Flux v2 8 8: gogit CVE fixes, k8s client updates, Helm and source controller reliability, OCI registry and image controller updates, upgrade recommended
OTel Collector v0 152 1 released 2026 05 20: package version bump, check core and contrib changelogs, run staging tests, update deployment images
Gitea v1 26 2: security and token OAuth hardening, workflow and runner reliability, repo and permission fixes, UI API bugfixes, automatic cloud upgrades
Flux v288: go git and k8s client CVE fixes, Helm v420, helm controller reliability fixes, source and registry improvements, upgrade recommended
OTel Collector v0 152 1: patch release with version bump, see core and contrib changelogs, review component notes, run CI and monitor after upgrade
n8n 2 21 5: patch stabilizes editor credential state, fixes credential loss in workflow setup, released May 20 2026, recommended update, commit 8c58173
Agentic AI is easiest to trust when it has very little to do, and even less power. I prefer to treat tool calling like any other risky admin path, with tight permissions, short-lived credentials, and human approval where it matters.
AdGuard Home update: fixes critical DoH DoQ request ID leak, updates Go toolchain, removes axios and ports charts to Recharts, plus reliability and UI fixes
Vault v2 0 1: security, stability fixes, CLI and API tweaks, upgrade guidance for ops, update exposed hosts now, see release for CVEs and patches
AdGuard Home v0 107 75: critical DoH and DoQ privacy fix, Go runtime update, DNSSEC DO flag control, frontend modernized, bug fixes and translations
n8n v2 21 4: maintenance release focusing on CI and build fixes, no user facing changes or changelog, maintainers should verify artifacts and pipelines
HomeAssistant Core 2026 5 3: dependency DNS bumps, Overkiz cover pergola and garage door fixes, startup crash reliability and utility meter media fixes
NocoDB 2026 05 1: Bookmarks, Smart Text docs, Mermaid diagrams, Timeline zooms, UX and self hosting upgrades for faster workflows
hassh drift is exactly why I do not trust one fingerprint for long; malware library updates change the banner and the hash, while the real mess sits in the commands and file writes after login. If you only watch the handshake, you will miss the campaign when it changes its coat.
SOPS v3 13 1: install binaries, verify with cosign and sha256, validate SLSA provenance and image signatures, Debian vs Alpine note, fixes and dependency bumps
SOPS v3 13 1: install binaries, verify with Cosign and sha256sum, validate SBOMs and provenance with slsa verifier, check container image signatures
Home Assistant 2026 5 2: fixes for integrations, MQTT and serial reliability, dependency bumps, new sensors and diagnostics, plus device stability improvements
Vector vdev v0 3 3: patch release with crash, leak and parsing fixes, connector and tooling improvements, upgrade notes on prechecks, rolling updates, compat
Loki v3 7 2: security and CVE fixes, updated S3 client to aws sdk v1 97 3, ruler panic fix for unset validation scheme, S3 Object Lock sends SHA256 checksum
Loki v3 7 2: Patch release with CVE fixes, AWS S3 SDK update, ruler panic fix, S3 Object Lock SHA256 checksum support
n8n 2 20 7 exp 0: experimental build for early testers, validates fixes and tweaks, see GitHub release for changelog, test in staging, backup, report issues
Talos Linux v1 13 2: released 2026 05 12, Etcd 3 6 11, Linux kernel 6 18 29, K8s 1 36 0 stack, built with Go 1 26 3, try binaries, report issues on GitHub
Argo CD v3 4 2 Quick start: fast non HA and HA install commands, cosign signed images with SLSA provenance, backported bug fixes, dependency and CI updates
Flux v2 8 7 patch: kustomize controller stops unwanted recreation of cluster resources, go git fix for CVE 2026 45022, dependency bumps, upgrade recommended
Kopia v0 23 0: tighter CLI security, storage durability, core cleanup and performance, snapshot error fixes, CI UI test tweaks
