Elestio Catalog Updates: 34 Notable Releases This Week (June 1-7, 2026)
Another busy week across the Elestio catalog: 34 notable stable releases landed between June 1 and June 7, including a new Valkey minor, a feature-packed Weaviate release, and coordinated Redis patches across three release lines. Here's everything worth knowing before your next update window.
Security Alerts
Redis: make sure you're past the May RCE fixes. This week's coordinated patches (8.6.4, 8.4.4, and 8.2.7, June 4) land on top of the recent security wave that fixed CVE-2026-23479 (authenticated RCE via use-after-free, CVSS 8.8) plus two related memory-safety CVEs. If any of your instances are still below 8.6.3 / 8.4.3 / 8.2.6, upgrading to this week's releases clears the backlog in one jump. Elestio-managed Redis instances are updated automatically.
Databases
- Valkey 9.1.0 (June 2): New minor release of the Linux Foundation Redis fork, shipped alongside 8.1.8 and 8.0.9 maintenance updates for the older lines.
- Redis 8.6.4 (June 4): Patch releases across the 8.6, 8.4, and 8.2 lines. See the security note above.
- Weaviate 1.38.0 (June 5): The feature release of the week, with namespaces, nested object filtering, the new HFresh index, and schema alteration with reindexing. Patch updates also landed for the 1.35-1.37 lines.
- Milvus 2.6.18 (June 5): Stability-focused patch for the vector database.
- TimescaleDB 2.27.2 (June 2): Bug-fix release for the Postgres time-series extension.
AI/GPU
- Ollama 0.30.6 (June 7): A rapid run of stable releases this week (0.30.3 through 0.30.6) with llama.cpp engine updates and Gemma fixes.
- Open WebUI 0.9.6 (June 2): Refinements and fixes for the self-hosted LLM front end.
- LibreChat 0.8.6 (June 1): Maintenance release for the multi-provider chat UI.
- Langflow 1.9.6 (June 2): Patch release. Reminder: if you're below 1.7.0 you're exposed to the actively exploited CORS flaw we covered in Friday's digest. Update.
- Gradio 6.17.0 (June 5): New minor with workflow canvas component updates, followed same-day by a 6.17.1 hotfix.
Development
- n8n 1.123.53 (June 5): Steady patch cadence on the 1.x LTS line, with parallel updates (2.25.5, 2.23.4) on the 2.x lines.
- Keycloak 26.6.3 (June 4): Patch release for the identity server.
- NocoDB 2026.06.0 (June 4): Introduces NocoDB Sync and document version history, the most feature-rich NocoDB release in months.
- Strapi 5.47.1 (June 3): Bug-fix patch for the headless CMS.
- Hasura 2.49.1 (June 4): Maintenance update for the v2 GraphQL engine line.
- Meilisearch 1.45.2 (June 2): Patch release for the search engine.
- PocketBase 0.39.1 (June 3): Fixes on the latest line, plus a 0.22.46 backport for legacy deployments.
- Qdrant 1.18.2 (June 4): Patch release for the vector search engine.
- Node-RED 4.1.11 (June 4): Maintenance release for the flow-based automation tool.
- Jenkins 2.567 (June 2): Weekly release train, business as usual.
Hosting & Infrastructure
- Grafana 13.0.2 (June 2): Patch for the new 13.0 line, followed June 4 by coordinated backports across 12.4, 12.3, 12.2, and 11.6 LTS.
- Vault 2.0.2 (June 5): Second patch release for the Vault 2.0 line.
- Portainer 2.39.3 LTS (June 4): LTS maintenance for the container management UI.
- SigNoz 0.127.0 (June 3): Regular feature release for the open-source observability stack.
Applications
- Nextcloud 33.0.5 (June 6): Maintenance for Hub 33, with 32.0.11 also out; meanwhile Nextcloud 34 is in late release-candidate stage (rc5).
- Ghost 6.44.0 (June 3): New minor for the publishing platform, with a 6.44.1 follow-up two days later.
- Jellyfin 10.11.11 (June 6): Patch release for the media server.
- Mastodon 4.5.11 (June 3): Same-day patches for 4.5 and 4.4, while the first 4.6.0 beta opens testing.
- Rocket.Chat 8.4.3 (June 2): Coordinated patches across the 8.2-8.4 lines.
- Outline 1.8.0 (June 1): New minor for the team wiki, with a 1.8.1 fix released June 6.
- Metabase 0.61.3.6 (June 5): Patch for the stable BI line while 0.62 betas continue.
- Syncthing 2.1.1 (June 2): Maintenance release for the file synchronizer.
- Plausible 3.2.1 (June 1): Patch for the privacy-first analytics platform.
- ERPNext 16.21.0 (June 2): Feature minor with a 16.21.1 hotfix, plus 15.110.0 for the v15 LTS line.
What Stood Out This Week
Valkey 9.1.0 keeps up the post-fork momentum. Two years after the Redis license drama spawned it, Valkey is shipping minors at a pace that makes it a genuine first-choice key-value store rather than a protest fork.
Weaviate 1.38.0 is the most substantial upgrade of the batch. Namespaces and nested object filtering address two of the most common multi-tenant pain points, and arriving the same week ChromaDB took a CVSS 10.0, it's a good moment to evaluate where your vectors live.
NocoDB 2026.06.0 adds sync and document version history, pushing the Airtable alternative further into territory where teams previously needed paid SaaS.
Redis's triple patch is the housekeeping item: not glamorous, but with RCE-class CVEs in recent memory, version hygiene on your cache layer matters more than usual this month.
Keep Your Stack Current Without the Busywork
Every service above is available fully managed on Elestio, where updates like these are applied for you with automated backups before each one. Browse the full catalog of 400+ open-source services and let someone else watch the release feeds.
Thanks for reading ❤️ See you next Sunday 👋