Week 44, Oct 26 - Nov 1, 2026

This week: 169 releases, 148 news items. Notable: llm-d v1.0.0.

👋 Welcome

This week in Cloud Native saw a broad focus on security, with numerous projects releasing updates to address a recently disclosed certificate authority compromise. The ecosystem also continued to explore the evolving relationship between Kubernetes and AI workloads, including new open-source tools for managing AI inference and agents. Discussions also covered broader open-source supply chain security and the impact of AI on vulnerability discovery.

🚀 Notable Releases

CI/CD

Build

  • Pack v0.40.10 - A patch release with prerequisites and installation instructions.
  • Dapr v1.19.0 - Improves workflow, job, and reminder performance, with workflow throughput up to 40% higher in nightly tests.
  • Dapr v1.18.9 - Fixes a security issue where the operator’s ListHTTPEndpoints and ListMCPServers APIs disclosed resources and secrets scoped to other apps in Kubernetes mode.
  • Dapr v1.18.8 - Fixes issues with completed workflows creating duplicate reminders, cancelled actor calls breaking turn-based concurrency, and sidecar trace span export after hot reload.
  • Dapr v1.17.18 - Fixes a security issue where the operator’s ListHTTPEndpoints API disclosed resources and secrets scoped to other apps in Kubernetes mode.
  • Dapr v1.16.21 - Addresses a security issue where compromised eMudhra intermediate CA keys were trusted for outbound TLS, upgrading Go to 1.26.10.
  • Dapr v1.17.17 - Fixes Redis components failing to open new connections after Entra ID token expiration and addresses the eMudhra intermediate CA key compromise.
  • Backstage v1.56.2 - Fixes installation issues by making @yarnpkg/* dependencies optional peers.
  • Backstage v1.56.1 - Fixes URL location matching in catalog rules and improves placeholder repository validation.
  • Backstage v1.54.10 - Fixes URL location matching in catalog rules and improves placeholder repository validation.
  • Backstage v1.56.0 - Introduces a breaking change where FilterPredicate types now only accept objects at the root.
  • Carvel ytt v0.55.4 - A patch release.
  • Dalec v0.22.3 - Updates Azure Linux to use the core image.
  • Dalec v0.22.2 - Prioritizes newer versions in Debian dependency fallback.
  • ORAS v1.3.6 - Updates oras.land/oras-go/v2 to v2.7.0, which changes bearer token realm rejection logic to allow RFC 1918, IPv6 unique-local, and CGNAT realms.
  • ORAS v1.3.5 - A patch release.
  • Shipwright Build v0.21.10 - A rebuild of all components to address vulnerabilities in base images and Golang.
  • Buildah v1.46.0 - Bumps Buildah to v1.45.0 and updates container storage and image dependencies.
  • Open Component Model v0.21.0 - Introduces breaking changes by replacing --upload-as and copyMode with uploader configurations, and signs/verifies GPG signatures with the system GPG binary. Builds CLI and controller for FIPS 140-3.

Security

  • cert-manager v1.21.3 - Removes trust in the compromised eMudhra CA by updating base images and Go 1.26.10 to reject certificate chains passing through compromised intermediates (CVE-2026-111943).
  • Falco 0.45.1 - A patch release.
  • Kyverno v1.19.2 - Addresses 24 GitHub Security Advisories, including critical fixes for workflow script-injection hardening, API path validation, namespace confinement, and NamespacedMutatingPolicy target confinement.
  • Open Policy Agent v1.21.4 - Builds OPA binary artifacts with Go v1.27.3.
  • Open Policy Agent v1.21.3 - Fixes an issue where bundle signature verification could be bypassed, allowing an attacker to supply arbitrary policy and data to OPA.
  • SPIFFE SPIRE v1.15.5 - Bumps Go version to 1.26.10, which includes a fix for CVE-2026-111943.
  • SPIFFE SPIRE v1.14.9 - Bumps Go version to 1.26.10, which includes a fix for CVE-2026-111943.
  • Dex v2.46.1 - Updates the image to distrust compromised eMudhra intermediates.
  • External Secrets v2.14.0 - A patch release.
  • External Secrets helm-chart-2.14.0 - A Helm chart release for external secrets management.
  • KubeArmor v1.7.6 - Replaces execve kprobe with a tracepoint in the process monitor and fixes pods not terminating in AppArmor node environments.
  • KubeFleet v0.3.2 - Addresses GHSA-8pxp-mmqj-jr9h by defaulting enablePprof to false and binding pprof to loopback only in hub-agent and member-agent charts.
  • OPCR Policy v0.4.4 - Fixes Dockerfile to reduce vulnerabilities.
  • Ratify v1.4.8 - Bumps vulnerable dependencies to address CVE-2026-63209, CVE-2026-85747, and GO-2026-5932, and updates the distroless static nonroot base image.
  • Ratify v1.4.7 - Bumps vulnerable dependencies to address multiple CVEs (CVE-2026-78659, CVE-2026-78660, CVE-2026-78663, CVE-2026-78669, CVE-2026-97032, GO-2026-5932).
  • Sigstore Cosign v3.1.4 - Builds releases with Go 1.27.3 and implements cosign bundle create-from-container.
  • Aqua Security Trivy v0.76.1 - Includes mitigations for the eMudhra intermediate CA key compromise (CVE-2026-111943) by building binaries with Go 1.27.3 and updating Alpine CA trust store in container images.
  • Sigstore Rekor v1.5.5 - Built with Go 1.27.3 and updates the PGP dependency to no longer use the unmaintained x/crypto package.
  • OpenKCM cmk v0.12.1 - Fixes the Dockerfile for the full plugins stage to use the correct image name.
  • OpenKCM cmk v0.12.0 - Migrates to the trustmapping API and syncs tenant limit overrides from registry config update events.

