Daily Dev Stack Release Audit — September 5, 2026: Docker Ships Engine 29.8.0 as Cloudflare Doubles Worker Limits and RabbitMQ Patches an OAuth Secret Leak

Executive summary

• Docker Engine 29.8.0 and Compose 5.5.1 both shipped September 3, adding a `--umask` container flag, a rewritten reconciliation workflow that stops needless volume/network recreation, and updated AppArmor/SELinux rules that block a 32-bit `socketcall(2)` sandbox-escape path — see the Docker Engine 29.0 release notes and Compose releases.
• Cloudflare raised the Workers bundle-size cap to 64 MiB (uncompressed) on every plan, replacing the old 3 MB/10 MB compressed limits, while D1's free-tier row-read/write caps became hard-enforced on September 1 — Workers changelog, D1 changelog.
• Redis 8.10.1 is a security release fixing a CMSketch RDB-loading heap out-of-bounds write, a crafted-RDB memory-corruption bug, and a TLS client-certificate bypass via NUL-byte-truncated CN — patch immediately if you accept untrusted RDB files or client certs (release notes).
• RabbitMQ disclosed CVE-2026-57219 (CVSS 8.7), where the `/api/auth` endpoint leaked the OAuth client secret, alongside an authorization-bypass flaw on passive queue/exchange declares — fixed across the 3.13.x/4.0.x/4.1.x/4.2.x lines (advisory).
• BullMQ 6.3.4 (September 1) bumps the bundled Rust `croner` crate to v4 to close a security issue in cron-expression parsing (changelog).
• Nuxt 4.5.1 / 3.21.10 remains this week's most consequential framework patch if you haven't applied it yet: it closes a server-island RCE and route-rule auth bypass, and needs a follow-up cache purge — see the deep dive below.

Containers, Edge & Infrastructure

Docker

Docker Engine 29.8.0 (September 3) adds a `--umask` flag / `HostConfig.Umask` for controlling the umask a container's main process starts with, tightens AppArmor/SELinux policy to block `AF_VSOCK` socket creation via 32-bit `socketcall(2)`, and bumps BuildKit to v0.33.0, containerd to v2.3.4, and runc to v1.5.1. Swarm also gets fixes for `docker network inspect` failing on healthy networks and service DNS resolution after node failures. Full notes: docs.docker.com/engine/release-notes/29.0.

Docker Compose 5.5.1 (September 3) builds on the new reconciliation workflow introduced in 5.4.0, which stops Compose from needlessly recreating volumes and networks on every `up`. It also surfaces lifecycle-hook output directly in the CLI and adds OpenTelemetry shutdown-error reporting in debug mode. Release list: github.com/docker/compose/releases.

Docker Desktop is still on 4.83.0 (July 20), with no fresher GA build this week. Anyone still below 4.76.0 remains exposed to CVE-2026-8936, an unbounded-recursion flaw in the grpcfuse kernel module that lets a deeply nested bind-mount path panic the Desktop VM (CVSS 8.2) — worth confirming your fleet is past that line: advisory detail.

Cloudflare, Vercel & Edge

Cloudflare Workers bundles can now reach 64 MiB uncompressed on every plan, including Free — a big jump from the old 3 MB (Free) / 10 MB (paid) compressed limits, and good news for anyone shipping bundled ML models or large WASM binaries to the edge (changelog). Separately, D1's free-tier daily row read/write caps became hard-enforced on September 1 — queries now error once you hit the limit instead of degrading silently, resetting at midnight UTC (changelog).

Vercel shipped AWS PrivateLink support to general availability for private connections into AWS-hosted databases, added lower-cost "Basic" build machines (2 vCPU/8GB) for Pro and Enterprise teams, and now bundles a free `.app`/`.dev` domain with Pro teams for the first year (changelog).

Kubernetes, Podman & Cloud Platforms

• Kubernetes 1.34.11 (August 11) is the last routine patch before the 1.34 branch entered Maintenance Mode on August 27 — only critical fixes land from here until EOL on October 27. It fixes an endpoint-controller panic on empty `IPFamilies` and a kubelet bug that deleted CSI mount directories on failed operations (CHANGELOG-1.34.md).
• Podman 6.1.0 (August 12) adds `podman volume rename` and `podman machine restart`, retry/back-off flags for `manifest push`, and Quadlet `.container` support for `ImageVolume=` — see the official releases page.
• AWS, Railway, and Render had no dated announcement inside the last week at research time — AWS's latest weekly roundup covers August 31 (AWS blog), Railway's changelog tops out at August 20's "anonymous provisions" feature (Railway changelog), and Render's newest items are an updated Deploys page and default-flex Workflows compute (Render changelog).

