{
  "apiVersion": "v1",
  "resource": "updates",
  "checked": "2026-10-19",
  "total": 80,
  "data": [
    {
      "app": "aspnet",
      "from": "",
      "to": "10.0.113",
      "status": "shipped"
    },
    {
      "app": "authentik",
      "from": "2026.8.3",
      "to": "2026.8.4",
      "status": "shipped"
    },
    {
      "app": "backdrop",
      "from": "1.34.5, 1.35.1",
      "to": "1.34.6, 1.35.2",
      "status": "shipped"
    },
    {
      "app": "buildkite-agent",
      "from": "4.4.0",
      "to": "4.6.0, 4.5.0",
      "status": "shipped"
    },
    {
      "app": "cilium",
      "from": "1.18.14, 1.19.8, 1.20.2",
      "to": "1.18.15, 1.19.9, 1.20.3",
      "status": "shipped"
    },
    {
      "app": "cilium-operator",
      "from": "1.18.14, 1.19.8, 1.20.2",
      "to": "1.18.15, 1.19.9, 1.20.3",
      "status": "shipped"
    },
    {
      "app": "clickhouse",
      "from": "26.7.29.12, 26.9.18.11",
      "to": "26.7.34.3, 26.9.21.9",
      "status": "shipped"
    },
    {
      "app": "cockroachdb",
      "from": "26.2.7",
      "to": "26.2.8",
      "status": "held",
      "note": "26.2.8 is built with go1.25.13; the stdlib fixes need go 1.26.9 or later."
    },
    {
      "app": "connaisseur",
      "from": "3.13.0",
      "to": "3.13.1",
      "status": "shipped"
    },
    {
      "app": "coolify-app",
      "from": "4.3.23",
      "to": "4.4.6",
      "status": "held",
      "note": "4.4 replaces coolify-realtime with Reverb and coolify-terminal: a stack redesign."
    },
    {
      "app": "coroot",
      "from": "1.27.3",
      "to": "1.27.4",
      "status": "shipped"
    },
    {
      "app": "documentdb",
      "from": "0.117.0",
      "to": "1.0.RC2, 1.0.RC1, 1.0.0",
      "status": "shipped"
    },
    {
      "app": "dotnet",
      "from": "",
      "to": "10.0.113",
      "status": "shipped"
    },
    {
      "app": "dotnet-runtime",
      "from": "",
      "to": "10.0.113",
      "status": "shipped"
    },
    {
      "app": "drupal",
      "from": "11.4.9",
      "to": "11.4.10",
      "status": "shipped"
    },
    {
      "app": "emqx",
      "from": "6.3.1",
      "to": "6.3.2",
      "status": "shipped"
    },
    {
      "app": "erlang",
      "from": "",
      "to": "27.3.4.19, 28.5.0.8, 29.1.2",
      "status": "shipped"
    },
    {
      "app": "external-secrets",
      "from": "2.12.0",
      "to": "2.13.0",
      "status": "shipped"
    },
    {
      "app": "floci",
      "from": "2.2.0",
      "to": "2.3.0",
      "status": "shipped"
    },
    {
      "app": "floci-full",
      "from": "2.2.0",
      "to": "2.3.0",
      "status": "shipped"
    },
    {
      "app": "fluent-bit",
      "from": "5.1.3",
      "to": "5.1.4",
      "status": "shipped"
    },
    {
      "app": "flyway",
      "from": "13.10.0",
      "to": "13.10.3",
      "status": "shipped"
    },
    {
      "app": "ghost",
      "from": "6.70.0",
      "to": "6.71.0",
      "status": "shipped"
    },
    {
      "app": "gitea",
      "from": "28.1.0",
      "to": "28.2.0",
      "status": "shipped"
    },
    {
      "app": "gitlab-runner",
      "from": "19.4.1",
      "to": "19.5.0",
      "status": "shipped"
    },
    {
      "app": "gotenberg",
      "from": "8.37.0",
      "to": "8.38.1",
      "status": "held",
      "note": "Wolfi chromium is still 149.0.7827.53."