Networking

  • Cilium v1.20.4 - An out-of-band security patch release that upgrades Go to 1.26.10 to distrust compromised eMudhra intermediate CA certificates (CVE-2026-111943).
  • Cilium v1.19.10 - An out-of-band security patch release that upgrades Go to 1.26.10 to distrust compromised eMudhra intermediate CA certificates (CVE-2026-111943).
  • Cilium v1.18.16 - An out-of-band security patch release that upgrades Go to 1.26.10 to distrust compromised eMudhra intermediate CA certificates (CVE-2026-111943).
  • CoreDNS v1.15.0 - Improves DNS caching, forwarding, and transport reliability, adds DNS-over-QUIC upstream support, optional JSON query logging, and authenticated RFC 2136 dynamic DNS updates. Built with Go 1.27.3, covering CVE-2026-56865.
  • Envoy v1.40.1 - Updates Docker images and Envoy Mobile root certificate bundles to no longer trust compromised eMudhra CAs.
  • Envoy v1.39.5 - Updates Docker images and Envoy Mobile root certificate bundles to no longer trust compromised eMudhra CAs.
  • Envoy v1.38.8 - Updates Docker images and Envoy Mobile root certificate bundles to no longer trust compromised eMudhra CAs.
  • Envoy v1.37.10 - Updates Docker images and Envoy Mobile root certificate bundles to no longer trust compromised eMudhra CAs.
  • etcd v3.7.3 - A patch release.
  • etcd v3.6.16 - A patch release.
  • etcd v3.5.35 - A patch release.
  • gRPC v1.84.1 - Updates gRPC repository roots.
  • Kuadrant Operator v1.6.0 - Enables installations of Authorino v0.28.0, Limitador v2.5.0, and other related operators and components.
  • Kube-OVN v1.16.15 - Improves EVPN VXLAN SVI forwarding, makes CNI periodic recomputation optional, fixes Helm pinger external-address handling, and updates Go to 1.27.3.
  • Kube-OVN v1.15.32 - Fixes NetworkPolicy requeueing and Helm pinger issues, updates Go to 1.26.10 to address CVE-2026-111943.
  • Kube-VIP v1.3.1 - A re-release of v1.3.0.
  • BFE v1.8.8.6 - Makes outbound credential headers mutually exclusive to prevent client-supplied credentials from overriding gateway-injected upstream keys.
  • BFE v1.8.8.5 - Returns a synthetic 429 when no AI key can be selected for a target cluster and excludes Weight=0 keys from session-affinity penalty filters.
  • BFE v1.8.8.4 - Fixes billing for streaming responses that end at a clean HTTP EOF without a protocol termination event.
  • Connect-Go v2.0.2 - Fixes a data race when reading ClientInfo after a cancelled call, lists JSON charset variants in Accept-Post, and flushes response headers in ServerStream.SendHeaders over HTTP.
  • Praxis v0.7.5 - Bumps spiffe dependency from 0.16.1 to 0.18.0.