Identity & Authentication (IAM)

Keycloak 26.7.2 (August 19) remains the release worth double-checking if you haven't patched yet: it closes eight CVEs including CVE-2026-18963, an unauthenticated password-reset bypass that let attackers skip the emailed action token and take over any account, admins included. Red Hat backported the same fix to 26.4.15 and 26.6.6 (release notes, advisory).

Authentik 2026.8.0 adds enterprise Privileged Access Management, Agent Accounts, user-switching, and scheduled user offboarding, and is now officially OpenID Certified™ with OAuth2 token exchange and dynamic client registration. It also ships a breaking change: forwarded headers are now honored only from configured trusted proxies, so audit your reverse-proxy setup before upgrading (release, blog).

Clerk shipped an adjustable 1–10 minute reverification window for sensitive actions, a new Admin Logs audit dashboard, and custom OAuth scopes for API clients through late August, with nothing dated in September yet (changelog). Auth0 followed with a self-service Cross-App Access configuration API and GA'd advanced MFA controls (configurable OTP length/lifetime, 1 hour–30 day device memory) on September 1–3 (changelog).

Better Auth 1.7.2 (August 26) is a bug-fix release correcting how permanent bans interact with prior temporary bans and tightening redirect-URL validation. The bigger change was 1.7.0 (August 18), which reworked database-join configuration and account-identity scoping (breaking) while adding OAuth device-flow (RFC 8628) and DPoP support (changelog). Auth.js/NextAuth stays in effective maintenance mode — stable is still v4.24.15 and v5 sits at `5.0.0-beta.32`, with the project's own maintainers pointing new projects to Better Auth instead (discussion).

Meta-Frameworks & Core Web Standards

Next.js 16.3.4 (August 31) re-enables AVIF image optimization and fixes a Turbopack test-mode recursion bug. The bigger story is still 16.3 itself (August 3): opt-in "Instant Navigations" via `cacheComponents` + `partialPrefetching`, up to 90% less dev-server memory, and native Node streams for SSR (blog, releases).

const nextConfig = {
  cacheComponents: true,
  partialPrefetching: true,
};

export default nextConfig;

React 19.2.8 (July 21) is still the newest tag, fixing an RSC-decoding performance regression; no fresher release has landed since (releases).

Nuxt 4.5.1 / 3.21.10 (July 27) is the release to prioritize if you're still on an older build: it closes a server-side RCE reachable through server-island props, a route-rule authentication bypass, a server-component denial-of-service path, and a cache-based cross-user data disclosure bug on `cache`/`swr`/`isr` routes. It supersedes the earlier CVE-2026-53721 fix — applying that alone is not enough. Nuxt 3 itself reached end-of-life on July 31, so 3.x installs need to move to 4.x to keep getting fixes (release).

npx nuxt upgrade --dedupe
# then purge CDN/edge caches for any cache/swr/isr routes

Vue 3.6.0-rc.7 is in release-candidate testing for Vapor Mode, a non-virtual-DOM compilation strategy for `<script setup>` and template-only components, riding on a reactivity-core rewrite built on alien-signals (releases).

SvelteKit 3 is deep into its release-candidate cycle (`next.17`–`next.25`), splitting adapter Vite plugins into `pre`/`post` phases, moving `defineParams` to `@sveltejs/kit/params`, and adding a `QUERY` method handler in `+server.js` (migration guide). Svelte 5.57 (September 1) adds `SvelteMap.getOrInsert()`/`getOrInsertComputed()` and native `<select defaultValue>` support (release notes).

Astro 7.3.1 (September 3) is a same-day patch fixing a startup/build error for projects using `astro:assets`, following 7.3.0's `--ignore-lock` flag for running multiple preview servers and concurrent rendering for incremental builds. The Cloudflare adapter also hit 14.3.0 with a new `finalize()` response handler (releases).

