Repository navigation
Release 26.10.1 #4593
Description
Body
previous 26.10.0 | 26.10.1 | next YY.M.N
- Release all components (replace items with publish repo issue links).
- Release self-hosted.
- Prepare the
self-hostedrelease (replace with publish issue repo link). - Check to make sure the new release branch in self-hosted includes the appropriate CalVer images.
- Accept (publish) the release.
- Edit release notes.
- Prepare the
- Follow up.
- Create the next release issue and link it from this one.
- replace with link
- Update the release issue template.
- Create the next release issue and link it from this one.
Activity
[-]Release 26.9.1[/-][+]Release 26.10.1[/+]aldy505 commentedon Oct 28, 2026
seems to be blocked by #4597
geoffg-sentry commentedon Oct 28, 2026
Not blocked by #4597. We're going with the mid-cycle release without waiting for the 25.x clickhouse backports
aldy505 commentedon Oct 29, 2026
This is a security-focused patch. It addresses the eMudhra Intermediate CA compromise, and it also includes two configuration fixes you'll want to check.
The ClickHouse image is the one remaining unpatched image. It depends on upstream Altinity publishing a patched image, so we're tracking that and will ship the update as soon as it's available.
Two Config Fixes to Check
SENTRY_BUCKET_PROFILESonvroom: This environment variable needs thehttp://scheme included in its value. Without it, the setting doesn't behave as expected. If you set this variable, make sure the scheme is present.sentry/sentry.conf.py. This one matters if uptime monitoring is part of your setup, so please don't skip it.Nothing else in this release is notable. It's a focused patch.
We're always happy to chat. If you run into a problem during the upgrade, or just want to talk through your setup, reach out to us on Discord.
aldy505 commentedon Oct 29, 2026
This is a security-focused patch. It addresses the eMudhra Intermediate CA compromise, and it also includes two configuration fixes and one change to
vroomthat you'll want to know about. The ClickHouse image is the one remaining unpatched image. It depends on upstream Altinity publishing a patched image, so we're tracking that and will ship the update as soon as it's available.Changes to Check
vroomnow uses Distroless by default: Thevroomimage is now built on Distroless, which strips out package managers, shells, and other components a running service doesn't need. That shrinks the attack surface, which is the main reason for the switch. Check that nothing in your setup depends on a shell being present inside that container.SENTRY_BUCKET_PROFILESonvroom: This environment variable needs thehttp://scheme included in its value. Without it, the setting doesn't behave as expected. If you set this variable, make sure the scheme is present.sentry/sentry.conf.py. This one matters if uptime monitoring is part of your setup, so please don't skip it.Nothing else in this release is notable. It's a focused patch.
We're always happy to chat. If you run into a problem during the upgrade, or just want to talk through your setup, reach out to us on Discord.