platformchangelog.dev
43 tools
tools43j k move f filter
‹ tools kargotool

Kargo

v1.12.4current · 2026-10-12

Promotes releases through environments on top of Argo CD, with verification gates between stages.

governance vendor-led open source·license oss·vendor Akuity
toolCI/CD
release lines seen1.121.111.101.91.8
homepagerepositorylatest release
alternatives1
Octopus Deployno release recorded

Kargo promotes through environments as Kubernetes resources on top of Argo CD; Octopus orchestrates releases across Kubernetes and non-Kubernetes targets.

No case notes yet. Know of a public postmortem or case study? Tell us.
releases30change lines typed from the source notes
v1.12.42026-10-12patchsecurity!sharesource

Kargo released v1.12.4 on 2026-10-12. The release notes list five changes, one of which is a security item bumping the step-security/harden-runner GitHub Action from 2.21.1 to 2.22.0. The other four are maintenance changes such as dependency bumps, CI, tests and docs.

platform teams The only security-related change is a CI action dependency bump, not a fix in Kargo's own code, so teams running Kargo see no concrete behavior change from the notes provided. Teams may still want to confirm the full changelog before upgrading.

written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

  • Bump step-security/harden-runner from 2.21.1 to 2.22.0security
4 maintenance lines (dependency bumps, CI, tests, docs)
  • Fix(controller): prevent Stage status.metadata from being deleted by concurrent reconcilemaintenance
  • Bump anchore/sbom-action from 0.24.2 to 0.24.3maintenance
  • Docs: centralize Enterprise/Beta badges in enterprise-features.jsonmaintenance
  • Bump Go to 1.27.2 and golang.org/x/net to v0.60.0maintenance
5 lines1 security4 maintenancetyped from the source notes
v1.11.82026-10-12patchsecurity!sharesource

Kargo v1.11.8 was released with 7 changes, including one security item bumping the step-security/harden-runner GitHub Action from 2.21.1 to 2.22.1. The other six changes are maintenance items such as dependency bumps, CI, tests and docs, which the source condenses and omits.

platform teams Platform teams running Kargo in their delivery pipelines get a patch release with a CI hardening action bump; the source does not describe any change to runtime behavior, configuration, or APIs. The security change is to a build-pipeline action, not a vulnerability fix in Kargo's own code.

