This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+7 more
Affected surfaces
Summary
AI summaryBroad release touches @akclace, https://openrun.dev/docs/applications/servicebindings/, b655a47626f25aa64bdf908dbf15045ef993adc1, and fb30ceb35179dc2e4b044186403e4def9540a59b.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds Service Binding feature for endpoint credentials access to Postgres and MySQL databases. Adds Service Binding feature for endpoint credentials access to Postgres and MySQL databases. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Feature | Low |
Adds --verify option for reload command to check container status. Adds --verify option for reload command to check container status. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Feature | Low |
Adds bind_perm option for app creation and apply operations. Adds bind_perm option for app creation and apply operations. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Feature | Low |
Adds permission check support for binding to sources. Adds permission check support for binding to sources. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Feature | Low |
Allows hostname mapping for binding URLs. Allows hostname mapping for binding URLs. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Fixes duplicate path issue in Location update operation. Fixes duplicate path issue in Location update operation. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Fixes binding creation failures for development apps. Fixes binding creation failures for development apps. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Fixes permission approval check in bindings. Fixes permission approval check in bindings. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Fixes issue where bindings were unavailable during app verification. Fixes issue where bindings were unavailable during app verification. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Low |
Reapplies pending bindings after verification check. Reapplies pending bindings after verification check. Source: llm_adapter@2026-06-11 Confidence: high |
— |
Full changelog
Changelog
Adds the Service Binding feature which gives applications access to endpoint credentials. Postgres and MySQL databases are currently supported by OpenRun.
Changes
- 4743ff23a3723945fbdb817f97601052dd2ee069: Add --verify option for reload which checks container status (@akclace)
- b655a47626f25aa64bdf908dbf15045ef993adc1: Add bind_perm option for app creation/apply (@akclace)
- fb30ceb35179dc2e4b044186403e4def9540a59b: Add docs for bind perms (@akclace)
- 33a10754b2705b719dc43a1cdbfc36b18e7316be: Add permission check support binding to sources (@akclace)
- 34fe65d7a7b3c349101032f386eb0e5676c8f9bb: Add todo app for bindings demo (@akclace)
- 16f417b34024ee345aef7139c1738f52f3784b79: Add verify support for apply and sync (@akclace)
- ef47e701048ecff63beb5a37cf61b3a788571839: Allow hostname mapping for binding url (@akclace)
- 4642519b156260371165f293e12b8441fd7bcdf6: Check for binding being approved before using binding in env map (@akclace)
- c50e42b0a950154ab3bb46f3d1560cf038b75645: Do the hostname mapping automatically for bindings (@akclace)
- dc16aa4b66aa959d557fe4905dadfa4686515ee0: Enable verify for admin example app (@akclace)
- 6b587a4079fa5fc8b01efb12b85f8ef09ef85a07: Fix Location update to avoid path duplicaion (@akclace)
- 76a7054c5c7961243201bfe1748fdeed13b8f963: Fix binding creation for dev apps (@akclace)
- 43a9ac65a7ca2d179521a35d99262bc0bb2b1a58: Fix binding perm approval check (@akclace)
- 332c1c651cf1af07c7b29b2322459ea00ec502a4: Fix flaky test (@akclace)
- 87249b1d9d5a7c79ba2889081fd7ac63f6bc05df: Fix issues with bindings not being available during app verify (@akclace)
- 10f140a0fe93a5b31da90934fea6c8163243d0d8: Fix test case (@akclace)
- 9d1a1d5b936b7b349b482a6e395815ed87149749: Raise health check timeout for tests (@akclace)
- f6a592c57c96ddd6538b7500a21b99a1761ac8b8: Reapply pending bindings after verification check (@akclace)
- b6690f96d8363289e85b36f3de891d27e8385b8e: Update docs for bindings and verify (@akclace)
- 4b03410e652ba523e5fff9c74708f1bbe30d3482: Update quick start docs (@akclace)
- 6bb529089a4c5417c5e3a1c3ab14ede0717c03c2: Update quick start docs (@akclace)
- f87fa6e5fbc6267acbb5c60d39fceea4b66e1732: Updated example app (@akclace)
- f516762e825296e61df38762453d23dc02a5b83b: Use app entry during app listing (@akclace)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About openrundev/openrun](https:
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]