams using AI agent metadata can deploy and retrieve versioned agent definitions without the earlier delimiter errors.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

kagentv0.10.2patch~***

2026-09-221 month ago

Crossplanev2.4.2patchsecurity+**!Crossplane v2.4.2 ships fixes for ServiceAccount ownership when package revisions become active, and a change so that a claim fails closed when it cannot list its XRD. The release also updates the OpenTelemetry OTLP trace exporter module to v1.45.0 to address a security issue in that dependency.platform teamsTeams running Crossplane 2.4 get corrected ServiceAccount ownership handover during package revision changes and stricter behavior when XRD listing fails. The security item is a dependency bump, not a fix in Crossplane's own code.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Jenkins2.583minor+++*Jenkins 2.583 adds initial implementations of a new dashboard list and a new builds list for the experimental Dashboard and Job UIs. It also adds a 'Success' banner on saving the Manage Jenkins page and fixes QueryParameterMap failing on parameters without a value.platform teamsPlatform teams running Jenkins see only experimental UI changes behind an opt-in interface, plus a bug fix for parameters with no value. Nothing here changes pipelines, APIs or operations, so no planning is needed.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Tektonv1.15.3patch*Pipeline release v1.15.3 "Toyger Orisa" LTSTekton Pipelines v1.15.3, an LTS patch release, was published on 2026-09-22. The condensed release notes list one fix that allows tt.params as a valid variable-reference prefix, plus an examples update, with 19 maintenance changes omitted.platform teamsPlatform teams using Tekton pipelines that reference parameters through the tt.params prefix will see that reference accepted after this patch. Otherwise the source describes no other concrete change for teams that run or evaluate Tekton.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

2026-09-211 month ago

Backstagev1.55.1patch**

2026-09-201 month ago

Jenkins2.582minor+**Jenkins 2.582 adds a new root certificate, removes an expired one, and updates the description of v2. It also fixes plain text log output dropping trailing partial lines and fixes OpenSearch XML content-type with a moz:SearchForm addition.platform teamsTeams running Jenkins controllers should check the certificate change if their setup depends on the affected root certificate. The log output fix may matter for pipelines that parse plain text logs.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

2026-09-181 month ago

Kubernetes MCP Serverv0.0.67patchbreaking++++++++++++-*****

Argo Workflows4.1.4patchsecurity~~~~****!!!!Argo Workflows v4.1.4 was released with two changes, one added and one other, and one of them is marked breaking. The release notes provided do not describe the specific changes, pointing readers to the upgrading guide, GitHub issues, and the project blog and changelog.platform teamsPlatform teams running Argo Workflows should read the upgrading guide before rolling out v4.1.4, since a breaking change is flagged. The source text does not name the affected behavior, so impact cannot be assessed from this entry alone.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Argo Workflowsv4.0.12patchsecurity~~~****!!Argo Workflows v4.0.12 was released on 2026-09-18. The release notes list two changes, one added and one other, and mark one of them as breaking, but the condensed notes do not describe the changes themselves. They point readers to the upgrading guide and the blog and changelog for details.platform teamsPlatform teams running Argo Workflows should read the upgrading guide before rolling out this patch, since a breaking change is flagged. The source text does not say what the breaking change is.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

