Week 31, Jul 27 - Aug 2, 2026

This week: 41 releases, 199 news items.

👋 Welcome

This week saw a series of maintenance releases across core Cloud Native projects, alongside significant developments in the AI and Kubernetes ecosystems. OpenTelemetry achieved CNCF graduated status, while discussions continued on leveraging Kubernetes for AI infrastructure and the evolving landscape of AI agents.

🚀 Notable Releases

Orchestration

  • Crossplane v2.3.4 - This patch release addresses user-reported issues, including a fix for repeated owner updates for composed Usages, and incorporates security updates for Crossplane and its dependencies.
  • Crossplane v2.2.4 - A patch release focusing on user-reported issues and security updates. It includes a fix for repeated owner updates for composed Usages.
  • Crossplane v2.1.8 - This patch release provides fixes for user-reported issues, such as repeated owner updates for composed Usages, and includes security updates for Crossplane’s dependencies.
  • Crossplane v1.20.11 - A patch release addressing user-reported issues, including a fix for repeated owner updates for composed Usages, and security updates for Crossplane’s dependencies.
  • Kubernetes v1.36.3 - A patch release providing bug fixes and security updates.
  • Kubernetes v1.35.7 - A patch release providing bug fixes and security updates.
  • Kubernetes v1.34.10 - A patch release providing bug fixes and security updates.
  • Capsule v0.13.10 - Adds improved metadata enforcement and ingress rules, new administrator capabilities, leader-election tuning, and managed-by labels for emitted events.

Build

  • Dapr v1.18.2 - This update contains bug fixes for SPIFFE SVID component operation propagation, MCP servers with secret-referenced credentials reloading, and actor reminders/jobs failing due to special characters in names or actor IDs.
  • KubeVela v1.11.0 - Includes documentation updates, fixes for podDisruptive not triggering pod restarts, and addresses nil pointer panics in getMatchingDefinitionRevision.
  • Telepresence v2.31.0 - This release provides official installers with an option to run the root daemon as a system service.
  • Buildah v1.44.1 - Adds new CI GitHub actions and fixes an opaque whiteout pull error regression.

Networking

  • etcd v3.7.1 - A patch release that includes bug fixes and security updates.
  • etcd v3.6.14 - A patch release that includes bug fixes and security updates.
  • etcd v3.5.33 - A patch release that includes bug fixes and security updates.

CI/CD

  • Flux2 v2.9.3 - This patch release fixes issues with empty lines in rendered Helm chart manifests, HelmReleases being marked as tested when test hooks did not run, and spec.images entries discarding fields.
  • OpenCost v1.121.0 - Features KubeModel changes, memory optimizations, and initial implementation for AI inference cost reporting.

Observability

  • OpenTelemetry Collector v0.157.0 - Introduces a breaking change by replacing histogram bucket boundaries for otelcol_exporter_queue_batch_send_size_bytes and otelcol_processor_batch_batch_send_size_bytes metrics with a power-of-2 byte-scale set.

Security

  • Kubescape v4.0.11 - Adds caching for compiled CEL programs, derives VAP policy metadata from embedded bundles, embeds VAP YAML, expands encryption and decryption coverage for resource metadata, and fixes air-gapped mode issues.
  • BOMHort v0.6.1 - A patch release for BOMHort 0.6.0.
  • BOMHort v0.6.0 - Rebrands SeeBOM to BOMHort, introduces a faceted global search feature, fixes Kubernetes health probes, and includes security patches across Go, UI, and dependencies. This release requires a one-time migration for existing deployments.

Container Runtime

  • Lima v2.2.0 - Adds experimental support for Windows Server 2025 and Windows 11 guests, and introduces an option to opt out of password-less sudo.
  • Podman v6.0.2 - Fixes issues related to WSL provider VM cleanup on Windows, incorrect path modification by the Windows installer, and remote client connections.

Configuration

  • Baremetal Operator v0.13.2 - This release restores delete permissions on secrets and updates Go and CAPI dependencies.
  • Baremetal Operator v0.12.6 - This release restores delete permissions on secrets and updates Go and CAPI dependencies.
  • Meshery v1.0.63 - Adds PriorityClass Reference Relationships for Kubernetes Workloads and includes schema updates.
  • Meshery v1.0.62 - Introduces a registry purge subcommand to mesheryctl and addresses error notification spam for broken connections and nil machine contexts.
  • Meshery v1.0.61 - Fixes environment creation failures on remote providers and migrates UI component authorizations.
  • Meshery v1.0.60 - Includes schema updates, purges old model versions, and fixes a variable name typo in the server.

📰 This Week in Cloud Native

The Cloud Native ecosystem saw continued activity this week, particularly in the areas of AI integration, observability, and core infrastructure updates. The Cloud Native Computing Foundation (CNCF) announced that OpenTelemetry has achieved graduated status, signifying its maturity and widespread adoption. Additionally, the CNCF Japan chapter launched an AI Infra Special Interest Group (SIG), aiming to address the growing demand for scalable AI infrastructure using Cloud Native technologies.

Discussions around artificial intelligence and its interaction with Cloud Native architectures were prominent. Several reports explored the role of AI agents, their operational capabilities, and the infrastructure required to support them. Topics included building systems for AI agents, integrating agents with documentation, and the varying approaches taken by cloud providers in offering agent sandboxes. Kubernetes’ role as an infrastructure layer for AI workloads was a recurring theme, with some sources discussing its potential as a “de facto operating system for AI.”

In Kubernetes and cloud operations, Amazon EKS introduced support for Kubernetes version rollbacks within seven days of an upgrade, providing a new recovery option. AWS also announced zone-aware routing in Amazon ECS Service Connect and ARC zonal shift support for EKS Auto Mode and Karpenter, enhancing resilience and operational flexibility. Confidential Containers was accepted as a CNCF incubating project, focusing on protecting data in use within containerized environments. Other notable discussions included multi-cluster database architectures on Kubernetes and the application of policy engines like Kyverno for security and compliance.

💬 Community Buzz

Hacker News discussions this week centered on Kubernetes, particularly concerning self-hosting options, its suitability for various scale deployments, and its evolving role as an AI agent runtime. The emergence of open-weight AI and AI agent development platforms was also a significant topic, alongside debates on container runtimes and the concept of immutable GitOps homelabs.

📊 Numbers of the Week

  • Total stable releases: 29 across 13 projects
  • Top 3 projects by commits this week:
    1. kubernetes/kubernetes — 461 commits
    2. meshery/meshery — 243 commits
    3. cilium/cilium — 119 commits
  • Top 3 projects by merged pull requests this week:
    1. kubernetes/kubernetes — 153 merged PRs
    2. cilium/cilium — 151 merged PRs
    3. kumahq/kuma — 126 merged PRs

📚 View all articles from this week →