Skip to content

openrundev/openrun](https:

v0.18.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

appserver containers deployment devops-tools docker go
+7 more
htmx internal-tools kubernetes kubernetes-deployment low-code-platform self-hosted starlark

Affected surfaces

auth rbac

Summary

AI summary

Broad release touches @akclace, https://openrun.dev/docs/applications/servicebindings/, b655a47626f25aa64bdf908dbf15045ef993adc1, and fb30ceb35179dc2e4b044186403e4def9540a59b.

Changes in this release

Feature Medium

Adds Service Binding feature for endpoint credentials access to Postgres and MySQL databases.

Adds Service Binding feature for endpoint credentials access to Postgres and MySQL databases.

Source: llm_adapter@2026-06-11

Confidence: high

Feature Low

Adds --verify option for reload command to check container status.

Adds --verify option for reload command to check container status.

Source: llm_adapter@2026-06-11

Confidence: high

Feature Low

Adds bind_perm option for app creation and apply operations.

Adds bind_perm option for app creation and apply operations.

Source: llm_adapter@2026-06-11

Confidence: high

Feature Low

Adds permission check support for binding to sources.

Adds permission check support for binding to sources.

Source: llm_adapter@2026-06-11

Confidence: high

Feature Low

Allows hostname mapping for binding URLs.

Allows hostname mapping for binding URLs.

Source: llm_adapter@2026-06-11

Confidence: high

Bugfix Medium

Fixes duplicate path issue in Location update operation.

Fixes duplicate path issue in Location update operation.

Source: llm_adapter@2026-06-11

Confidence: high

Bugfix Medium

Fixes binding creation failures for development apps.

Fixes binding creation failures for development apps.

Source: llm_adapter@2026-06-11

Confidence: high

Bugfix Medium

Fixes permission approval check in bindings.

Fixes permission approval check in bindings.

Source: llm_adapter@2026-06-11

Confidence: high

Bugfix Medium

Fixes issue where bindings were unavailable during app verification.

Fixes issue where bindings were unavailable during app verification.

Source: llm_adapter@2026-06-11

Confidence: high

Bugfix Low

Reapplies pending bindings after verification check.

Reapplies pending bindings after verification check.

Source: llm_adapter@2026-06-11

Confidence: high

Full changelog

Changelog

Adds the Service Binding feature which gives applications access to endpoint credentials. Postgres and MySQL databases are currently supported by OpenRun.

Changes

  • 4743ff23a3723945fbdb817f97601052dd2ee069: Add --verify option for reload which checks container status (@akclace)
  • b655a47626f25aa64bdf908dbf15045ef993adc1: Add bind_perm option for app creation/apply (@akclace)
  • fb30ceb35179dc2e4b044186403e4def9540a59b: Add docs for bind perms (@akclace)
  • 33a10754b2705b719dc43a1cdbfc36b18e7316be: Add permission check support binding to sources (@akclace)
  • 34fe65d7a7b3c349101032f386eb0e5676c8f9bb: Add todo app for bindings demo (@akclace)
  • 16f417b34024ee345aef7139c1738f52f3784b79: Add verify support for apply and sync (@akclace)
  • ef47e701048ecff63beb5a37cf61b3a788571839: Allow hostname mapping for binding url (@akclace)
  • 4642519b156260371165f293e12b8441fd7bcdf6: Check for binding being approved before using binding in env map (@akclace)
  • c50e42b0a950154ab3bb46f3d1560cf038b75645: Do the hostname mapping automatically for bindings (@akclace)
  • dc16aa4b66aa959d557fe4905dadfa4686515ee0: Enable verify for admin example app (@akclace)
  • 6b587a4079fa5fc8b01efb12b85f8ef09ef85a07: Fix Location update to avoid path duplicaion (@akclace)
  • 76a7054c5c7961243201bfe1748fdeed13b8f963: Fix binding creation for dev apps (@akclace)
  • 43a9ac65a7ca2d179521a35d99262bc0bb2b1a58: Fix binding perm approval check (@akclace)
  • 332c1c651cf1af07c7b29b2322459ea00ec502a4: Fix flaky test (@akclace)
  • 87249b1d9d5a7c79ba2889081fd7ac63f6bc05df: Fix issues with bindings not being available during app verify (@akclace)
  • 10f140a0fe93a5b31da90934fea6c8163243d0d8: Fix test case (@akclace)
  • 9d1a1d5b936b7b349b482a6e395815ed87149749: Raise health check timeout for tests (@akclace)
  • f6a592c57c96ddd6538b7500a21b99a1761ac8b8: Reapply pending bindings after verification check (@akclace)
  • b6690f96d8363289e85b36f3de891d27e8385b8e: Update docs for bindings and verify (@akclace)
  • 4b03410e652ba523e5fff9c74708f1bbe30d3482: Update quick start docs (@akclace)
  • 6bb529089a4c5417c5e3a1c3ab14ede0717c03c2: Update quick start docs (@akclace)
  • f87fa6e5fbc6267acbb5c60d39fceea4b66e1732: Updated example app (@akclace)
  • f516762e825296e61df38762453d23dc02a5b83b: Use app entry during app listing (@akclace)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track openrundev/openrun](https:

Get notified when new releases ship.

Sign up free

About openrundev/openrun](https:

All releases →

Related context

Beta — feedback welcome: [email protected]