Sign in Subscribe
Catalog Updates

Elestio Catalog Updates: 23 New Releases This Week (July 19-25, 2026)

Michael Soto

• 3 min read
Share
Elestio Catalog Updates: 23 New Releases This Week (July 19-25, 2026)

Another busy week across the catalog, and this one leans heavily on security and one genuinely big rewrite. Paperless-ngx shipped a major version, Vaultwarden patched a stack of vulnerabilities, and the usual suspects in databases and observability kept the version numbers climbing. Here is everything worth knowing from July 19-25, 2026.

Security Alerts

Patch these first.

  • Vaultwarden 1.37.0 (July 24): Addresses eight medium-severity issues, including SSRF via the icon endpoint, cross-organization cipher access, and unauthenticated WebSocket flooding. This release is also required for compatibility with Bitwarden clients 2026.7.0 and later. Update as soon as you can.
  • Grafana 13.1.1 (July 21): Lands during a month of Grafana security disclosures, including high-severity issues around SQL Expressions and public dashboards. If you expose dashboards to the internet, update promptly and review your public dashboard settings.
  • Nextcloud 34.0.2 / 33.0.7 / 32.0.13 (July 23): Keeps all three maintained lines current. The recent 2FA bypass tracked as CVE-2026-45690 was fixed in the 32.0.9 and 33.0.3 line, so staying on these patch releases matters if you rely on two-factor auth.

Databases

  • ClickHouse 26.7.1 (July 22): A fresh feature release on the fast-moving 26.x line, with backported stability fixes also shipping to the 26.3 LTS, 26.4, and 26.6 branches the same week.
  • Valkey 9.1.1 (July 21): Coordinated maintenance across every supported line, with matching patches landing for 9.0.5, 8.1.9, 8.0.10, and 7.2.14 on the same day. A good week to update whichever line you run.

AI / GPU

  • Ollama 0.32.4 (July 25): Two releases this week (0.32.3 on July 23, then 0.32.4), continuing the steady cadence of model support and runtime fixes.
  • Langflow 1.11.0 (July 23): A new minor for the visual LLM app builder, shipping the same day as the 1.10.3 patch.

Development

  • n8n 2.31.6 (July 24): Rolls up editor, core, and AI-builder fixes, with improvements to credential handling and node stability across popular integrations.
  • Meilisearch 1.50.0 (July 20): Search rules now scale to 75K without hurting query performance, document fetch endpoints pull from all shards in networked setups, and the facets parameter accepts wildcard patterns like dogs.*.
  • Strapi 5.51.0 (July 23): A new minor for the headless CMS with the usual mix of features and fixes.
  • Appwrite 1.9.6 (July 22): Maintenance patch for the backend-as-a-service platform.
  • Authentik 2026.5.6 (July 22): Maintenance release for the identity provider. Worth staying current on anything guarding your logins.
  • Budibase 3.40.1 (July 22): New 3.40 line for the low-code builder, plus a same-week patch.
  • Baserow 2.3.3 (July 21): Patch release for the open-source Airtable alternative.
  • PocketBase 0.39.9 (July 22): Continued fixes across both the 0.39 and 0.22 lines.

Hosting & Infrastructure

  • VictoriaMetrics 1.148.0 (July 20): New minor for the resource-efficient Prometheus alternative, with backports to the 1.136 and 1.122 lines.
  • SigNoz 0.134.0 (July 22): Another step forward for the open-source observability stack.
  • RabbitMQ 4.3.4 (July 23): Patch release on the 4.3 line, with 4.2.9 also shipping for the older branch.

Applications

  • Paperless-ngx 3.0.0 (July 22): The headline release of the week. More on this below. Three quick patches (3.0.1 through 3.0.3) followed through July 25.
  • Ghost 6.54.0 (July 24): New minor for the publishing platform.
  • Metabase 0.63.1 (July 21): Patch on the v63 line that brought treemaps, two-factor auth, and PDF attachments in dashboard subscriptions.
  • Chatwoot 4.16.1 (July 23): Patch for the customer engagement suite.
  • Penpot 2.17.0 (July 22): New minor for the open-source design and prototyping tool.

What Stood Out This Week

Paperless-ngx 3.0.0 is the big one. It swaps the old Whoosh search engine for a tantivy backend (faster search and better query support), adds a Paperless AI feature for document suggestions and chat plus remote OCR options like Azure AI, and introduces document versioning so you can keep and revert multiple file versions. A major version with real architectural change, so back up before you upgrade and test on a copy first.

Vaultwarden 1.37.0 is the patch-now story. Eight security fixes in a password manager is not something to schedule for next quarter. If you self-host it, this is today's job.

Meilisearch 1.50.0 quietly shipped serious scaling work. Search rules to 75K and federated fetch across shards are the kind of features that matter a lot once your index grows past a hobby project.

ClickHouse 26.7 keeps the analytics database moving at its usual relentless pace, with fixes flowing to the LTS line too so you do not have to chase the bleeding edge to stay patched.

Every service above is available as a managed, auto-updated deployment on Elestio. If keeping up with this many releases sounds exhausting, that is exactly the point of letting someone else handle the patching.

Thanks for reading ❤️. See you next week 👋

Sign up for more like this.

Enter your email
Subscribe