Fixed an issue where presigned URLs for test results would expire prematurely, causing access failures when viewing test data.
Resolved a critical issue with the web-ui-server-admin component that was broken in the previous release.
CVE Fixes
CVE-2026-1229 in github.com/cloudflare/circl was addressed.
CVE-2026-2391 in qs dependency was addressed.
CVE-2026-24051 in go.opentelemetry.io/otel/sdk was addressed.
CVE-2026-33186 in google.golang.org/grpc was addressed.
CVE-2026-33762 in github.com/go-git/go-git/v5 was addressed.
CVE-2026-34165 in github.com/go-git/go-git/v5 was addressed.
CVE-2026-34986 in go-jose/go-jose/v4 was addressed.
CVE-2026-39882 in AWS SDK EventStream was addressed.
CVE-2026-2391 in AWS SDK EventStream was addressed.
CVE-2026-39882 in go.opentelemetry.io/otel was addressed.
CVE in io.airlift/aircompressor was addressed.
Configuration Changes
Added RabbitMQ configuration options requests, limits and memoryHighWatermark to provide operators with better control over RabbitMQ resource management.
Added Nomad connection limits configuration to Helm values to prevent maximum RPC connection rejections and improve cluster stability.
Added Nomad server CPU and memory resource requests and limits configuration options for better resource management and operational control.
Enabled gRPC client-side load balancing for contexts-service to improve reliability and performance of service communication.