    },
    {
      "app": "grafana",
      "from": "13.1.7",
      "to": "13.2.4",
      "status": "held",
      "note": "13.2 bundles prebuilt gpx_* plugin binaries."
    },
    {
      "app": "homepage",
      "from": "2.5.0",
      "to": "2.6.0",
      "status": "shipped"
    },
    {
      "app": "hubble-relay",
      "from": "1.18.14, 1.19.8, 1.20.2",
      "to": "1.18.15, 1.19.9, 1.20.3",
      "status": "shipped"
    },
    {
      "app": "istio-cni",
      "from": "1.29.8, 1.30.5, 1.31.1",
      "to": "1.29.9, 1.30.6, 1.31.2",
      "status": "shipped"
    },
    {
      "app": "istio-proxyv2",
      "from": "1.31.1",
      "to": "1.31.2",
      "status": "shipped"
    },
    {
      "app": "istiod",
      "from": "1.29.8, 1.30.5, 1.31.1",
      "to": "1.29.9, 1.30.6, 1.31.2",
      "status": "shipped"
    },
    {
      "app": "jellyfin",
      "from": "12.1",
      "to": "12.2",
      "status": "held",
      "note": "12.2 still ships the prebuilt SkiaSharp blob."
    },
    {
      "app": "jupyterhub",
      "from": "6.0.1",
      "to": "6.1.0, 5.5.3",
      "status": "shipped"
    },
    {
      "app": "kgateway",
      "from": "2.4.6",
      "to": "2.4.7, 2.3.11",
      "status": "shipped"
    },
    {
      "app": "kgateway-envoy",
      "from": "2.4.6",
      "to": "2.4.7, 2.3.11",
      "status": "shipped"
    },
    {
      "app": "kubescape",
      "from": "4.0.15",
      "to": "4.0.16",
      "status": "shipped"
    },
    {
      "app": "kubescape-node-agent",
      "from": "0.3.275",
      "to": "0.3.280",
      "status": "shipped"
    },
    {
      "app": "kubescape-operator",
      "from": "0.2.181",
      "to": "0.2.190",
      "status": "shipped"
    },
    {
      "app": "kubescape-synchronizer",
      "from": "0.0.167",
      "to": "0.0.169",
      "status": "shipped"
    },
    {
      "app": "kubevuln",
      "from": "0.3.546",
      "to": "0.3.561",
      "status": "shipped"
    },
    {
      "app": "kuma",
      "from": "2.14.6",
      "to": "3.0.0",
      "status": "shipped"
    },
    {
      "app": "litellm",
      "from": "1.105.1",
      "to": "1.106.0, 1.103.5",
      "status": "shipped"
    },
    {
      "app": "livekit",
      "from": "1.13.9",
      "to": "1.13.10",
      "status": "shipped"
    },
    {
      "app": "mailpit",
      "from": "1.31.5",
      "to": "1.31.6",
      "status": "shipped"
    },
    {
      "app": "mattermost",
      "from": "11.11.1",
      "to": "12.0.0",
      "status": "shipped"
    },
    {
      "app": "nextcloud",
      "from": "34.0.4",
      "to": "34.0.5",
      "status": "shipped"
    },
    {
      "app": "nginx",
      "from": "1.30.5",
      "to": "1.30.6",
      "status": "shipped"
    },
    {
      "app": "nginx-gateway-fabric",
      "from": "2.7.2",
      "to": "2.8.0",
      "status": "shipped"
    },
    {
      "app": "nginx-gateway-fabric-nginx",
      "from": "2.7.2",
      "to": "2.8.0",
      "status": "shipped"
    },
    {
      "app": "node",
      "from": "",
      "to": "24.22.0, 26.12.0",
      "status": "shipped"
    },
    {
      "app": "ntfy",
      "from": "2.30.0",
      "to": "2.32.0",
      "status": "shipped"
    },
    {
      "app": "odoo",
      "from": "19.0.20261014",
      "to": "19.0.20261018",
      "status": "shipped"
    },
    {
      "app": "ollama",
      "from": "0.40.4",
      "to": "0.40.6, 0.40.5",
      "status": "shipped"
    },
    {
      "app": "opensearch-dashboards",
      "from": "3.8.0",
      "to": "3.9.0",
      "status": "held",
      "note": "3.9.0 bundles DOMPurify 3.4.13 and maplibre-gl 4.5.2."
