Announcing Radius v0.62.0-rc.1
Today we're happy to announce the release of Radius v0.62.0-rc.1. Check out the highlights below, along with the full changelog for more details.
We would like to extend our thanks to all the new and existing contributors who helped make this release possible!
Intro to Radius
If you're new to Radius, check out our website, radapp.io, for more information. Also visit our getting started guide to learn how to install Radius and create your first app.
Highlights
Radius.Core is now the default for the CLI
rad env, rad app, rad init, rad workspace create, and rad resource list now target the Radius.Core resource model without the --preview flag. The legacy rad recipe register/unregister/list/show commands are removed. Update any scripts that pass --preview or use those commands.
Version-pinned Helm chart images
The Helm chart now pins Radius component images to the full release version. Restarting pods no longer picks up later patches implicitly. Upgrade the chart to receive patched images. See Upgrading for override behavior.
Default Kubernetes recipe pack
Radius now embeds a pinned Kubernetes Recipe Pack from the /resource-types-contrib repo and builds the default recipe pack from it, so new environments get a working set of Recipes out of the box. See the Kubernetes Recipe Pack in the repo for more details.
Store Terraform recipe state in S3 or Azure Blob Storage
Radius can now store Terraform recipe state in your own S3 bucket or Azure Blob Storage container instead of only in Kubernetes secrets. Learn more in the Terraform state docs.
Reliability improvements
Many retry and robustness fixes make the CLI and deployments more resilient to transient failures. They cover Bicep recipe downloads, Terraform provider discovery, API server reads, and managed secret deletion. Azure resource deletion now selects supported API versions and deletes in dependency order. Radius type version skew warns before deployment. Digest-pinned Bicep recipe sources are supported.
Breaking changes
- Remove rad recipe register/unregister/list/show commands by @lakshmimsft in #13236
- Make rad env commands target Radius.Core without --preview by @lakshmimsft in #13290
- Pin chart images to full release versions by @DariuszPorowski in #12953
- Retire legacy paths and consume snapshots by @DariuszPorowski in #12956
- Make rad resource expose and logs target Radius.Compute/containers without --preview by @lakshmimsft in #13319
- Make rad app commands target Radius.Core without --preview by @lakshmimsft in #13306
- Make rad init and rad workspace create target Radius.Core without --preview by @lakshmimsft in #13316
- Make rad resource list target Radius.Core without --preview by @lakshmimsft in #13317
- Require gated promotion of external channel tags by @DariuszPorowski in #13333
- Remove unused --preview helpers and stale preview wording by @lakshmimsft in #13326
New contributors
Welcome to our new contributors who have merged their first PR in this release!
- @itpropro made their first contribution in #13327
- @allexistence made their first contribution in #13318
Upgrading to Radius v0.62.0-rc.1
Helm image pinning: This release's Helm chart pins Radius component images to the full release version. Restarting pods no longer picks up later patches implicitly; upgrade the chart to receive patched images. Existing channel aliases remain available, and explicitly configured global.imageTag, component tags, or image references keep overriding chart defaults. To adopt version-pinned defaults while retaining other settings, clear tag overrides and restore image overrides to their default names; an empty image value is invalid.
You can upgrade to this release by upgrading your Radius CLI then running rad upgrade kubernetes. Only incremental version upgrades are supported. Consult the upgrade documentation for full details.