Orchestration

  • Crossplane v2.4.3 - Bumps Go toolchain to 1.26.10 to distrust compromised eMudhra intermediate CAs (CVE-2026-111943) and removes affected roots from the image’s CA bundle.
  • Crossplane v2.3.7 - Bumps Go toolchain to 1.26.10 to distrust compromised eMudhra intermediate CAs (CVE-2026-111943) and removes affected roots from the image’s CA bundle.
  • Crossplane v2.2.7 - Bumps Go toolchain to 1.26.10 to distrust compromised eMudhra intermediate CAs (CVE-2026-111943) and removes affected roots from the image’s CA bundle.
  • Crossplane v1.20.14 - Bumps Go toolchain to 1.26.10 to distrust compromised eMudhra intermediate CAs (CVE-2026-111943) and removes affected roots from the image’s CA bundle.
  • WasmCloud v2.11.0 - Fixes issues with wash-runtime identity-lowered borrows and nested linked handles, and adds native host control to running hosts.
  • Agent Substrate v0.6.0 - Introduces breaking changes by requiring actor CPU and memory limits, renaming ateom to ateworker, and no longer accepting a bare runsc asset for gvisor SandboxConfig.
  • Armada v0.22.15 - A patch release for the batch job queueing system.
  • Project Capsule v0.15.1 - Adds listenersets default gateway mutation.
  • Project Capsule v0.15.0 - Addresses critical security advisories GHSA-p8j8-x28r-3c9v (authorization bypass via namespaces/status and namespaces/finalize) and GHSA-4qv9-xv9f-w5xh (privilege escalation via tenants/status).
  • KAI-Scheduler v0.16.13 - Fixes keeping replacement subgroups in the job’s required topology domain and preserving GPU reservations for retryable binding requests.
  • Kaito v0.13.0 - Adds support for deploying object-storage model weights via a custom preset, improves inference speed and resilience, and enhances provisioning diagnostics.
  • NVIDIA OpenShell v0.1.5 - Changes Supervisor OCSF log files to .jsonl extension, requiring collector pattern updates.
  • llm-d v1.0.0 - Introduces multi-tenant quality of service with priority- and fairness-aware flow control and controlled load shedding.

Observability

  • Prometheus v3.15.1 - Updates CA certificates to distrust “emSign ECC Root CA - G3” and “Comodo AAA Services root” due to eMudhra compromise, builds with Go 1.27.3 to fix vulnerabilities, and bumps golang.org/x/net to v0.60.0.
  • Prometheus v3.13.5 - Updates CA certificates to distrust “emSign ECC Root CA - G3” and “Comodo AAA Services root” due to eMudhra compromise, builds with Go 1.26.10 to fix vulnerabilities, and bumps golang.org/x/net to v0.60.0.
  • K8sGPT v0.4.41 - Adds Claude 4.5 and 5.x models for Amazon Bedrock and enables sourcing customHeaders from the config file.
  • Kuberhealthy v3.0.20 - Wakes the scheduler when HealthChecks are added, changed, or deleted, and upgrades UI build dependency Vite.
  • Kuberhealthy v3.0.19 - Fixes consecutive failure tracking for timed-out checks and pod-creation failures, and preserves status.consecutiveFailures in CRD schemas.
  • Kuberhealthy v3.0.18 - Fixes leader-election recovery by exiting the process when lease renewal is lost, allowing the Deployment to restart.
  • Perses v0.55.0 - Fixes multiple security vulnerabilities, including JWT forgery, SSRF, credential leaks, arbitrary file reads, and path traversals. Some fixes require configuration changes for authentication.

Registry

  • Harbor v2.14.6 - Bumps base version and Go Trivy distribution, and fixes webhook to allow private network access by default.

Storage

  • K8up v2.16.1 - Updates restic to v0.19.1 and other security-relevant Go dependencies, and includes an updated CA bundle to distrust eMudhra.
  • K8up k8up-4.10.1 - Contains Helm chart changes, adding BACKUP_GLOBAL_SKIP_SNAPSHOT_SYNC flag and passing imagePullSecrets to cleanup job.
  • Kanister 0.120.0 - Adds support for Azure Workload (Federated) Identity when moving backup data to Azure Blob Storage, minting short-lived, container-scoped SAS tokens.

Configuration

  • Meshery v1.0.74 - Fixes server to accept both remote provider connection response shapes.
  • Meshery v1.0.73 - Fixes server to accept both remote provider connection response shapes and opens each extension plugin at most once.
  • Meshery v1.0.72 - Adds Infisical Kubernetes Operator model, prevents nil pointer panic on ServiceMeshFilter, and bumps MeshKit.
  • Kubean v0.39.3 - Fixes e2e tests to use modern spray-job for Kubernetes upgrades and refreshes kube-system pod health checks.
  • KCL v0.13.2 - Fixes error reporting to populate source locations, publishes kcl-lib for Windows/arm64, and improves LSP completion behavior.
  • OpenTofu v1.13.2 - Fixes potential excessive CPU usage when connecting to attacker-controlled HTTP2 servers and filters out compromised intermediate certificates.
  • OpenTofu v1.12.9 - Filters out compromised intermediate certificates.
  • Atlantis v0.49.0 - A breaking release that no longer includes Terraform or OpenTofu in Docker images and fixes 12 security advisories.
  • Atlantis v0.48.2 - An emergency security release built with Go 1.27.3 to address the eMudhra intermediate CA key compromise.
  • Kagent v0.10.4 - Fixes controller to accept RemoteMCPServer labeled kagent.dev/discovery=disabled without listing its tools and requires patched certificate verification.

