What etcd-io/etcd shipped
Written by FoxPlug from public releases; not affiliated with Etcd. An automatic summary of the public release, pull request and commit data of github.com/etcd-io/etcd. Etcd did not write it and does not use or endorse FoxPlug. Every line links to the public change it describes.
Get a weekly update like this for your product, free
Week of September 21, 2026
What shipped
- Released v3.7.2 with bug fixes and improvements. Release
- Released v3.6.15 with bug fixes and improvements. Release
- Released v3.5.34 with bug fixes and improvements. Release
- Introduced NonBlockingDefrag feature gate (beta) that allows defragmentation to run mostly in the background while serving normal reads and writes, with only a short pause at the end. Pull request #22425
- Fixed resource leaks in WAL Open and Create error handling paths. Pull request #21766
- Bumped google.golang.org/grpc to v1.83.1 in release-3.5 to address CVE-2026-84303. Pull request #22467
- Bumped google.golang.org/grpc to v1.83.2 in release-3.6 to address CVE-2026-84303. Pull request #22468
- Bumped google.golang.org/grpc to v1.83.2 in release-3.7 to address CVE-2026-84303. Pull request #22469
- Added validation for watch cardinality flags in benchmark tool to prevent invalid non-positive values. Pull request #22453
- Fixed alert description for etcdHighNumberOfFailedProposals to match the actual evaluation window. Pull request #22324
Why it matters
Three patch releases shipped across active versions with security updates addressing CVE-2026-84303 in gRPC. A new non-blocking defragmentation feature provides better availability during maintenance operations. Several bug fixes address resource leaks and improve operational tooling.
Changelog entry
- Add NonBlockingDefrag feature gate (beta) to make defragmentation mostly non-blocking, copying data in the background while serving traffic Pull request #22425
- Fix resource leaks in WAL Open and Create error handling paths Pull request #21766
- Add validation for watch cardinality flags in benchmark tool Pull request #22453
- Fix etcdHighNumberOfFailedProposals alert description to align with rate window Pull request #22324
- Bump google.golang.org/grpc to v1.83.1 in v3.5 branch to address CVE-2026-84303 Pull request #22467
- Bump google.golang.org/grpc to v1.83.2 in v3.6 branch to address CVE-2026-84303 Pull request #22468
- Bump google.golang.org/grpc to v1.83.2 in v3.7 branch to address CVE-2026-84303 Pull request #22469
etcd v3.7.2, v3.6.15, and v3.5.34 released. Security updates for CVE-2026-84303. New non-blocking defragmentation feature in v3.7.2.
Three etcd patch releases are available: v3.7.2, v3.6.15, and v3.5.34. These releases include security updates addressing CVE-2026-84303 in google.golang.org/grpc, critical for systems with gRPC dependencies. v3.7.2 introduces a new non-blocking defragmentation feature that allows defrag to run mostly in the background, minimizing service interruption. Bug fixes address resource leaks in WAL handling.
More from etcd-io/etcd on GitHub
Merged pull requests
- [2026-09-21] dependency bump (#22474, merged September 25, 2026 by ivanvc) (source)
- Support non-blocking defragmentation (#22425, merged September 25, 2026 by ahrtr) (source)
- Remove redundant KV get tests (#22423, merged September 25, 2026 by akstron) (source)
- doc: update changelog for v3.5.35 (#22473, merged September 24, 2026 by silentred) (source)
- tools/benchmark: validate watch cardinality flags before execution (#22453, merged September 23, 2026 by pujitha24) (source)
- Changelog entries for 3.7.2, 3.6.15 and 3.5.34 (#22471, merged September 23, 2026 by ivanvc) (source)
- [release-3.5] fix: fsync snap directory when saving a received snapshot db (#22472, merged September 23, 2026 by silentred) (source)
- [release-3.5] dependency: bump google.golang.org/grpc to v1.83.1 (#22467, merged September 22, 2026 by ivanvc) (source)
- [release-3.6] dependency: bump google.golang.org/grpc to v1.83.2 (#22468, merged September 22, 2026 by ivanvc) (source)
- [release-3.7] dependency: bump google.golang.org/grpc to v1.83.2 (#22469, merged September 22, 2026 by ivanvc) (source)
- [release-3.5] fileutil: close locked file handle on os.Remove error in purgeFile (#22457, merged September 21, 2026 by k8s-infra-cherrypick-robot) (source)
- [release-3.6] fileutil: close locked file handle on os.Remove error in purgeFile (#22456, merged September 21, 2026 by k8s-infra-cherrypick-robot) (source)