Shipped · DevOps and infrastructure

What rancher/rancher shipped

The public repository of Rancher · github.com/rancher/rancher

Written by FoxPlug from the repository's own releases; not affiliated with Rancher. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/rancher/rancher; Rancher did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.

Get a weekly update like this for your product, free

Or Use it as a GitHub Action

See the update FoxPlug writes for rancher, free

Week of November 2, 2026

What shipped

Why it matters

This week covers security and correctness fixes that affect how clusters and repos report state, and how user identity is handled. etcd is bumped to a release that fixes public security vulnerabilities, and users are asked to update as soon as reasonably possible. Several fixes land across the supported release lines, including token last-used writes, SCIM login, local user passwords and role permissions.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: etcd bumped to v3.7.3 for public security fixes, TLS pod-IP tracking fixed for Helm installs with non-default release names, ClusterRepo now reports Downloading before it downloads, and token last-used writes are throttled across release lines.

Post for LinkedIn

Changes in rancher/rancher this week: etcd is bumped to v3.7.3, which fixes multiple public security vulnerabilities, and users are asked to update as soon as reasonably possible. The TLS pod-IP tracker now resolves its pod selector from the app selector, so Helm installs whose release name differs from rancher no longer see replicas disagree on the live pod IP set. New ClusterRepo objects get a Downloading condition before downloading starts, instead of showing the default Active condition. Token last-used times are written at most once a minute, and fixes for SCIM login attributes, local user passwords and role permissions land across supported release lines.

Week of October 26, 2026

What shipped

Why it matters

This week brings tighter control over session tokens, closing the gap that let session tokens use the general token TTL and rejecting session tokens created directly through the API. It also fixes token TTL consistency between v3 and ext tokens, a main branch build break after the token kind rename, and TLS certificate pod selection. Point releases across supported lines carry dashboard updates, chart reference fixes and remotedialer proxy bumps.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Rancher this week: session ext.Tokens can no longer be created via the API and are limited to the login session lifetime; v3 and ext token TTLs now match. Also fixed: the main build after the token kind rename, TLS pod selector resolution, and restore mode IP config. Point releas

Post for LinkedIn

This week in Rancher: creating ext.Token objects of kind session through the API is now rejected, and session tokens are limited to the login session lifetime instead of the general token default. The same TTL rules now apply to v3 and ext tokens. We also fixed the main build after the session token kind rename, resolved the TLS pod selector from the app selector environment instead of a hardcoded label, and fixed restore mode and IP configuration issues. Point releases shipped for v2.11, v2.12, v2.13, v2.14 and v2.15 with dashboard updates and chart reference fixes, plus remotedialer proxy bumps on several lines.

Week of October 19, 2026

What shipped

Why it matters

This week brings fixes for catalog repositories that could stall on a truncated git index or serve content before a replica restored it, plus meta proxy fixes for errors and headers. Release lines received dependency bumps including Fleet, SCC Operator, system-agent, machine and kube-api-auth. The roletemplate aggregation feature is off by default in v2.16.0 because of last-minute bugs, and a Go toolchain was added to v2.15 for easier dev builds.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: catalog repos recover from a truncated git index and only serve bundled content after a replica restores it. Meta proxy error and header handling fixed. Roletemplate aggregation off by default in v2.16.0. Fleet, SCC Operator, system-agent and kube-api-auth bumps across

Post for LinkedIn

This week in Rancher: catalog repository resets now rebuild a truncated git index left by an interrupted write, and bundled catalog content is served by a replica only after that replica has restored it. Meta proxy error handling and header handling were fixed with unit tests, and roletemplate aggregation is disabled by default in v2.16.0 due to last-minute bugs. Dependency updates landed across release lines, including Fleet v0.16.3 for v2.15, SCC Operator v0.5.3-rc.2, system-agent v0.16.0-rc.5, and kube-api-auth and machine bumps. A Go toolchain was also added to v2.15.

Week of October 12, 2026

What shipped

Why it matters

This week tightens upgrade behavior and permissions in ways users will notice: cluster agents avoid empty registration tokens, etcd restores write the token file reliably, and authn-manage now covers creating auth configs. It also adds a TableConfiguration CRD and surfaces real usernames in audit logs, cutting manual lookups. Alongside, several fixes and dependency updates land across maintenance branches.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week in Rancher: cluster agent no longer deploys with an empty registration token, chartValues nulls are preserved on RKEControlPlane, audit logs show real usernames, authn-manage can create AuthConfigs, and a new TableConfiguration CRD arrives.

