Elestio Catalog Updates: 7 Notable Releases This Week (April 12-18, 2026)
This week brought a significant Keycloak release with zero-downtime updates going GA, Forgejo hitting its 100th release with LTS designation, and Jellyfin patching critical security issues. Here's everything that shipped across Elestio's catalog from April 12-18, 2026.
Security Alerts
Jellyfin 10.11.8 addresses security vulnerabilities that were fixed in 10.11.7. The Jellyfin team strongly recommends upgrading ASAP, as CVE disclosures for the issues fixed in 10.11.7 are expected within days. If you're running anything older than 10.11.7, treat this as urgent.
Development
Keycloak 26.6.0 (April 2026) - This is a big one. Zero-downtime patch releases are now GA and enabled by default, meaning you can do rolling updates within the same major.minor stream without service interruption. JWT Authorization Grant moves from preview to supported. Federated client authentication is now fully supported, letting clients leverage existing credentials from external issuers (including Kubernetes Service Accounts) without managing individual secrets. The new workflows feature brings Identity Governance and Administration (IGA) capabilities, with realm tasks defined in YAML and executed on events, conditions, or schedules. Also adds OpenJDK 25 support.
Keycloak 26.6.1 (April 2026) - Quick follow-up patch release with bug fixes.
Forgejo 15.0 (April 16) - The 100th release of Forgejo, and it's an LTS (supported through July 2027). Highlights: repository-specific access tokens for tighter security, OpenID Connect support for Forgejo Actions, reusable workflows that expand into individual jobs for better log visibility, and a new web-based runner registration flow (no more CLI registration). Breaking change: default cookie names have changed, so users will need to sign in again after upgrading.
N8N 1.91 (April 9) - Maintenance release with bug fixes, including improvements to the AI builder, safer webhooks, and performance improvements across core and editor components.
Hosting & Infrastructure
Grafana 12.x (April 14) - Minor update to the 12.x series with new audit log settings for data source queries and a copy-paste styles feature for dashboard panels. Note: Grafana 13 is expected to be announced at GrafanaCON later this month.
Mattermost v11.6 (April 16) - New active release cycle begins. This replaces v11.5 as the current stable release. Mattermost v10.11 ESR continues to receive security patches through August 2026.
Applications
Jellyfin 10.11.8 (April 2026) - Bug fix release addressing regressions from 10.11.7. Fixes subtitle saving, media language filtering, and folder handling for libraries. Upgrade strongly recommended due to upcoming CVE disclosures for issues patched in 10.11.7.
Immich v2.7.5 (April 13) - Latest patch in the v2.7 series. The v2.7.0 release (April 7) brought asset viewer enhancements, security improvements, and duplicate API changes. This may be the last release before v3.0.0, which will include breaking changes mainly for third-party developers.
What Stood Out This Week
Keycloak 26.6.0 is a milestone release. Zero-downtime updates going GA is the kind of feature that makes self-hosted Keycloak viable for production environments that can't afford maintenance windows. The workflows engine adds IGA capabilities that previously required separate commercial tools. If you're running Keycloak on Elestio, this upgrade is worth prioritizing.
Forgejo 15.0 LTS is a statement. Reaching 100 releases and committing to LTS support through mid-2027 signals that Forgejo is here to stay. The repository-specific access tokens feature alone makes this a compelling upgrade for teams concerned about least-privilege access.
Jellyfin's security urgency is real. With CVE disclosures imminent, running an unpatched Jellyfin instance is a ticking clock. The 10.11.8 fixes are minimal and low-risk to apply, so there's no reason to wait.
All of these services are available as one-click deployments on Elestio's catalog. If you're running any of them self-managed, now's a good time to check your versions.
Thanks for reading. See you next week.