Elestio Catalog Updates: 6 Notable Releases This Week (April 19-26, 2026)

Another week, another wave of open-source releases. The headline this week is a security patch from Keycloak fixing ten CVEs in a single drop. Beyond that: Ollama wires up a new agent integration, Gitea ships back-to-back patch releases, and Discourse rolls out its April monthly. Here's what landed.

🚨 Security Alerts

Keycloak 26.6.1 (April 2026): Patch release that fixes a stack of CVEs: CVE-2025-14083, CVE-2026-1002, CVE-2026-3429, CVE-2026-4634, CVE-2026-4636, CVE-2026-3872, CVE-2026-4282, CVE-2026-4366, CVE-2026-4633, and CVE-2026-4325. If you're on any 26.x version, this is a same-day upgrade. Severity ranges across the batch, but the count alone justifies the priority.

Databases

ClickHouse 26.3 LTS (rolling minor updates): Notable contributions this cycle include the naturalSortKey function for intuitive string ordering ("file2" before "file10") and support for the ALP compression codec for floating-point columns. ALP delivers significantly tighter compression on numeric time-series data than the default codecs, which matters if you're running ClickHouse for observability or financial data.

AI / GPU

Ollama v0.21.2 (April 24, 2026): Improves the reliability of the OpenClaw onboarding flow in ollama launch, normalizes the order of recommended models in launch listings, and bundles Ollama's web search plugin into the OpenClaw integration. The web search piece is the meaningful one: agents running through OpenClaw can now do retrieval-style lookups without a separate plugin install.

Development

n8n 2.17.5 (April 22, 2026): Patch release with bug fixes and performance improvements. If you're running queue mode (recently covered in our n8n + Redis queue mode guide), this is a clean upgrade with no breaking changes.

Gitea 1.26.0 and 1.26.1 (April 18 and April 24, 2026): Two releases in one week. 1.26.0 brings new minor features, then 1.26.1 lands six days later as a patch. Worth flagging because Gitea's release cadence has been picking up in 2026, and the 1.26.x line is the current stable branch for self-hosted Git shops.

Keycloak 26.6.1 (April 2026): Security patch covered in the Security Alerts section above. Worth reiterating here because Keycloak 26.6.0 (released April 8) introduced JWT Authorization Grant for external-to-internal token exchange, federated client authentication, and zero-downtime patch releases. If you missed 26.6.0, the 26.6.1 upgrade gets you both the new features and the CVE fixes in one move.

Hosting & Infrastructure

No major releases landed this week from the headline infra projects (Grafana, Prometheus, Portainer, MinIO, Vault). Quiet weeks happen, especially after a busy April that already shipped Kubernetes 1.36, Forgejo v15.0 LTS, and the K8s ecosystem ripples around scale-to-zero adoption.

Applications

Discourse v2026.4 (April 2026): The April monthly release. The headline carryover from v2026.3 is the category type selection feature (Discussion as default, Support as a typed option). v2026.4 continues that work and adds incremental admin and moderation improvements. Standard rolling-release upgrade for forum operators.

What stood out this week

1. Keycloak's 10-CVE patch. Most weeks see one or two CVE fixes scattered across the catalog. Ten in a single release is a different kind of week. None of the individual CVEs hit CVSS 10 territory, but the cumulative attack surface reduction is significant. If you delegated Keycloak operations to a "we'll patch on the next maintenance window" cadence, this is the week to break that habit.

2. Ollama + OpenClaw + web search. This trio is quietly one of the more interesting movements in the local-LLM space. OpenClaw gives Ollama a real agent loop, and bundling web search inside the integration removes a step that used to require external orchestration (LangChain, LlamaIndex, or a custom retrieval pipeline). For homelab users running Ollama as a local research assistant, the friction just dropped meaningfully.

3. ClickHouse's ALP compression. ALP (Adaptive Lossless floating-Point compression) is a recent academic algorithm that's been making its way into production columnar stores. Getting it into ClickHouse 26.3 LTS means observability and financial-data workloads on ClickHouse can shrink storage cost without giving up query speed. Quiet release, big practical win.

4. Gitea's tightening cadence. Two releases in six days, on a branch that historically shipped on a slower rhythm, signals momentum. With Forgejo's v15.0 LTS shipping the week prior, the self-hosted Git space is more contested in 2026 than it's been in years. That's good for users.

Upgrade priority recommendation

If you only have time for one upgrade this week:

1. Keycloak 26.x → 26.6.1 (security)
2. Gitea 1.25.x → 1.26.1 (current stable branch)
3. Ollama → 0.21.2 (if you use OpenClaw)
4. Everything else can wait a week.

Deploy or upgrade on Elestio

Elestio's managed catalog tracks all 400+ open-source services and rolls out updates automatically with pre-tested configurations, daily backups, and one-click rollbacks. If you're tired of chasing CVE feeds and changelog pages every Sunday, that's the option.

Thanks for reading ❤️ See you next Sunday 👋