Centrifugo

v6.8.2 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 1mo Developer Productivity

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ably alternative eventsource grpc http-streaming http3

+13 more

messaging pubnub pusher real-time redis scalability server-sent-events socket-io sse streaming websocket websockets webtransport

ReleasePort's take

Light signal

editorial:auto 1mo

Centrifugo v6.8.2 adds Google Cloud ADC authentication for the OTLP exporter and fixes intermittent SASL errors in AWS MSK IAM‑authenticated Kafka consumers.

Why it matters: OTLP exporter can now authenticate with Google Cloud ADC via `google_cloud_adc_auth`; AWS MSK IAM consumers reliably re‑assume STS roles, eliminating ILLEGAL_SASL_STATE failures.

Summary

AI summary

Updates Miscellaneous, https://github.com/centrifugal/centrifugo/pull/1143, and https://github.com/centrifugal/centrifugo/pull/1148 across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Medium	OpenTelemetry OTLP exporter can authenticate with Google Cloud ADC via `google_cloud_adc_auth` option. OpenTelemetry OTLP exporter can authenticate with Google Cloud ADC via `google_cloud_adc_auth` option. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Medium	Kafka consumer adds configurable `dial_timeout` (default 3s) for TCP connections and scales initial Ping timeout with seed broker count. Kafka consumer adds configurable `dial_timeout` (default 3s) for TCP connections and scales initial Ping timeout with seed broker count. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Medium	Centrifugo Helm chart now supports Kubernetes Gateway API (Helm chart 13.3.0). Centrifugo Helm chart now supports Kubernetes Gateway API (Helm chart 13.3.0). Source: llm_adapter@2026-06-08 Confidence: high	—
Dependency	Low	Built with Go 1.26.4; dependency updates applied. Built with Go 1.26.4; dependency updates applied. Source: llm_adapter@2026-06-08 Confidence: high	—
Deprecation	Low	This is the latest release that ships `linux/386` binary; future releases will not include it. This is the latest release that ships `linux/386` binary; future releases will not include it. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	Kafka consumer with AWS MSK IAM auth re‑assumes STS role on each SASL re‑authentication, fixing periodic `ILLEGAL_SASL_STATE` errors. Kafka consumer with AWS MSK IAM auth re‑assumes STS role on each SASL re‑authentication, fixing periodic `ILLEGAL_SASL_STATE` errors. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	Unidirectional subscribe stream proxy now closes on unsubscribe. Unidirectional subscribe stream proxy now closes on unsubscribe. Source: llm_adapter@2026-06-08 Confidence: high	—
Refactor	Low	Centrifugo no longer embeds generated JSON config schema; configuration structure for `configdoc` is calculated at runtime. Centrifugo no longer embeds generated JSON config schema; configuration structure for `configdoc` is calculated at runtime. Source: llm_adapter@2026-06-08 Confidence: high	—

Full changelog

Centrifugo is an open-source scalable real-time messaging server. It instantly delivers messages to application online users connected over supported transports (WebSocket, HTTP-streaming, Server-Sent Events (SSE), GRPC, WebTransport). Centrifugo is built around channel subscriptions – so it's a user-facing PUB/SUB server.

Centrifugo is language-agnostic and can be used to build chat apps, live comments, multiplayer games, real-time data visualizations, collaborative tools, AI streaming responses, etc. in combination with any backend. It is well suited for modern architectures and allows decoupling the business logic from the real-time transport layer.

Official client SDKs are available for JavaScript (browser, Node.js, React Native), Dart/Flutter, Swift, Java, Python, Go, and .NET. In addition, Centrifugo supports a unidirectional approach for simple use cases with no SDK dependency.

For details, go to the Centrifugo documentation site. For runnable demos see centrifugal/examples.

What's changed

Improvements

OpenTelemetry: authenticate the OTLP exporter with Google Cloud Application Default Credentials (ADC) via the new google_cloud_adc_auth option, see #1143 and #1148. This allows exporting traces directly to Google Cloud's OTLP endpoint (telemetry.googleapis.com) without a sidecar collector, and works with both the grpc and http/protobuf exporter protocols.
Kafka consumer: added a configurable dial_timeout (default 3s) for establishing a TCP connection to a single broker, and made the initial Ping timeout scale with the number of seed brokers so discovery no longer fails prematurely when some brokers are unreachable, see #1151.
Centrifugo official Helm chart now supports k8s Gateway API - see Helm chart 13.3.0 release
Centrifugo now does not embed generated JSON config schema - configuration structure for configdoc is calculated in runtime

Fixes

Kafka consumer with AWS MSK IAM auth: re-assume the STS role on each SASL re-auth instead of reusing cached credentials, fixing periodic ILLEGAL_SASL_STATE errors during re-authentication, see #1146 by @samir-is-here which fixes #1144.
Fix unidirectional subscribe stream proxy not closing on unsubscribe, see #1150.

Miscellaneous

This release is built with Go 1.26.4
Dependency updates
This is the latest release that ships linux/386 binary
See also the corresponding Centrifugo PRO release.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Centrifugo

Get notified when new releases ship.

About Centrifugo

Language-agnostic real-time messaging (Websocket or SockJS) server.

All releases →