Backend Frameworks & Runtimes

NestJS 12.0.0 (August 27) is a breaking major: every core package now ships as ESM, though CJS apps keep working via `require(esm)`. It adds Standard Schema validation (Zod/Valibot) through a new `StandardSchemaValidationPipe`, a native `@nestjs/observe` SDK, and requires Node.js 20.19+ or 22.12+ (release).

import { StandardSchemaValidationPipe } from '@nestjs/common';
import { z } from 'zod';

const CreateUserSchema = z.object({ email: z.string().email() });

@Post()
create(@Body(new StandardSchemaValidationPipe(CreateUserSchema)) body: unknown) {
  // body is now validated and typed
}

Node.js shipped v22.23.2 / v24.18.1 / v26.5.1 as a coordinated security release fixing three High-severity CVEs — an HTTP/2 `maxSessionMemory` bypass (CVE-2026-56846), an HTTP/2 use-after-free (CVE-2026-56848), and a Permission Model path over-grant (CVE-2026-58043) — plus a request-smuggling issue from header truncation (CVE-2026-58044). No fresher security release has landed since (advisory).

Express hasn't had a new core release since 5.2.1, but its body-parser 1.20.6 / 2.3.0 patch closes CVE-2026-12590, where an invalid `limit` option silently disabled body-size enforcement and opened a denial-of-service path via oversized payloads (Express blog). Fastify continues shipping patch releases on its 5.x line with a parallel 6.0.0-alpha in progress; check fastify/fastify/releases directly for the current top entry, since we couldn't pin an exact version/date pair from a primary source this cycle.

ElysiaJS 1.4.30 (August 26) is a security-only release — the team says future 1.4.x builds will be security fixes only while active development moves to the AOT-compiled Elysia 2 branch (release). Hono is on the 4.13.x line, with recent patches addressing an XSS gap in JSX rendering (Suspense/ErrorBoundary/Context.Provider not escaping untrusted strings) — worth updating if you render any user-controlled strings through Hono's JSX helpers (releases).

FastAPI 0.141.1 (July 29) fixes background tasks and headers sourced from dependencies inside `app.frontend()` (release notes). Django shipped a security release — 6.0.8 / 5.2.17 (August 4) — closing a High-severity file-write/SSRF flaw in spatial `GDALRaster` lookups (CVE-2026-15307), a geometry-collection DoS (CVE-2026-15830), an admin XSS via unsafe `URLField` schemes (CVE-2026-15920), and a `check_for_language()` DoS (CVE-2026-15337) (blog).

Laravel keeps shipping weekly 13.x releases, the latest batch adding a `Cloud` facade for Laravel Cloud-managed queues, an `AsVector` Eloquent cast with MariaDB vector-distance queries, Scout support for Turbopuffer hybrid search, and automatic retries for safe PhpRedis commands (changelog).

UI Systems, Styling & Motion

shadcn/ui shipped a standalone `cn` package that replaces the `twMerge(clsx(...))` boilerplate every project used to hand-roll in `lib/utils.ts` — `npx shadcn init` now installs it directly, and the CLI is at v4.21.0 (changelog). Radix UI consolidated into a single `radix-ui` npm package (now v1.6.7) instead of many `@radix-ui/react-*` dependencies, with recent fixes for broken ARIA refs in Dialog and a Slider `onValueCommit` bug (releases).

Tailwind CSS 4.3.3 (July 16) adds `--poll[=ms]` to the CLI's `--watch` mode for flaky filesystem events and fixes case-sensitive hex-color matching (releases). Material UI 9.4.0 (August 27) adds an opt-in keyboard focus ring via `theme.focusVisible` and improves Tooltip behavior on disabled trigger buttons (releases). Motion 13.2.0 (September 2) is the newest npm tag, following 13.1.x's guarded `window` access for non-browser runtimes and better React 19 strict-mode support for `AnimatePresence` (changelog).

Databases, Caching & Vector Search

PostgreSQL 18.6 (August 13) closes 28 security issues and over 110 bugs and adds OpenSSL 4 support — note that a reindex may be required for GIN, btree_gist, or ltree indexes after upgrading (release notes). pgvector 0.8.6 (July 29) fixes an IVFFlat build buffer overflow on 32-bit systems and an IVFFlat scan memory-usage issue with nested-loop joins (changelog).

Redis 8.10.1 (August 17) is a security release that supersedes an earlier five-CVE advisory from May. It fixes a CMSketch RDB-loading heap out-of-bounds write, a crafted-RDB `SLOT_INFO` memory-corruption bug with possible remote code execution, a TLS client-certificate bypass via NUL-byte-truncated CN, and several Vector Sets use-after-free issues — treat this as a same-week patch if you run Redis with untrusted RDB imports or client-cert auth (release).