    },
    {
      "app": "oras",
      "from": "1.3.4",
      "to": "1.3.5",
      "status": "shipped"
    },
    {
      "app": "otel-collector",
      "from": "0.162.0",
      "to": "0.163.1",
      "status": "shipped"
    },
    {
      "app": "pgbouncer",
      "from": "1.26.0",
      "to": "1.26.1",
      "status": "shipped"
    },
    {
      "app": "pnpm",
      "from": "11.28.4, 12.9.1",
      "to": "11.28.6, 12.14.0",
      "status": "held",
      "note": "npm 12 cooldown: 2026-10-20 and 2026-10-25."
    },
    {
      "app": "policy-reporter",
      "from": "3.11.0",
      "to": "3.11.1",
      "status": "shipped"
    },
    {
      "app": "pulumi",
      "from": "3.268.0",
      "to": "3.270.0",
      "status": "shipped"
    },
    {
      "app": "quickwit",
      "from": "0.9.1",
      "to": "0.9.2",
      "status": "held",
      "note": "0.9.2 still locks thrift 0.17.0 (CVE-2026-43868, no 0.17.x fix); held on 0.9.1."
    },
    {
      "app": "redis-exporter",
      "from": "1.93.0",
      "to": "1.94.0",
      "status": "shipped"
    },
    {
      "app": "renovate",
      "from": "44.148.1",
      "to": "44.167.5",
      "status": "held",
      "note": "npm 12 cooldown, published 2026-10-12."
    },
    {
      "app": "rqlite",
      "from": "10.6.0",
      "to": "10.6.2",
      "status": "shipped"
    },
    {
      "app": "rust",
      "from": "",
      "to": "1.99.1",
      "status": "shipped"
    },
    {
      "app": "spire",
      "from": "1.15.3",
      "to": "1.15.4",
      "status": "shipped"
    },
    {
      "app": "support-bundle-kit",
      "from": "1.0.0",
      "to": "1.0.1, 0.0.97",
      "status": "skipped",
      "note": "The checker proposes a downgrade to 0.0.97; skipped."
    },
    {
      "app": "tempo",
      "from": "3.1.0",
      "to": "3.0.4",
      "status": "shipped"
    },
    {
      "app": "tigera-operator",
      "from": "1.42.2",
      "to": "1.44.0",
      "status": "held",
      "note": "Deploys Calico 3.33.0: every calico image and the chart move together."
    },
    {
      "app": "traefik",
      "from": "3.7.14",
      "to": "3.7.15",
      "status": "shipped"
    },
    {
      "app": "trino",
      "from": "483",
      "to": "484",
      "status": "held",
      "note": "484 bundles parquet-jackson 1.18.1 with a renamed jackson 2.22.2 (4 HIGH); held on 483."
    },
    {
      "app": "trivy",
      "from": "0.75.0",
      "to": "0.76.0",
      "status": "shipped"
    },
    {
      "app": "trivy-scanner",
      "from": "0.75.0",
      "to": "0.76.0",
      "status": "shipped"
    },
    {
      "app": "uv",
      "from": "0.13.0",
      "to": "0.13.1",
      "status": "shipped"
    },
    {
      "app": "vllm",
      "from": "0.31.0",
      "to": "0.32.0",
      "status": "shipped"
    },
    {
      "app": "xwiki",
      "from": "17.10.13",
      "to": "17.10.14",
      "status": "held",
      "note": "17.10.14 still pins solr 9.4.1 and the jetty 10 client."
    },
    {
      "app": "xyops",
      "from": "1.1.7",
      "to": "1.1.8",
      "status": "shipped"
    },
    {
      "app": "zitadel",
      "from": "4.19.4",
      "to": "4.19.5",
      "status": "shipped"
    },
    {
      "app": "ztunnel",
      "from": "1.29.8, 1.30.5, 1.31.1",
      "to": "1.29.9, 1.30.6, 1.31.2",
      "status": "shipped"
    }
  ]
}