kestra

v1.0.42 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 15d Automation & Workflows

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

automation data-orchestration devops high-availability iac java

+6 more

low-code lowcode orchestration pipeline pipeline-as-code workflow

Affected surfaces

rce_ssrf auth

Summary

AI summary

Updates 🐛 Bug Fixes ci, 🛠 Build, and 📘 Subtasks version across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature	Medium	Replaced GH_PERSONAL_TOKEN with GitHub App installation tokens in CI. Replaced GH_PERSONAL_TOKEN with GitHub App installation tokens in CI. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix
Bugfix	Medium	parenTransversalGuard now handles encoded characters in storage. parenTransversalGuard now handles encoded characters in storage. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low	—
Bugfix	Medium	Increased liveness coordinator test timeouts to reduce flakiness in tests. Increased liveness coordinator test timeouts to reduce flakiness in tests. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low	—
Bugfix	Medium	Prevented out-of-memory cascade in CI webserver test suite. Prevented out-of-memory cascade in CI webserver test suite. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low	—
Bugfix	Medium	Unflaked ExecutionControllerRunnerTest, addressing issue #16031. Unflaked ExecutionControllerRunnerTest, addressing issue #16031. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low	—

Full changelog

Changelog

📘 Subtasks

version

13175d1 update to version '1.0.42'

🐛 Bug Fixes

d148cf4 replace GH_PERSONAL_TOKEN with GitHub App installation tokens (#16041), closes #16041

storage

6076c00 parenTransversalGuard was not handling encoded characters

tests

4f69acc increase liveness coordinator test timeouts to prevent flakiness

webserver

4b637da prevent OOM-cascade in CI test suite

global

acf943d unflaky ExecutionControllerRunnerTest (#16031), closes #16031

🛠 Build

ec5975b set a develocity tag to mark this as releases/v1.0.x
e17aabd add develocity to this release branch

Contributors

We'd like to thank the following people for their contributions:
GitHub, Roman Acevedo, brian-mulier-p, github-actions[bot]

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track kestra

Get notified when new releases ship.

About kestra

Event Driven Orchestration & Scheduling Platform for Mission Critical Applications

All releases →