Skip to content

v1.40.14

Choose a tag to compare

View all tags
@marvin-tigera marvin-tigera released this 18 Aug 23:36
· 749 commits to master since this release
v1.40.14
53bc553
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

18 Aug 2026

Included Calico versions

Calico version: v3.31.6
Calico Enterprise version: v3.22.7

Bug fixes

  • Update bundled Elasticsearch/Kibana to 8.19.19 and the ECK operator to 3.4.1 for Calico Enterprise v3.22.7. #5149 (@pasanw)
  • Bumped oras-go to v2.6.2 and grpc to v1.82.1 to remediate oras-go CVE-2026-50151/CVE-2026-50163 and GHSA-hrxh-6v49-42gf. containerd advisories remain deferred (no containerd fix exists; removal would require a k8s-1.36 uplift not taken on this line). #5145 (@pasanw)

Other changes

  • On upgrade, the operator-generated CNI config now declares cniVersion 1.0.0 (previously 0.3.1), required for multus compatibility on OpenShift 4.23+. A new Installation field, spec.cni.specVersion, allows pinning a version (including 0.3.1) or leaving it operator-managed (Auto). #5126 (@sridhartigera)
  • The ECK operator is updated to v3.4.0. #4967 (@vara2504)

Contributors

pasanw, sridhartigera, and vara2504
Assets 2
Loading