v0.9.1
Released October 27, 2026. Supported until April 27, 2027.
v0.9.1 ships 4 security updates, including the fix for the critical Brotli decoder vulnerability CVE-2026-111497 in Envoy proxies, and 2 data plane bug fixes. Two root certificates are removed from the gateway and proxy images, so an upstream certificate that chains only to one of them is replaced before the upgrade. API keys left on the managed provider credential by an earlier gateway change are reissued after the upgrade. v0.9.1 carries the security fixes v0.8.1 shipped, so an upgrade from v0.8.1 to v0.9.1 keeps them.
A fully detailed version of these release notes (including artifact versions) is included in the Admin Console.
The full release notes are opened from the Admin Console, as described in Check the management plane version.
Upgrade and rollback
- The release carries no breaking change. 4 changes name operator steps of their own, given with each change in the full release notes in the Admin Console.
- The upgrade rolls through without dropping traffic.
- Rollback to v0.9.0 is unconditional.
Security updates
Gateway
The AAA Certificate Services and emSign ECC Root CA - G3 root certificates are removed from the trust bundle of the gateway and Envoy proxy images, so TLS verification in those images rejects certificate chains that depend on either root. An upstream certificate whose only valid chain ends at one of these roots, in particular AAA Certificate Services, is replaced before the gateway and proxy images are upgraded. The gateway controller and the gateway's filter module are also built with Go releases that include the fix for blocked intermediate certificates (CVE-2026-111943).
The AI Gateway controller and external processor are built with Go 1.27.3, which includes the Go fix for blocked intermediate certificates (CVE-2026-111943), so they reject certificate chains that pass through those intermediates. Their trust bundle is unchanged and still contains both removed roots.
Envoy proxies include the fix for the critical Brotli decoder vulnerability CVE-2026-111497 (GHSA-3wvj-j6qm-62mr), protecting proxies that decode Brotli-compressed requests.
Helm charts
The rate limit service, the kubectl and secret bootstrap images, and the Google Secret Manager client that the management plane services run at startup are built with Go 1.26.10, which includes the Go fix for blocked intermediate certificates (CVE-2026-111943), so they reject certificate chains that pass through those intermediates.
Bug fixes
Data plane
Assigning a project to a data plane that had no default gateway yet, or adding, removing, or moving a gateway on it, re-renders the routes of the API keys that data plane already serves. Before, those keys could be served on the managed provider credential instead of their project's own provider keys. Keys are re-rendered automatically on gateway changes after the upgrade; an API key already served on the managed credential before the upgrade is reissued.
A key whose routes were rendered less than five minutes before a gateway change on its data plane now picks up the new hostname too. Before, that re-render was skipped as a duplicate, and the key stayed on the managed provider credential.