2026-09-161 month ago

Pulumiv3.263.0minor+++++******

2026-09-151 month ago

Crossplane2.4.1patchsecurity+*!!!!Crossplane v2.4.1 updates the Go toolchain to 1.26.7, google.golang.org/grpc to v1.83.2, and golang.org/x/crypto to v0.56.0 to pick up upstream CVE fixes, including the gRPC advisory GHSA-2v4p-qf9q-27wj. It also bumps the Crossplane apis module to v2.4.0. The release changes how package revisions take control of established objects, so an incoming revision can take over CRDs from the revision it replaces.platform teamsPlatform teams upgrading to v2.4.1 get the dependency CVE fixes without changes to their own configuration. Package upgrades that previously could leave a new provider unhealthy with a cannot establish control of object error should now hand off automatically, without deleting the stale revision or editing CRD owner references by hand.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Crossplanev2.3.6patchsecurity+*!!!!Crossplane v2.3.6 updates the Go toolchain to 1.26.7 and bumps google.golang.org/grpc to v1.83.2 and golang.org/x/crypto to v0.56.0, which the release notes say pick up upstream CVE fixes, including a gRPC advisory. It also fixes a package revision hand-off bug where an outgoing revision could fail to release CRD control, leaving the incoming provider stuck with cannot establish control of object and no pod created.platform teamsPlatform teams running Crossplane packages should pick up this patch, since providers stuck on a replaced revision previously needed manual CRD owner-reference edits or deletion of the stale revision. The security content is dependency bumps only, not a vulnerability in Crossplane's own code.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Crossplanev2.2.6patchsecurity+*!!!!Crossplane v2.2.6 updates the Go toolchain to 1.26.7 and bumps google.golang.org/grpc to v1.83.2 and golang.org/x/crypto to v0.56.0, including a gRPC advisory fix. It also changes package revision handoff so a new revision takes control of CRDs from the revision it replaces, fixing a case where the incoming provider's pod was never created and needed manual cleanup.platform teamsPlatform teams upgrading to v2.2.6 get dependency CVE fixes, and provider package upgrades no longer stall with a cannot establish control of object error that previously required deleting the stale revision or editing CRD owner references by hand. The security content is dependency bumps only, not a vulnerability in Crossplane's own code.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Backstagev1.55.0minorsecurity++++++++++++++++!!Backstage v1.55.0 was released with 53 changes, seven of which are security fixes across several auth, catalog, proxy, scaffolder and TechDocs backend packages. The other changes are mostly fixes and additions, including new GitLab and GitHub scaffolder actions, a scaffolder task worker fix, and a default MCP server that is now always exposed at /api/mcp-actions/v1.platform teamsPlatform teams running Backstage should plan to upgrade to pick up the security fixes in the auth, proxy and scaffolder packages. Teams using the MCP actions endpoint or the GitLab scaffolder actions should check the changed behavior before upgrading.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Crossplanev1.20.13patchsecurity!!!Crossplane v1.20.13 was released with four changes, three of them security-related. The security content is dependency updates: the Go toolchain is bumped to 1.26.7, google.golang.org/grpc is updated to v1.83.2, and a set of vulnerable dependencies is updated, including the gRPC advisory GHSA-2v4p-qf9q-27wj.platform teamsPlatform teams running Crossplane 1.20 should plan to pick up this patch release, since it carries upstream CVE fixes. The changes are dependency and toolchain updates with no vulnerability in Crossplane's own code described in the source.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Backstagev1.54.8patch

Backstagev1.50.6patch

2026-09-141 month ago

K8sGPTv0.4.39patchsecurity++******!!K8sGPT v0.4.39 adds a --resource flag to analyze a single resource and a ValidatingAdmissionPolicy analyzer. It also includes six fixes, covering event-derived failure anonymisation, RoleBinding ClusterRole resolution, ReplicaFailure reporting and OpenAI client handling. Two security entries update the gRPC Go module to v1.83.1 and v1.83.2.platform teamsPlatform teams running K8sGPT can now analyze one resource at a time and get diagnostics for ValidatingAdmissionPolicy objects. The gRPC updates are dependency CVE bumps, with no vulnerability in K8sGPT's own code reported in the notes.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Argo CDv3.5.3patch**********

Argo CDv3.4.9patch*********

older entries

daily email

statuslast 30 days for lines

tools tracked43releases in registry964released in the last 30 days106entries published336breaking change lines18security lines84

change typestwo-column gutter, like git status

+addedNew functionality.
~changedExisting behavior changed.
-deprecatedStill works, scheduled for removal.
-removedDecommissioned, gone in this version.
*fixedA defect corrected.
!securityA vulnerability closed or a dependency patched for one.
!breakingFlag in the first column; the change needs action before upgrading.

filter

categoryall idp & portals ai agents on platform ci/cd observability supply chain cost & governance reports & dx data enterprise app platforms

showmajor only releases case studies postmortems include patches

Platform Changelog: what shipped in platform engineering, developer experience and DevOps