kestra

v1.1.18 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 2mo Automation & Workflows

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai-agents automation control-plane data-engineering data-orchestration data-orchestrator

+13 more

devops etl high-availability infra-automation infra-ops iac java low-code orchestration pipeline pipeline-as-code scheduler workflow

Affected surfaces

auth

Summary

AI summary

GH_PERSONAL_TOKEN replaced with GitHub App installation tokens in CI.

Type	Severity	Summary	CVE
Bugfix	Medium	replace GH_PERSONAL_TOKEN with GitHub App installation tokens replace GH_PERSONAL_TOKEN with GitHub App installation tokens Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low	—

Full changelog

version

0b998f3 replace GH_PERSONAL_TOKEN with GitHub App installation tokens (#16042), closes #16042

We'd like to thank the following people for their contributions:
GitHub, brian-mulier-p, github-actions[bot]

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track kestra

Get notified when new releases ship.

About kestra

Event Driven Orchestration & Scheduling Platform for Mission Critical Applications