written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

  • Bump step-security/harden-runner from 2.21.1 to 2.22.1security
6 maintenance lines (dependency bumps, CI, tests, docs)
  • Fix(controller): prevent Stage status.metadata from being deleted by concurrent reconcilemaintenance
  • Bump actions/upload-artifact from 7.0.1 to 7.0.2maintenance
  • Bump actions/download-artifact from 8.0.1 to 8.0.2maintenance
  • Bump library/node from 26.10.0 to 26.11.1maintenance
  • Bump the go-patch group with 7 updatesmaintenance
  • Bump Go to 1.27.2 and golang.org/x/net to v0.60.0maintenance
7 lines1 security6 maintenancetyped from the source notes
v1.10.152026-10-12patchsharesource
1 maintenance lines (dependency bumps, CI, tests, docs)
  • Bump Go to 1.27.2, golang.org/x/net to v0.60.0, and grpc_health_probe to v0.4.59maintenance
1 line1 maintenancetyped from the source notes
v1.9.152026-10-12patchsharesource
2 maintenance lines (dependency bumps, CI, tests, docs)
  • Bump korthout/backport-action from 4.6.1 to 4.7.0maintenance
  • Bump Go to 1.27.2, golang.org/x/net to v0.60.0, and grpc_health_probe to v0.4.59maintenance
2 lines2 maintenancetyped from the source notes
v1.8.192026-10-12patchsharesource
1 maintenance lines (dependency bumps, CI, tests, docs)
  • Bump Go to 1.27.2, golang.org/x/net to v0.60.0, and grpc_health_probe to v0.4.59maintenance
1 line1 maintenancetyped from the source notes
v1.11.72026-10-08patchsharesource
6 maintenance lines (dependency bumps, CI, tests, docs)
  • Lock 1.11 docs into 1.11.6 charts, latest 1.11.x scripts, etc.maintenance
  • Bump the go-minor group with 2 updatesmaintenance
  • Bump github.com/klauspost/compress from 1.20.0 to 1.20.1 in the go-patch group across 1 directorymaintenance
  • Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.1 to 1.23.2 in the go-patch groupmaintenance
  • Bump anchore/sbom-action from 0.24.2 to 0.24.3maintenance
  • Bump korthout/backport-action from 4.6.1 to 4.7.0maintenance
6 lines6 maintenancetyped from the source notes
v1.10.142026-10-08patchsharesource
6 maintenance lines (dependency bumps, CI, tests, docs)
  • Bump the go-minor group with 2 updatesmaintenance
  • Bump the go-patch group with 7 updatesmaintenance
  • Bump korthout/backport-action from 4.6.0 to 4.6.1maintenance
  • Bump anchore/sbom-action from 0.24.2 to 0.24.3maintenance
  • Bump korthout/backport-action from 4.6.1 to 4.7.0maintenance
  • Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.1 to 1.23.2 in the go-patch groupmaintenance
6 lines6 maintenancetyped from the source notes
v1.9.142026-10-08patchsharesource
6 maintenance lines (dependency bumps, CI, tests, docs)
  • Bump korthout/backport-action from 4.6.0 to 4.6.1maintenance
  • Bump cloud.google.com/go/compute/metadata from 0.9.1 to 0.10.0 in the go-minor groupmaintenance
  • Bump the go-patch group with 7 updatesmaintenance
  • Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.1 to 1.23.2 in the go-patch groupmaintenance
  • Bump anchore/sbom-action from 0.24.2 to 0.24.3maintenance
  • Bump golang.org/x/tools from 0.50.0 to 0.51.0 in /hack/tools in the go-minor groupmaintenance
6 lines6 maintenancetyped from the source notes
v1.8.182026-10-08patchsharesource
5 maintenance lines (dependency bumps, CI, tests, docs)
  • Bump the go-patch group with 6 updatesmaintenance
  • Bump cloud.google.com/go/compute/metadata from 0.9.1 to 0.10.0 in the go-minor groupmaintenance
  • Bump github.com/go-git/go-git/v5 from 5.19.2 to 5.19.3 in the go-patch groupmaintenance
  • Bump anchore/sbom-action from 0.24.2 to 0.24.3maintenance
  • Bump golang.org/x/tools from 0.50.0 to 0.51.0 in /hack/tools in the go-minor groupmaintenance
5 lines5 maintenancetyped from the source notes
v1.12.22026-10-06patchsharesource
3 maintenance lines (dependency bumps, CI, tests, docs)
  • Docs: promotion windows UI instructionsmaintenance
  • Feat(server): log admin logins, optionally source IP and all requestsmaintenance
  • Fix: Add missing bindings for various RBAC permissionsmaintenance
3 lines3 maintenancetyped from the source notes
v1.12.12026-10-02patchsharesource
12 maintenance lines (dependency bumps, CI, tests, docs)
  • Fix: resolve Stage deadlock from duplicate Freight aliases; remove moniker dependencymaintenance
  • Docs: add v1.12.0 release notes; update deprecations and roadmapmaintenance
  • Docs: updates namespace on shared repo credentials example per 1.9 release notesmaintenance
  • Bump the go-minor group with 5 updatesmaintenance
  • Bump korthout/backport-action from 4.6.0 to 4.6.1maintenance
  • Bump the go-patch group across 1 directory with 2 updatesmaintenance
  • Bump the go-patch group across 1 directory with 3 updatesmaintenance
  • Bump library/node from 26.8.1 to 26.10.0maintenance
  • Fix(docs): Fix typo in PromotionPolicy commentmaintenance
  • Feat(ui): use icon on default state promotion step instead of nothingmaintenance
  • Bump korthout/backport-action from 4.6.1 to 4.7.0maintenance
  • Feat(server): optionally forward the user's bearer token to the AnalysisRun log servicemaintenance
12 lines12 maintenancetyped from the source notes
18 older releases
v1.12.02026-09-30minorbreakingsecurity +++++++++++*****!! 42 lines
v1.11.62026-09-30patch no itemized notes
v1.11.52026-09-28patch no itemized notes
v1.10.132026-09-28patch no itemized notes
v1.9.132026-09-28patch no itemized notes
v1.8.172026-09-28patch no itemized notes
v1.11.42026-09-03patch 11 lines
v1.10.122026-09-03patchsecurity *! 11 lines
v1.9.122026-09-03patch * 16 lines
v1.8.162026-09-03patch * 17 lines
v1.11.32026-08-31patch no itemized notes
v1.10.112026-08-31patch no itemized notes
v1.9.112026-08-31minor no itemized notes
v1.8.152026-08-31patch no itemized notes
v1.11.22026-08-18patch 5 lines
v1.10.102026-08-18minor 3 lines
v1.11.12026-08-10patch 9 lines
v1.11.02026-07-24minorbreaking ++++++++++++~~--*** 45 lines