MongoDB Server 8.0.29 (August 11) is the latest GA patch on the 8.0 line, while the 8.2 Rapid Release branch is still at 8.2.3 (release notes).

ClickHouse 26.8 LTS is in progress with a breaking change to how `X-ClickHouse-Format` interacts with `FORMAT`, plus new `CREATE HANDLER` custom HTTP handlers and SQL pipe operators (`|>`) (changelog). DuckDB 1.5.5 (July 22) is a bugfix release covering security and memory-leak fixes in the Parquet, JSON, and storage layers (releases).

Database Tools, ORMs & BaaS

Prisma Compute reached general availability (August 28) with a free tier of 1M monthly requests and per-branch environments, while Prisma 8 (currently `rc.8`) adds schema support for expression/partial/unique indexes and RLS-policy introspection. Breaking changes to watch for: `prisma-next.config.ts` is gone in favor of `prisma.config.ts` with `definePrismaConfig`, and query methods `.take()`/`.skip()` are renamed to `.limit()`/`.offset()` — a `@prisma/prisma7` compatibility package lets 7 and 8 coexist during migration (changelog).

Drizzle ORM has no release inside the last week; the newest confirmed build is `1.0.0-beta.22` from April, with a stable 1.0 GA date still unconfirmed (release history).

Supabase moved read-replica management into Project Settings → Infrastructure (August 21) and fixed daily backups occasionally being skipped by a scheduling timeout (August 12). Mark your calendar: the Management API's `logs.all` endpoint is being removed on September 23, 2026 in favor of the ClickHouse-backed logs endpoint (changelog).

Firebase moved Remote Config to usage-based pricing on September 1 — 100k free daily fetches per project, then pay-as-you-go on Blaze — and folded native A/B Testing into Remote Config directly (release notes).

Background Jobs, Messaging & Task Queues

BullMQ 6.3.4 (September 1) bumps the bundled Rust `croner` crate to v4 to close a cron-expression-parsing security issue, and 6.3.3 fixed Bun-runtime connection duplication (changelog).

RabbitMQ 4.3.5 (August 17) is the current stable, but the bigger news is a trio of disclosures: CVE-2026-57219 (CVSS 8.7), where `/api/auth` leaked the OAuth client secret; CVE-2026-57221, an authorization bypass on passive queue/exchange declares that leaked metadata; and CVE-2026-63336 in the Java client, where `TrustEverythingTrustManager` accepted any TLS certificate by default. All are fixed across the 3.13.x through 4.2.x lines (advisory, CVE-2026-57221, CVE-2026-63336).

Apache Kafka 4.3.1 (June 25) is still the newest bugfix tag, notably closing a Streams RocksDB native-memory leak. Two CVEs are worth confirming you're past: CVE-2026-35554 (CVSS 8.7), a producer buffer-pool race condition that could corrupt or misroute messages, fixed in 3.9.2/4.0.2/4.1.2/4.2.0+; and CVE-2026-41115, where the `CONSUMER_GROUP_DESCRIBE` API checked the wrong ACL operation across 4.0.0–4.3.0 (Kafka releases, GHSA-5qcv-4rpc-jp93).

Temporal patched CVE-2026-5724 back in July (fixed in 1.31.2/1.30.4/1.29.6/1.28.4) — a missing auth interceptor on the streaming `AdminService/StreamWorkflowReplicationMessages` RPC that allowed unauthenticated access to replication data. If your cluster predates those builds, it's worth confirming the patch landed (GHSA-q98v-9f9w-f49q).

What to patch today

• Redis → 8.10.1 if you accept untrusted RDB files or use client-cert TLS auth.
• RabbitMQ → 4.2.6 / 4.1.11 / 4.0.20 / 3.13.15 or later to close the OAuth client-secret leak.
• Nuxt → 4.5.1 / 3.21.10, then run `npx nuxt upgrade --dedupe` and purge edge caches.
• Keycloak → 26.7.2 (or the matching Red Hat build) for the unauthenticated password-reset bypass.
• Django → 6.0.8 / 5.2.17 if you use GeoDjango spatial lookups.
• Express (body-parser) → 1.20.6 / 2.3.0 if you rely on a custom `limit` option.