Skip to content

Release request: gRPC security update and posting-list cache improvements #9831

Description

@LinfeiX

Is your feature request related to a problem? Please describe
During a recent CVE review of our Dgraph deployment, our security scanner flagged CVE-2026-84304 in Dgraph v25.4.1. We noticed that the gRPC upgrades to v1.83.1 in #9821 and then v1.83.2 in #9828 have already been merged, addressing the affected dependency.
We also run with the posting-list cache disabled (percentage=0,...) and would like to test whether the changes in #9809 improve memory usage and performance for our workload.
Describe the solution you'd like
Would it be possible to cut a release tag with these changes soon? This would help us address the CVE finding and test the posting-list cache improvements in our environment.
Describe alternatives you've considered
Building a custom image from source is an option, but we would prefer an official release for our validation and deployment process.
Additional context
Related PRs:
#9821: Upgrade gRPC from v1.82.1 to v1.83.1.
#9828: Upgrade gRPC from v1.83.1 to v1.83.2.
#9809: Posting-list UID cache improvements.
Thanks for your work on these updates!

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions