github getsentry/self-hosted 26.7.0
on GitHub

5 hours ago

Important

This is a hard stop. This release includes security fixes and a migration squash — you must update to this version before moving on to any later version. Details on what hard stops mean and why they exist are in the documentation.

There's also a feature flag configuration change in sentry/sentry.conf.py — make sure to update that as part of this upgrade, or things will not behave the way you expect.

Full diff from 26.6.0 to 26.7.0 is here if you want to see exactly what's changing before you pull the trigger.

Less containers, thanks Taskbroker!

We're down a few more containers this release, courtesy of continued work on Taskbroker. The Sentry subscription consumers, and ingest-profiles specifically, have now moved off their dedicated consumer processes and into Taskbroker tasks, which Taskworker executes instead. Fewer long-running consumer containers, same work getting done — just routed through the task system now.

If you're running a setup where you need to scale these workloads out, the Tasks documentation covers how that works under this new model.

SeaweedFS changes to weed mini

We'd been running SeaweedFS via weed server with the all-in-one flag, but that mode doesn't include the Admin and Worker services. We've moved to weed mini, which bundles those in, and that gets us two more containers down in the process. This wasn't just a container-count win either — it fixes object retention and cleanup, which the all-in-one setup couldn't handle correctly. A handful of users tested this ahead of release and reported no issues, but if you hit something unexpected with retention behavior post-upgrade, let us know.

Security Fixes

Warning

⚠️ Security Advisory: This release patches GHSA-5r6f-q5fc-7r23 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in snuba. If EAP array-attribute feature is enabled, this is a required update.
⚠️ Security Advisory: This release patches GHSA-xm86-7c47-gjm4 — Unsafe pickle deserialization in Relocation Feature. If you are using the relocation feature, this is a required update.

Notable changes

  • There's now a Troubleshooting Snuba page in the docs, if you've ever had to dig through Snuba issues blind, this should help.
  • The Data Flow documentation has been updated to reflect how the system actually looks today.
  • pgbouncer, nginx, and memcached all got bumped, and we've got Dependabot handling this class of chore going forward, so expect these to stay current with less manual intervention on our end.
  • There's an open pull request for a premade Grafana dashboard. We're not merging it into this repo — it'll live in its own repository down the line — but the dashboard works today, so feel free to grab it from the PR in the meantime.

As always, back up before you upgrade, and give the hard stop docs a read if you're unsure whether this affects your upgrade path. If you run into anything, or just want to talk through your setup, we're always happy to chat on Discord.

New Features ✨

Taskbroker

Other

Bug Fixes 🐛

Internal Changes 🔧

Deps

Other

Other

Check out latest releases or
releases around getsentry/self-hosted 26.7.0

Don't miss a new self-hosted release

NewReleases is sending notifications on new releases.

Get notifications