Who contributed to Kubernetes on July 21, 2026?

4 developers shipped this update, including kubernetes-prow[bot], my-git9, Davanum Srinivas, and Kubernetes Publisher.

What were the notable Kubernetes updates?

Update google.golang.org/grpc to v1.82.1, Update google.golang.org/grpc to v1.82.1, and Update google.golang.org/grpc to v1.82.1.

@kubernetes

Container orchestration — what platform teams ship on

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

GRPC SECURITY FIXES ROLL ACROSS KUBERNETES CORE IN COORDINATED PUSH

By RepoJournal · Filed 06:57 UTC on July 21, 2026 · About Kubernetes

4 people shipped this

my-git9 @my-git9 4 cited

Davanum Srinivas @dims 4 cited

Kubernetes Publisher @k8s-publishing-bot 4 cited

kubernetes-prow[bot] @kubernetes-prow[bot] 1 cited

Google.golang.org/grpc v1.82.1 shipped with three security fixes, and Kubernetes is patching it everywhere at once: externaljwt, endpointslice, kube-scheduler, and dynamic-resource-allocation all landed the update overnight.

In brief

kubernetes/externaljwt bumped grpc to v1.82.1. security fixes landed in the last 48 hours. if you're running JWT validation on the control plane, this matters.
kubernetes/endpointslice pulled grpc v1.82.1. endpoint slice handling is table-stakes for service mesh traffic. the fix is real.
kubernetes/kube-scheduler is now on grpc v1.82.1. scheduler security holes get exploited fast. this patch was overdue.
kubernetes/dynamic-resource-allocation landed KEP-5304 (declarative validation). gpu/device scheduling just got stricter rules. plugin authors need to read this.

The grpc-go update [1] [2] [3] [4] closes a critical DoS vector where HTTP/2 control frame floods could exhaust memory and CPU on gRPC servers. There is no v1.81.x backport, making this a forced upgrade for anyone on that line. The update also removes the GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment variable, which means any production configs using that flag need immediate attention before you deploy. In parallel, the scheduler landed In-Place Pod Resize preemption in alpha [5], giving your workload-conscious teams a new lever for managing resource-constrained clusters. DRA continues hardening itself with declarative validation for device metadata [6], additional DistinctAttribute test coverage [7], and critical fixes for shared device state management [8]. The documentation team synced Chinese language docs across tutorials and guides [9] [10] [11] [12], and security.txt moved to the proper well-known directory [13], ensuring compliance tooling can find your security contacts.

Action items

→ Verify no production code uses GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING before merging grpc v1.82.1 kubernetes/kubernetes [immediate]
→ Plan grpc v1.82.1 rollout across all gRPC-dependent services; no 1.81.x patch available kubernetes/kubernetes [plan]
→ Monitor scheduler and DRA changes for stability in your test environment kubernetes/kube-scheduler [monitor]

References

[1] Update google.golang.org/grpc to v1.82.1 kubernetes/externaljwt
[2] Update google.golang.org/grpc to v1.82.1 kubernetes/endpointslice
[3] Update google.golang.org/grpc to v1.82.1 kubernetes/kube-scheduler
[4] Update google.golang.org/grpc to v1.82.1 kubernetes/dynamic-resource-allocation
[5] Merge pull request #140000 from natasha41575/ippr-preemption kubernetes/kube-scheduler
[6] Merge pull request #140687 from alaypatel07/kep-5304-declarative-validation kubernetes/dynamic-resource-allocation
[7] Merge pull request #140727 from kiarashazarnia/fix-distinct-attribute-multi-device kubernetes/dynamic-resource-allocation
[8] Merge pull request #140702 from weizhoublue/fix/dra-consumable-capacity-quantity-copy kubernetes/dynamic-resource-allocation
[9] [zh-cn]sync style-guide ↗ kubernetes/website
[10] [zh-cn]sync updating-configuration-via-a-configmap ↗ kubernetes/website
[11] [zh-cn]sync deploy-intro explore-intro expose-intro ↗ kubernetes/website
[12] [zh-cn]sync kubelet-standalone scale-intro ↗ kubernetes/website
[13] Merge pull request #56491 from Bhavesh189/fix-security-txt kubernetes/website

Quick answers

What shipped in Kubernetes on July 21, 2026?: Google.golang.org/grpc v1.82.1 shipped with three security fixes, and Kubernetes is patching it everywhere at once: externaljwt, endpointslice, kube-scheduler, and dynamic-resource-allocation all landed the update overnight. In total, 42 commits and 27 pull requests landed.
Who contributed to Kubernetes on July 21, 2026?: 4 developers shipped this update, including kubernetes-prow[bot], my-git9, Davanum Srinivas, and Kubernetes Publisher.
What were the notable Kubernetes updates?: Update google.golang.org/grpc to v1.82.1, Update google.golang.org/grpc to v1.82.1, and Update google.golang.org/grpc to v1.82.1.

KUBERNETES CORE FIXES DRA FRACTIONAL QUANTITIES, VSPHERE STRIPS MD5 CRYPTO

Dynamic Resource Allocation now handles fractional resource requests, while vSphere cloud provider rips out cryptographically weak MD5 hashing and patches critical CVEs.

go 39 shipped 1-min read

@kubernetes 2 days ago

AZURE KOPS TESTS FINALLY STABLE, STATEFULSET RECREATION LANDS

Three weeks of Azure e2e failures are fixed: kindnet pods can now reach the kube-apiserver, and StatefulSets get their long-awaited recreate update strategy.

go 51 shipped 2-min read

@kubernetes 3 days ago

CLUSTER TRUST BUNDLES GO GA, SCHEDULER GETS SMARTER ON PREEMPTION

Kubernetes ships ClusterTrustBundles to stable while the scheduler learns to bind before it breaks things.

go 94 shipped 1-min read

@kubernetes 4 days ago

KUBERNETES TIGHTENS DRA NUMA SUPPORT AND WINDOWS TEST COVERAGE

Kubernetes shipped NUMA device attributes for DRA workload placement [ref:17] while simultaneously hardening Windows node test infrastructure [ref:9] and cleaning up scheduler integration tests [ref:16].

go 64 shipped 1-min read

Elsewhere on the wire

@cachyos about 9 hours ago

NORWAY MIRROR DOWN, KERNEL STACK SHIPS MAINTENANCE RELEASES

CachyOS infrastructure is reporting a downed Norway mirror while the kernel and toolchain stacks push routine version bumps across the board.

infra 55 shipped 1-min read

Elixir & Phoenix about 9 hours ago

ECTO GAINS FRAGMENT COLUMN NAMING, PHOENIX PLUGS GET SMARTER

Ecto's new with_columns/2 lets you assign names to SQL fragments, while Phoenix now handles module plugs with options in pipe_through declarations.

elixir 14 shipped 1-min read

Mobile platforms about 9 hours ago

KOTLIN RIPS OUT INTERPRETER GUTS, FLUTTER PATCHES RENDERING PIPELINE

Kotlin is systematically removing its IR interpreter in a multi-commit cleanup that signals a major shift in how the compiler handles intermediate representation, while Flutter ships critical Vulkan safety fixes and expands autofill support.

mobile 115 shipped 2-min read

@dotnet about 9 hours ago

MAUI 11 PREVIEW 6 SHIPS WITH 190 COMMITS, MACIOS FIXES GENERATOR FLAKINESS

.NET MAUI 11.0.0-preview.6 landed with significant platform improvements while dotnet/macios tackles a critical test parallelization bug that was silently dropping thread-safety calls from generated code.