dgraph releases - releaseport

No immediate action

v25.3.8 Maintenance 18d

Routine maintenance and dependency updates.

Open

Upgrade now

v25.3.7 Security relevant 1mo

Dependencies

CVE bumps

Open

Review required

v25.3.6 Mixed 1mo

Auth

CI labeler removed; GraphQL aligns; jemalloc patched

Open

No immediate action

v25.3.5 Breaking risk 1mo

Backup rejection + Go upgrade + buildvar removal

Open

No immediate action

v25.3.4 Security relevant 2mo

CVE-2026-44840 fix

Open

v24.1.9 Security 2mo

Security fixes

Changelog

Address CVE CVE-2026-44840

v25.3.3 Security relevant patches GHSA-mrxx-39g5-ph77 patches GHSA-vvf7-6rmr-m29q patches GHSA-x92x-px7w-4gx4 3mo

Security fixes

Full changelog

What's Changed

chore(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 by @dependabot[bot] in https://github.com/dgraph-io/dgraph/pull/9682
chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 by @dependabot[bot] in https://github.com/dgraph-io/dgraph/pull/9681
fix: address CVEs: CVE-2026-41327, CVE-2026-41328, CVE-2026-41492

Full Changelog: https://github.com/dgraph-io/dgraph/compare/v25.3.2...v25.3.3

v24.1.8 Security 3mo

Security fixes