Tempo v2 10 7: fixes wrong build version by reading VERSION file, drops 32 bit ARM binaries, no config changes, verify api status buildinfo
Tempo v2 10 7: fixes wrong version and build info by using VERSION file, drops 32 bit ARM binaries, upgrade and verify buildinfo metric and API responses
Home Assistant Core 2026 6 3: core fixes, deps, integration fixes, MQTT discovery privacy, Thread uptime reliability, LLM and frontend updates
OTel Collector v0 154 0: maintenance and dependency bumps, jmxreceiver removed from contrib, consult core and contrib changelogs for migration and details
authentik 2026 5 3: docs and release notes updated, CVE references added, Django security bump, provider and auth fixes, Safari polyfill, blueprint fixes
Traefik v3 7 5: ingress nginx stability fixes, Gateway API rejects cross provider backendRef namespace, go proxyproto bump, TLS SNICheck fixes
OTel Collector v0:154:0: maintenance release, jmxreceiver removed from contrib, dependency and CI tooling updates, see core and contrib changelogs for details
authentik 2026 5 3: docs consolidated, security and dependency updates, provider and endpoint fixes, frontend tests and blueprint robustness
Traefik v3 7 5 fixes: ingress nginx skips failed auth, honors EndpointSlice fencing, Gateway API backendRef checks, proxyproto bump, TLS SNI fixes
n8n 2 25 7 Editor: node credential picker now fetches workflow scoped credentials, limiting shown credentials to the current workflow and reducing exposure
Nextcloud v34: stability, collaboration, scale with UX, performance, security hardening, admin upgrade checklist, developer deprecations, app compatibility
Talos Linux v1 13 4: Linux 6 18 34, kube v1 36 1, etcd v3 6 12, Flannel v0 28 5, Go 1 26 4, bug fixes, OOM QoS improvements, packaging and deps bumps
restic v0 19 0: critical reliability fixes for Windows,Samba,SFTP,rclone, improved exit codes, validation, performance, packing and usability
Abuse rarely stays put for long, and a hosting provider abuse problem usually survives because the signals never meet in one place. I have seen enough fleets to know the weak point is not logging, it is the pause between spotting a pattern and doing something about it.
Tempo v3 0 2: Security focused rebuild with Go 1 26 3, upgrade recommended for upstream security and bug fixes, CI and builds require it, see issue 7423
Grafana v13 0 2: critical CVE patches and permission hardening, git backed provisioning and dashboard fixes, platform updates and runtime bug fixes
Nextcloud v34: release highlights, security hardening, files and sharing improvements, developer API and app changes, upgrade and rollback guidance
Talos Linux v1 13 4: kernel 61834, etcd 3612, Flannel 0285, Go 1264, bug fixes, features, CI fixes, try binaries, report issues on GitHub
restic v0 19 0: tightened CLI, fixed exit codes, backend and Windows fixes, faster index and mounts, better pruning and index repair, usability and perf gains
Tempo v3 0 2: security update upgrades build toolchain to Go 1 26 3, operators must update builds and CI, test in staging then roll out to production
Grafana v13 0 2: security fixes for multiple CVEs, provisioning and Git improvements, runtime updates, dashboard and data source bug fixes, upgrade recommended
n8n 2 25 6 patch fixes markdown editor copy bug: only highlighted text is copied, preventing accidental extra content, upgrade recommended
HomeAssistant Core 2026 6 2: stability and integration fixes, Bluetooth startup reliability, dependency bumps and frontend update, voice TTS media fixes
Streaming auth code theft is dull in the way most real abuse is, a few weak joins, a live session, and suddenly the whole thing can be relayed and resold. I keep coming back to the same point, if the token lives too long, somebody will copy it.
Composer supply chain attack is one of those phrases that sounds abstract until a normal looking release starts carrying poisoned code. I trust tags less than I used to, because once they move, history is just decoration.