Full changelog
0.62.0-rc.1 - 2026-10-22
Breaking changes
- Remove rad recipe register/unregister/list/show commands by @lakshmimsft in #13236
- Make rad env commands target Radius.Core without --preview by @lakshmimsft in #13290
- Pin chart images to full release versions by @DariuszPorowski in #12953
- Retire legacy paths and consume snapshots by @DariuszPorowski in #12956
- Make rad resource expose and logs target Radius.Compute/containers without --preview by @lakshmimsft in #13319
- Make rad app commands target Radius.Core without --preview by @lakshmimsft in #13306
- Make rad init and rad workspace create target Radius.Core without --preview by @lakshmimsft in #13316
- Make rad resource list target Radius.Core without --preview by @lakshmimsft in #13317
- Require gated promotion of external channel tags by @DariuszPorowski in #13333
- Remove unused --preview helpers and stale preview wording by @lakshmimsft in #13326
Added
- Add conventional commit title generation by @DariuszPorowski in #13138
- Add flaky-test investigation skill and automation by @nicolejms in #13190
- Support S3 and Azure Blob backends with registered credentials by @lakshmimsft in #13078
- Publish release SBOMs by @DariuszPorowski in #12869
- [stack 1/3: default k8s recipe pack] sync and embed the pinned Kubernetes recipe pack by @nithyatsu in #13248
- [stack 2/3: default k8s recipe pack] build the default recipe pack from the embedded Kubernetes pack by @nithyatsu in #13249
- Always write bicepconfig.json in rad init --preview by @willdavsmith in #13164
- Add authorization mode setting (off/dryRun/enforce) by @sk593 in #13212
- Add authorization error codes by @sk593 in #13213
- Make the async worker dequeue interval configurable by @itpropro in #13327
- Fail functional tests on authz dry-run would-deny logs by @sk593 in #13215
- Add manual authz trust-boundary test kit by @sk593 in #13216
- Create the Deployment Engine tag after release approval by @DariuszPorowski in #13384
Fixed
- Require Azure resource groups in Radius.Core environments by @Copilot in #12495
- Recognize ruleset-backed PR approvals by @DariuszPorowski in #13111
- Surface API response when CLI download test fails to parse version by @pujitha24 in #12907
- Bound bicep download with a timeout in the PowerShell installer by @sk593 in #12852
- Preserve change filtering in the merge queue by @DariuszPorowski in #13139
- Prevent MongoDB recipe scheduling timeout by @brooke-hamilton in #13146
- Validate default namespace in rad env create by @nicolejms in #13156
- Wrap long descriptions in rad resource-type show by @nicolejms in #13158
- Reconcile release tags and branches idempotently by @DariuszPorowski in #12770
- Share required Helm overrides across setup by @brooke-hamilton in #13145
- Prebuild rad for Windows process tests by @brooke-hamilton in #13151
- Retry transient registry failures when downloading Bicep recipes by @nicolejms in #13185
- Make resource type lookup case-insensitive in rad resource list/resource-type show by @nicolejms in #13184
- Retry all curl errors in tool install scripts by @nicolejms in #13189
- Mitigate flaky Install Radius timeout by waiting for Deployment Engine image in CI by @nicolejms in #13191
- Retry go mod download with HTTP/2 disabled to fix proxy.golang.org stream errors by @nicolejms in #13199
- Restore trusted change-detection helper before execution by @brooke-hamilton in #13196
- Refuse to persist an empty control-plane snapshot in rad shutdown by @pujitha24 in #12849
- Delete resource group contents in dependency order by @lakshmimsft in #13155
- Add validation for release metadata changes before trusted validator installation by @DariuszPorowski in #13220
- Coordinate managed-secret deletion in preview cascades by @brooke-hamilton in #13193
- Authenticate the nightly CLI release lookup by @AzureMike in #13244
- Honor reviewer-specific re-review handoffs by @DariuszPorowski in #13255
- Warn about Radius type version skew before deployment by @nicolejms in #13228
- Isolate the recipe pack missing-namespace test by @AzureMike in #13257
- Resolve API versions consistently for generic resource operations by @lakshmimsft in #13232
- Prevent missing base commit errors in fork PR change detection by @brooke-hamilton in #13272
- Retry managed secret delete while it is still updating by @nicolejms in #13278
- Retry transient API server errors when reading resources by @nicolejms in #13277
- Retry image pushes after unknown blob by @nicolejms in #13288
- Retry transient Helm chart downloads by @nicolejms in #13286
- Retry GitHub OIDC request timeouts before Azure login by @nicolejms in #13287
- Bound retries for Bicep downloads by @nicolejms in #13291
