kinto

v26.2.0 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 5d NoSQL & Document

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

api decentralisation http storage web

Affected surfaces

auth

Summary

AI summary

Updates Dependency Updates, New Features, and OpenID across a mixed release.

Type	Severity	Summary	CVE
Feature	Medium	OpenID: verify token audience if configured OpenID: verify token audience if configured Source: llm_adapter@2026-05-29 Confidence: high	—
Dependency	Low	Bump redis from 7.4.0 to 8.0.0 Bump redis from 7.4.0 to 8.0.0 Source: llm_adapter@2026-05-29 Confidence: high	—
Dependency	Low	Update Kinto Admin version to 6.3.0 Update Kinto Admin version to 6.3.0 Source: llm_adapter@2026-05-29 Confidence: high	—

Full changelog

OpenID: verify token audience if configured by @leplatrem in https://github.com/Kinto/kinto/pull/3713

Bump the minor-patch group with 4 updates by @dependabot[bot] in https://github.com/Kinto/kinto/pull/3711
Bump redis from 7.4.0 to 8.0.0 by @dependabot[bot] in https://github.com/Kinto/kinto/pull/3715
Update Kinto Admin version to 6.3.0 by @github-actions[bot] in https://github.com/Kinto/kinto/pull/3712
Bump the minor-patch group across 1 directory with 6 updates by @dependabot[bot] in https://github.com/Kinto/kinto/pull/3714

Full Changelog: https://github.com/Kinto/kinto/compare/26.1.1...26.2.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track kinto

Get notified when new releases ship.

About kinto

A generic JSON document store with sharing and synchronisation capabilities.