Elestio Catalog Updates: 9 New Releases This Week (June 15-21, 2026)

After a busy run of major releases in early June, this week was quieter and more about hardening than headlines. Nine services in the Elestio catalog shipped updates between June 15 and 21, with a clear theme: security patches across team-chat tools, resilience fixes in automation, and steady progress on AI and vector search. Here is everything worth knowing.

Security alerts

No critical, internet-on-fire CVE landed this week, but two of the most widely self-hosted chat platforms shipped security releases you should not sit on:

• Mattermost 11.8.1 and the Extended Support releases 11.7.4 and 11.7.5 all carry medium-severity security fixes. If you run Mattermost in production, patch to your branch's latest point release.
• Rocket.Chat 8.5.1 ships security fixes including tightened permission checks on the fingerprint endpoint and corrected HTML escaping in exported data, with the same hotfixes backported across the 8.4.x, 8.3.x, 8.2.x, 8.1.x, and 7.x ESR branches.
• Weaviate also tightened its posture this week by disabling debug endpoints by default, which is worth knowing if any tooling depended on them.

The pattern is familiar: self-hosting means you own the patch cycle. Subscribe to your services' release feeds so these never catch you off guard.

Databases

• Weaviate v1.38.1 (June 18). The vector database had a busy mid-week, also shipping v1.37.9 (June 16) and v1.36.18 (June 17). Highlights across the three: a rate limiter for batch operations, async replication that auto-enables when your effective and actual replication factors line up, a fix for MCP hybrid search returning objects without properties, and the security hardening noted above.

AI and GPU

• Ollama v0.30.10 (June 17). Command A and the North family of models now run on Apple Silicon through the MLX engine, and the bundled llama.cpp moved to build 9672. The preceding v0.30.9 (June 15) added support for the Cohere2Moe architecture, fixed the LFM2 parser, and now returns a clear error when a single message exceeds the context window instead of failing silently.

Development

• n8n 2.26.8 (June 19). A steady stream of point releases this week (2.26.6 on June 17, 2.26.7 on June 18, 2.26.8 on June 19) focused on reliability: database connection recovery that suspends queries during reconnection to avoid race conditions, a Compression node fix so decompression targets the right archive members, and a Form Trigger fix that prevents crashes on older workflows missing an authentication default. The 1.123.x line also got a uuid library bump to 11.1.1 to clear advisory warnings.
• Meilisearch v1.47.0 (June 15). Search personalization now works with federated search requests, the new settings indexer reached feature-complete status for faster setting updates, and more Prometheus metrics are exposed for observability. Ranking-rule and searchCutoffMs edge-case bugs were squashed too.
• NocoDB 2026.06.1 (June 15). The no-code database introduced Custom Sync, which mirrors PostgreSQL or MySQL tables into NocoDB as read-only synced tables that stay current with their source, plus Microsoft SQL Server as an external data source. Real-time document collaboration with named cursors arrived, and large-form field switching went from roughly 550ms down to 40ms.
• Apache Superset Helm chart 0.16.2 (June 17). A Kubernetes deployment-tooling update for the popular BI platform. No change to the core app, but smoother for anyone running Superset on K8s.

Hosting and infrastructure

• RabbitMQ 4.3.2 (June 15). Alongside 4.2.8 the same day, the message broker fixed a feature-flag enabling edge case, corrected creation of password-less users over the HTTP API, and added a "Delayed" message-count column to the management UI. Both releases hardened the Management Plugin with improved CORS validation and response headers, and added encrypted-value support for more rabbitmq.conf keys.

Applications

• Mattermost 11.8.1 (June 15). Beyond the security fixes above, the 11.9.0 release candidate landed on June 18, previewing the next feature drop for the team-collaboration platform.
• Rocket.Chat 8.5.1 (June 15). The security patch headlines this one, but the 8.6.0 release candidate on June 20 is the one to watch: it adds LibreTranslate for fully self-hosted message translation, so no text leaves your server to get translated.

What stood out this week

A few releases are worth more than a one-line mention:

1. n8n's reliability focus. Connection recovery that suspends queries during a reconnect is the kind of unglamorous fix that quietly saves your workflows during a database blip. For the second-most-searched tool in our catalog, that matters.
2. Rocket.Chat's self-hosted translation. LibreTranslate integration means cross-language teams can translate messages without shipping a single word to a third-party API. That is sovereignty done right, even if it is still in RC.
3. NocoDB Custom Sync. Mirroring live Postgres and MySQL tables into a no-code interface turns NocoDB into a friendly read layer over your existing databases, which is a genuinely useful pattern for ops dashboards.
4. Ollama on Apple Silicon. Bringing more model families to the MLX engine keeps local inference fast on Macs, which is where a lot of developers prototype before deploying to a GPU VM.

Run any of these on Elestio

Every service above is available as a fully managed, one-click deployment on Elestio, with automated updates, backups, and monitoring so you spend your time using the tools rather than patching them. Browse the full catalog of 400+ open-source apps at elest.io/fully-managed-services.

That is the week. Quieter than the early-June rush, but the security fixes alone make it worth a maintenance window. Thanks for reading ❤️ See you next Sunday 👋