RepoJournal
Kubernetes

@kubernetes

Container orchestration - what platform teams ship on

Keep up with Kubernetes in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

ETCD STREAMING LANDS IN APISERVER, KSM PATCHES CRITICAL GOLANG VULNS

By RepoJournal · Filed · About Kubernetes

Kubernetes apiserver is shipping etcd RangeStream support with proper metrics instrumentation, while kube-state-metrics dropped an emergency security release addressing high-severity Go vulnerabilities.

The apiserver deck landed three interconnected changes that overhaul how list operations work at the etcd layer. First, the FeatureSupportChecker now gates RangeStream availability [1], so clusters on etcd 3.7+ use streaming lists while older deployments fall back to pagination without retry loops. Metrics instrumentation follows: listStream operations now record duration and errors over the full stream consumption [2], not just the initial handshake, giving you real visibility into compaction errors mid-stream. Watch cache architecture got a structural cleanup [3] that separates watch history from storage concerns, aligning the codebase with etcd's own patterns. Meanwhile, kube-state-metrics v2.19.1 [4] ships with Go 1.26.4 and addresses CVE-2026-42504 plus several high-scoring vulnerabilities in golang.org/x/net, oauth2, sys, term, and text. The konnectivity network proxy upgraded to v0.36 [5] across the main repo, adding pending backend request timeout options and enforcing server-ca-cert validation in TCP mode. On the test-infra front, EOL Kubernetes 1.32 jobs are being dropped [6], removing 869 conformance jobs from the grid and fixing recurring kOps CI failures. Documentation updates continue across Japanese and Chinese localization [7], [8], [9].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Merge pull request #139542 from Jefftree/rangestream-feature-support-checker kubernetes/apiserver
  2. [2] Merge pull request #139601 from Jefftree/fix-liststream-metrics kubernetes/apiserver
  3. [3] Merge pull request #139655 from serathius/watchcache-split-structs kubernetes/apiserver
  4. [4] v2.19.1 ↗ kubernetes/kube-state-metrics
  5. [5] Merge pull request #139636 from cheftako/anp-release kubernetes/apiserver
  6. [6] Drop EOL Kubernetes 1.32 e2e jobs ↗ kubernetes/test-infra
  7. [7] [ja] Update i18n/ja.toml ↗ kubernetes/website
  8. [8] [ja] Unify cluster katakana notation ↗ kubernetes/website
  9. [9] [zh-cn]sync preview-locally ↗ kubernetes/website

Quick answers

What shipped in Kubernetes on June 12, 2026?
Kubernetes apiserver is shipping etcd RangeStream support with proper metrics instrumentation, while kube-state-metrics dropped an emergency security release addressing high-severity Go vulnerabilities. In total, 58 commits, 29 pull requests, and 1 releases landed.
Who contributed to Kubernetes on June 12, 2026?
4 developers shipped this update, including dims, kfess, Okabe-Junya, and my-git9.
What were the notable Kubernetes updates?
Merge pull request #139542 from Jefftree/rangestream-feature-support-checker, Merge pull request #139601 from Jefftree/fix-liststream-metrics, and Merge pull request #139655 from serathius/watchcache-split-structs.

More from @kubernetes

Daily updates, in your inbox

Follow Kubernetes

Keep up with Kubernetes in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.