- Add provider alias placeholders before terraform get by @nicolejms in #13300
- Tolerate action SHA updates in release controller tests by @brooke-hamilton in #13308
- Install pinned tools without building tool-updater by @nicolejms in #13313
- Retry transient Terraform provider discovery failures by @nicolejms in #13321
- Standardize bounded external fetch retries by @nicolejms in #13322
- Hand off Copilot threads and author responses by @DariuszPorowski in #13332
- Report rejected deletes and handle rate limits by @nicolejms in #13341
- Delete Key Vault secrets through managed parent vaults by @nicolejms in #13342
- Preserve response metadata after retry timeout by @nicolejms in #13353
- Skip versions protected by download limits by @nicolejms in #13363
- Support digest-pinned Bicep recipe sources and keep registry ports in publish URLs by @AzureMike in #13258
- Select supported Azure API versions for resource deletion by @nicolejms in #13370
- Keep the Git server port-forward alive for Flux tests by @kachawla in #13373
- Fall back to parent types for Azure API version lookup by @nicolejms in #13379
- Avoid GraphQL node limit when collecting backports by @DariuszPorowski in #13381
- Skip last tagged version refusals by @nicolejms in #13378
- Skip k3d load balancer in Repo Radius GHCR state test by @kachawla in #13386
- Filter release-metadata-only PR checks by @DariuszPorowski in #13396
- Link release-note mentions and compact contributors by @DariuszPorowski in #13392
- Retain legacy changes and deduplicate release notes by @DariuszPorowski in #13399
- Wait for Azure blob read access before Terraform deployment by @nicolejms in #13383
Changed
- Remove unused code by @kachawla in #13140
- Reduce Make startup overhead by @brooke-hamilton in #13285
- Fold radinit/common back into radinit by @lakshmimsft in #13325
- Remove Spec Kit, migrate Radius skills, and relocate MCP config by @DariuszPorowski in #13331
Dependencies
- Bump the go-deps group across 1 directory with 3 updates by @dependabot[bot] in #13104
- Bump the security group across 2 directories with 3 updates by @dependabot[bot] in #13150
- Bump the devcontainers group with 3 updates by @dependabot[bot] in #13167
- Bump the github-actions group across 1 directory with 3 updates by @dependabot[bot] in #13171
- Bump the javascript-deps group across 3 directories with 7 updates by @dependabot[bot] in #13169
- Bump the docker group across 5 directories with 2 updates by @dependabot[bot] in #13170
- Bump the go-deps group across 1 directory with 12 updates by @dependabot[bot] in #13175
- Bump the go-deps group across 2 directories with 16 updates by @dependabot[bot] in #13240
- Bump ghcr.io/devcontainers/features/docker-in-docker from 4.1.2 to 4.1.3 in the devcontainers group by @dependabot[bot] in #13237
- Bump the github-actions group across 2 directories with 3 updates by @dependabot[bot] in #13241
- Bump the docker group across 2 directories with 2 updates by @dependabot[bot] in #13239
- Bump the docker group across 2 directories with 2 updates by @dependabot[bot] in #13302
- Bump the go-deps group across 2 directories with 30 updates by @dependabot[bot] in #13304
- Bump the github-actions group across 2 directories with 8 updates by @dependabot[bot] in #13305
- Bump the javascript-deps group across 2 directories with 11 updates by @dependabot[bot] in #13303
- Bump the go-deps group across 2 directories with 18 updates by @dependabot[bot] in #13365
- Bump the github-actions group across 2 directories with 3 updates by @dependabot[bot] in #13367
- Bump the javascript-deps group across 3 directories with 4 updates by @dependabot[bot] in #13366
- Bump the docker group across 2 directories with 1 update by @dependabot[bot] in #13364
- Bump the docker group across 3 directories with 1 update by @dependabot[bot] in #13395
- Bump the go-deps group across 2 directories with 8 updates by @dependabot[bot] in #13393
- Bump the github-actions group across 1 directory with 5 updates by @dependabot[bot] in #13397
- Bump @azure-tools/typespec-autorest from 0.73.0 to 0.73.1 in /typespec in the javascript-deps group across 1 directory by @dependabot[bot] in #13394
- Update npm dependencies with open security alerts by @kachawla in #13402
Contributors
@kachawla, @radius-files-sync[bot], @vinayada1, @nicolejms, @DariuszPorowski, @radius-dependabot-manager[bot], @Copilot, @dependabot[bot], @radius-resource-types[bot], @sk593, @AzureMike, @lakshmimsft, @itpropro, @brooke-hamilton, @allexistence, @willdavsmith, @willtsai, @nithyatsu, @Reshrahim, @pujitha24, @zachcasper
The changelog is based on Keep a Changelog 1.1.0, with Radius-specific change groups and contributor sections. Radius follows Semantic Versioning under its version policy.