Post for LinkedIn

This week in Rancher: the cluster agent is no longer deployed with an empty registration token during upgrade, explicit nulls in chartValues on the RKEControlPlane are preserved, and audit logs now show real usernames instead of only user IDs. Users with the authn-manage role can create AuthConfigs, downstream cluster controllers are no longer retried after a failed start, and a new TableConfiguration CRD adds a place for shared table configuration. Backports of the settings env unset fix and SCC Operator updates also landed across maintenance branches.

Week of October 5, 2026

What shipped

Why it matters

Several fixes this week target clusters that get stuck or redeploy endlessly: name reuse for management clusters, control plane taints causing cattle-cluster-agent redeploys, and toleration scoping for the pre-bootstrap cluster agent. Imported clusters gain etcd retention, snapshot configuration, and s3 restore support, and multiple authentication providers are now supported. Kubeconfig handling also changed, with a Rancher proxy context option for ACE clusters and a setting to name the Rancher user in exec entries.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week in Rancher: management cluster name reuse fix, etcd retention and s3 restore for imported clusters, multiple auth providers, ACE proxy context option, automatic node taint and worker label management, and Fleet updates across release lines.

Post for LinkedIn

This week in Rancher brought a mix of fixes and features. Management cluster name reuse is fixed so a new cluster created with the same name as a deleted one no longer gets stuck on leftover resources. Imported clusters can now have their etcd retention and automatic snapshot settings modified and can restore from s3 snapshots. Support for multiple authentication providers was added, and clusters with the Authorized Cluster Endpoint enabled can prefer the Rancher proxy context in generated kubeconfigs. Node taint handling was centralized in provisioning with automatic node taint and worker label management. Kubeconfigs can now name the Rancher user in exec entries, and Fleet was updated across release lines.

Week of September 28, 2026

What shipped

Why it matters

This week includes authentication improvements for LDAP/AD and SCIM providers with better attribute handling and auditability, security enhancements to reduce CVE surface area, and stability fixes for the test infrastructure and agent deployment. These changes address user management reliability and security posture.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

V2.15.2-hotfix and v2.13.10-hotfix released with tracing improvements. Main branch shipping LDAP/AD principal ID configuration, SCIM attribute fixes, CSP headers, and agent entrypoint rewrite.

Post for LinkedIn

This week's Rancher updates focus on authentication and security. LDAP/AD admins can now configure principal ID attributes to prevent RBAC breakage during OU migrations. SCIM improvements preserve user attributes during refresh and add comprehensive audit logging. Security hardening removes unnecessary dependencies from the server image. The cattle-cluster-agent entrypoint has been rewritten in Go, eliminating external tool dependencies for better reliability.

Week of September 21, 2026

What shipped

Why it matters

This week shipped releases across multiple versions with authentication fixes, Day2 Operations enhancements for certificate rotation and restore modes, and security improvements. Several test infrastructure and dependency management improvements support ongoing stability and maintainability of the project.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Rancher v2.15.2 released with AD FS authentication fixes. New features include etcd snapshot restore modes, certificate rotation for Day2 Ops, and improved security contexts for SCC deployments.

Post for LinkedIn

Rancher v2.15.2 is now available with critical AD FS authentication fixes for upgrades. This release brings Day2 Operations support for certificate rotation and etcd snapshot restore modes, enhanced security configurations for SCC deployments, and improved LDAP functionality for OKTA and AD FS providers. Updates also include Fleet v0.17.0-alpha.5 and PodDisruptionBudget support in the Rancher Chart.

Week of September 14, 2026

What shipped

Why it matters

This week focused on stability improvements with controller retry fixes and etcd node protection logic, while updating core dependencies like Fleet across all supported release branches. Multiple klipper repository URL corrections ensure accurate artifact generation across releases.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: fixed controller startup recovery, added etcd node protection checks, updated Fleet and remotedialer-proxy across release branches, corrected klipper repository references.

Post for LinkedIn

Rancher shipped stability and dependency updates this week: controller retry and recovery fixes for failed deferred starts, deterministic etcd node protection for safe machine termination, and Fleet updates across v2.11-v2.15. Also corrected klipper repository URLs reflecting the k3s-io organization move, ensuring accurate image origin tracking in release artifacts.

Weeks with too little public activity are left out rather than filled in. Last updated 2026-11-09.

Is this your repo? Ask us to remove this page.