Application Frameworks

Container Runtime

  • WasmEdge 0.18.1 - Bounds array.new_fixed operand check by value stack height, restores backward-compatible WasmEdge_ModuleInstanceAdd* symbols, and supports building AOT for arm64.

Virtualization

  • OpenStack Hypervisor Operator v1.3.0 - Enables parallel VM migrations during hypervisor draining, safe eviction completion, and hardens offboarding. Requires --agent-namespaces to be set.

Cluster Management

  • Gardener v1.154.0 - A patch release.
  • Gardener v1.153.2 - Fixes requests from established connections with client certificate authentication being rejected when certificates expire and corrects status.hibernated field setting.
  • Gardener v1.152.2 - Moves owner role assignment to PrepareFor(Create|Update) strategy methods and fixes status.hibernated field setting.
  • Gardener v1.151.4 - Fixes requests from established connections with client certificate authentication being rejected when certificates expire and corrects CA rotation for the garden cluster.

Platform

📰 This Week in Cloud Native

This week saw a significant number of open-source projects issue security updates, primarily in response to the compromise of the eMudhra intermediate Certificate Authority (CA). Projects like cert-manager, Cilium, Crossplane, Dapr, Envoy, Prometheus, SPIRE, Atlantis, Dex, Kagent, K8up, and Trivy released patch versions to update their Go toolchains (often to Go 1.26.10 or 1.27.3) and distrust the compromised eMudhra CA certificates. This widespread effort aims to mitigate risks associated with potentially fraudulent certificates in TLS communication across the cloud native stack. Beyond this specific incident, the OpenSSF released a guide on leveraging AI for finding and fixing software vulnerabilities, acknowledging that AI is accelerating the discovery of flaws. The OpenSSF also introduced the Gemara project to clarify security attestations and streamline compliance with regulations like the EU Cyber Resilience Act (CRA), emphasizing the importance of supply chain security and upstream contributions for reducing technical debt.

The integration of AI workloads within Kubernetes continued to be a central theme. CNCF blogs discussed how Kubernetes autoscaling is being reshaped by the demands of AI workloads and strategies for multi-tenant GPU Kubernetes deployments using open-source projects like Kamaji and HAMi. New open-source frameworks and tools emerged to support AI applications on Kubernetes, including LLM-D 1.0 for production AI inference, Kaito for deploying model weights and managing inference, and Agent Substrate for actor CPU and memory limits. Additionally, the open-source community saw the release of Omnara as an alternative for running durable AI agents, Pando as a platform for deploying AI-built apps, and Ternlux for building local-first AI pipelines. OpenAI’s “Open Responses” specification for a common LLM API was donated to the Agentic AI Foundation, signaling a move towards open standards in the AI agent ecosystem. TorchTPU was also open-sourced, enabling native PyTorch execution on TPUs. The OpenTelemetry Collector was highlighted for its role in filtering and reducing telemetry from AI agents, providing a technical pathway for managing the increased data volume generated by agentic workflows.

The broader open-source ecosystem also saw new tooling and reflections on its evolution. A new open-source Kubernetes desktop client, Jet Pilot, was showcased, alongside Stackdome, a self-hostable Railway alternative on Kubernetes. KiviDB, a Redis-compatible memory database and vector cache, was released. Other tools included Craig, a TUI for managing parallel AI coding agents, and Corgi, an agent/terminal multiplexer. The CNCF reflected on 10 years of Cloud Native, noting the evolution of Kubernetes and the concept of “invisible infrastructure.”

💬 Community Buzz

Discussions on Hacker News this week included the challenges of Windows signing for open-source projects, observations on Docker’s behavior, and the application of the “Kessler Syndrome” to software supply chain risks. Other topics involved the general sentiment of disconnecting from technology, the use of AI tools for understanding merge requests, and the verification methods for help desks when resetting multi-factor authentication. The disclosure of a compromised CA with a simple password also garnered attention.

📊 Numbers of the Week

  • Total stable releases: 133 across 44 projects
  • Top 3 projects by commits this week:
    1. hivecommons/hive — 565 commits
    2. kubernetes/kubernetes — 226 commits
    3. meshery/meshery — 217 commits
  • Top 3 projects by merged pull requests this week:
    1. hivecommons/hive — 669 merged PRs
    2. envoyproxy/envoy — 166 merged PRs
    3. agent-substrate/substrate — 162 merged PRs

📚 View all articles from this week →