Elestio Catalog Updates: 12 New Releases This Week (July 5-11, 2026)

Another busy week across the catalog. Twelve services in the Elestio catalog shipped new versions between July 5 and July 11, and this batch leans heavily toward security hardening and observability. Keycloak added a preview SCIM API, SigNoz pushed a big dashboard overhaul, and Immich kept its rapid v3 cadence going. Here is everything worth knowing, grouped by category.

Databases

ClickHouse v25.8.28.1-lts (July 5): A new long-term-support build in the 25.8 line, published across 52 distribution assets covering AMD64 and ARM64 as archives, RPM, and DEB packages. If you run ClickHouse in production, the LTS track is the one to pin to for predictable maintenance.

AI / GPU

Langflow v1.10.2 (July 7): This one is security-forward. It adds global variable model overrides so you can swap models across flows in one place, and it hardens the code-execution path by blocking public builds of code-execution agents and restricting MCP stdio access. Python 3.14 compatibility landed too.

Development

Keycloak 26.7.0 (July 9): The headline is a preview SCIM API for automated user provisioning and deprovisioning with standard tooling. It also ships a simplified multi-cluster HA setup that drops the external cache requirement (preview), step-up authentication for SAML clients, and cleaner reverse-proxy blueprints for HAProxy and Traefik.

n8n 2.29.10 (July 10): Capping a steady week of releases (2.29.7 through 2.29.10), this stream focused on reliability: AI Agent and Code node fixes when workflows contain AI tools, safer expression handling, and Postgres-only connection recovery. Boring in the best way.

Meilisearch v1.49.0 (July 6): Reworked synonym storage with lazy loading delivers up to a 13x performance gain depending on how many synonyms you run. If your search config leans on large synonym lists, this is a free speedup.

PocketBase v0.39.6 (July 8): Adds Cc and Bcc recipients to the dev sendmail command, hardens the Microsoft OAuth2 provider with safer email extraction, and bumps the minimum Go version to 1.26.5 along with a WeakMap regression fix.

Hosting & Infrastructure

SigNoz v0.132.2 (July 8-10): A three-release sprint (v0.132.0 to v0.132.2) that overhauls dashboards. You get v2 Perses-spec public dashboards, dashboard variables with dynamic panel substitution, a new Kubernetes container monitoring API, and reworked trace details with a width-driven layout and shared metadata. The observability crowd should upgrade.

VictoriaMetrics v1.147.0 (July 6): Security and efficiency in one release. vmauth now adds a 2-3 second delay on failed auth attempts per OWASP guidance to blunt brute-force attacks, vmagent cuts CPU usage by roughly 10% for remote-storage sharding, and stream aggregation handling for out-of-order samples improved.

Applications

Immich v3.0.2 (July 9): The photo-management juggernaut keeps moving. This patch adds HLS variant configuration for more flexible video streaming, a date-based filter for the Workflows automation system, and 24-plus bug fixes covering mobile video playback, OAuth account linking, and search visibility.

Mattermost v11.9.0 (July 8): A fresh stable minor release following three release candidates, arriving right after the v11.8.3 bug-fix patch on July 6. If you self-host team chat, this is the current stable to target.

Metabase 61.7 (July 9): A stable maintenance release on the 61 line, shipped alongside a 60.12 patch for older deployments and a 63.0-beta for anyone who likes living on the edge (not in production, please).

Ghost v6.52.1 (July 10): The v6.52 line adds tax ID collection to Stripe checkout when automatic tax is enabled, retires the outdated Tenor GIF provider, and fixes mobile display plus color-accessibility issues. The v6.52.1 patch cleaned up link selection in the automations email editor.

What stood out this week

A few releases are worth more than a line:

• Keycloak's SCIM preview is the big one for anyone managing identity at scale. Automated provisioning and deprovisioning through a standard API is the feature enterprises keep asking for, and the simplified HA path is a nice bonus for multi-region setups.
• SigNoz's dashboard overhaul signals it is serious about being a real Grafana-adjacent observability platform, not just a tracing tool. Public v2 dashboards and Kubernetes container monitoring close real gaps.
• Meilisearch's 13x synonym speedup is the kind of quiet performance win you get for free just by upgrading. No config changes, just faster search.
• Langflow and VictoriaMetrics both shipped security hardening this week (agent code-execution restrictions and OWASP brute-force delays, respectively). A good reminder that "upgrade regularly" is itself a security practice.

Every one of these runs on Elestio as a fully managed, one-click deployment with automated backups and updates. Browse the full Elestio catalog to spin one up, or if you already run these, your managed instances will pick up the new versions on the standard update cycle.

Thanks for reading ❤️ See you next week 👋