📦 Download Binaries from https://openobserve.ai/downloads

• fix: generate and store the ext auth salt on a new install instead of refusing to start (port to v1.1.0) by @hengfeiyang in https://github.com/openobserve/openobserve/pull/15206
• fix(ai): bind confirm action to the request org (v1.1.0) (#15228) by @007harshmahajan in https://github.com/openobserve/openobserve/pull/15271
• fix: accept compacted Collector profile dictionaries (port to v1.1.0) by @hengfeiyang in https://github.com/openobserve/openobserve/pull/15325
• fix: hide Product Analytics behind ZO_PRODUCT_ANALYTICS_ENABLED (v1.1.0) by @omkarK06 in https://github.com/openobserve/openobserve/pull/15346

Full Changelog: https://github.com/openobserve/openobserve/compare/v1.1.0-rc2...v1.1.0-rc3

Hello Superset Community,

This is a call for the vote to release Apache Superset version 7.0.0.

The release candidate: https://dist.apache.org/repos/dist/dev/superset/7.0.0rc1/

The Git tag for the release: https://github.com/apache/superset/tree/7.0.0rc1

The CHANGELOG for the release: https://github.com/apache/superset/blob/7.0.0rc1/CHANGELOG/7.0.0.md

The instructions for updating to the release: https://github.com/apache/superset/blob/7.0.0rc1/UPDATING.md

Public keys are available at: https://www.apache.org/dist/superset/KEYS

The vote will be left open until at least 72 hours have passed and the necessary number of votes (3) have been reached.

Please vote accordingly:

[ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove with the reason

Thanks, The Apache Superset Team

• feat(security): add a --security "anonymous=..." posture, defaulting to full by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9844
• feat(bulk): deterministic initial tablet placement via --tablet_placement by @shiva-istari in https://github.com/dgraph-io/dgraph/pull/9842
• feat(zero): allow --rebalance_interval=0 to disable automatic tablet rebalancing by @shiva-istari in https://github.com/dgraph-io/dgraph/pull/9848
• feat(edgraph): add an AccessController and separate identity from tenancy by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9813
• perf(unique): make verifyUniqueWithinMutation linear by @shiva-istari in https://github.com/dgraph-io/dgraph/pull/9822
• fix(unique): include language in value identity by @gooohgb in https://github.com/dgraph-io/dgraph/pull/9820
• fix(query): avoid eager UID materialization on posting reads by @gooohgb in https://github.com/dgraph-io/dgraph/pull/9809
• chore(deps): bump badger from v4.9.4 to v4.9.6 by @shiva-istari in https://github.com/dgraph-io/dgraph/pull/9849
• chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 by @dependabot[bot] in https://github.com/dgraph-io/dgraph/pull/9821
• deps: upgrade golang.org/x/crypto to v0.55.0 by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9826
• chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in https://github.com/dgraph-io/dgraph/pull/9828
• chore(test): pull MinIO test images from quay.io instead of Docker Hub by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9832
• chore(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 by @dependabot[bot] in https://github.com/dgraph-io/dgraph/pull/9835
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.44.0 to 1.45.0 by @dependabot[bot] in https://github.com/dgraph-io/dgraph/pull/9833
• chore(core): remove net/trace event log by @xqqp in https://github.com/dgraph-io/dgraph/pull/9593
• chore(test): pull MinIO test images from an org-owned ghcr mirror by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9843
• docs: fix typo neccessary -> necessary by @vaibhav8a in https://github.com/dgraph-io/dgraph/pull/9819

• @vaibhav8a made their first contribution in https://github.com/dgraph-io/dgraph/pull/9819

Full Changelog: https://github.com/dgraph-io/dgraph/compare/v25.4.1...v25.5.0

Download page What's new highlights

• Security: Fix CVE-2026-15577
• Security: Fix CVE-2026-33374
• Security: Fix CVE-2026-93294

• Alerting: Strip sensitive headers from oauth2 cross-host redirects #134424, @JacobsonMT
• Dashboard: Fall back when collection deletion is unsupported (#128259) #134229, @bestend

• CVE-2026-92539: IAM: Fix CVE-2026-92539: Scim endpoints (Enterprise)

Download page What's new highlights

• Security: Fix CVE-2026-15577
• Security: Fix CVE-2026-33374
• Security: Fix CVE-2026-93294
• Security: Fix CVE-2026-95502

• Alerting: Strip sensitive headers from oauth2 cross-host redirects #134428, @JacobsonMT
• Dashboard: Fall back when collection deletion is unsupported #134225, @bestend

• CVE-2026-92539: IAM: Fix: SCIM (Enterprise)

Release note is coming...