What kedacore/keda shipped
Written by FoxPlug from public releases; not affiliated with Keda. An automatic summary of the public release, pull request and commit data of github.com/kedacore/keda. Keda did not write it and does not use or endorse FoxPlug. Every line links to the public change it describes.
Get a weekly update like this for your product, free
Week of September 21, 2026
What shipped
- KEDA 2.21.0 released with three breaking changes; review upgrade guide before updating from 2.20. Release
- Metrics Service fixed a data race and memory leak in gRPC mTLS certificate rotation that caused concurrent map access panics and duplicate certificate pool entries. Pull request #8126
- Kafka Scaler now correctly excludes retention-deleted messages when calculating lag for uncommitted offsets, preventing idle workloads from being over-scaled. Pull request #7937
- External Scaler fixed gRPC connection pool to properly release connections when scalers close, eliminating resource leaks and blocked goroutines. Pull request #8193
- Scaler context handling improved to properly manage both long-lived scale loop contexts and short-lived HPA metrics request contexts. Pull request #8195
- Added client-side gRPC metrics for scalers using gRPC clients, extending observability previously available only for HTTP-based scalers. Pull request #8199
- Fixed missing audience in service account token tests following CVE-2026-77524 security fix. Pull request #8214
- Release 2.21 preparation completed in CI. Pull request #8215
Why it matters
KEDA 2.21.0 introduces important security and stability improvements with breaking changes requiring review before upgrade. Multiple resource leak fixes and data race corrections prevent production issues with connection pooling, certificate rotation, and context lifecycle management. Enhanced metrics support and kafka scaler accuracy improvements increase visibility and correct scaling behavior for common use cases.
Changelog entry
- Released KEDA 2.21.0 Release
- Fixed data race and memory leak in Metrics Service gRPC mTLS certificate rotation Pull request #8126
- Kafka Scaler now excludes retention-deleted messages from lag calculation for uncommitted offsets Pull request #7937
- External Scaler releases pooled gRPC connections when scalers close Pull request #8193
- Improved context handling for scalers and auth refreshes across different execution paths Pull request #8195
- Added gRPC client metrics for scalers using external gRPC clients Pull request #8199
KEDA 2.21.0 is out. This release includes breaking changes and fixes for gRPC connection leaks, certificate rotation data races, and Kafka scaler accuracy. Review the upgrade guide before updating.
KEDA 2.21.0 is available. This release addresses critical stability issues including data race fixes in mTLS certificate rotation, proper gRPC connection cleanup, and corrected Kafka lag calculation for retention-deleted messages. Three breaking changes are documented in the upgrade guide. Enhanced gRPC client metrics provide better visibility into scaler performance.
Week of September 14, 2026
What shipped
- Kubernetes API operations in scaling loops now have a configurable timeout via KEDA_KUBERNETES_API_TIMEOUT to prevent indefinite blocking. Pull request #8174
- Azure Cosmos DB Change Feed Scaler added as a native internal scaler supporting both .NET and Java SDK lease formats with HMAC and workload identity authentication. Pull request #7557
- Prometheus Scaler now supports OAuth2 client credentials authentication through TriggerAuthentication. Pull request #8064
- Kafka Scaler added support for GSSAPI authentication using Kerberos credential cache files. Pull request #8069
- Azure Pipelines Scaler fixed scaling out correctly with the default strategy when agents are already running. Pull request #7905
- Azure Monitor Scaler now supports an optional metricInterval parameter to control the granularity of returned metrics. Pull request #7526
- Splunk Observability Scaler fixed lifecycle issues by properly coordinating query cancellation during teardown. Pull request #8134
- HashiCorp Vault token renewal fixed a panic that occurred when RenewSelf failed. Pull request #7940
- Metrics API Scaler now rejects unsupported authentication modes at configuration time instead of silently ignoring them. Pull request #8178
- StreamMetricSpec cache fixed to properly handle empty metric specs lists. Pull request #8116
Why it matters
This week adds significant authentication improvements across multiple scalers with OAuth2 and Kerberos support, introduces a new Azure Cosmos DB scaler, and resolves critical lifecycle and timeout issues that affected reliability. The fixes to scaling behavior and configuration validation improve operator stability.
Changelog entry
- Add KEDA_KUBERNETES_API_TIMEOUT environment variable to prevent scaling loop blocking Pull request #8174
- Add Azure Cosmos DB Change Feed Scaler supporting .NET and Java SDK lease formats Pull request #7557
- Add OAuth2 client credentials authentication support to Prometheus Scaler Pull request #8064
- Add Kerberos credential cache support to Kafka Scaler GSSAPI authentication Pull request #8069
- Fix Azure Pipelines Scaler default strategy scaling out behavior Pull request #7905
- Add optional metricInterval parameter to Azure Monitor Scaler Pull request #7526
- Fix Splunk Observability Scaler teardown lifecycle and query cancellation Pull request #8134
- Fix panic in HashiCorp Vault token renewal on RenewSelf failure Pull request #7940
- Reject unsupported authentication modes in Metrics API Scaler at config time Pull request #8178
- Fix StreamMetricSpec cache handling of empty metric specs Pull request #8116
- Fix CouchDB Scaler response body leak in query result iterator Pull request #7907
- Improve Sumo Logic Scaler error handling for test requests Pull request #8190
- Reduce flakiness in Kafka scaler e2e tests Pull request #8188
KEDA this week: Azure Cosmos DB scaler, OAuth2 & Kerberos auth support, Kubernetes API timeouts, and fixes for Azure Pipelines and Vault integration.
KEDA updates this week bring new capabilities and fixes across multiple areas. The new Azure Cosmos DB Change Feed Scaler translates C# functionality to native Go. Prometheus, Kafka, and Metrics API scalers gain enhanced authentication support with OAuth2 and Kerberos. Critical reliability fixes address Kubernetes API timeouts, Azure Pipelines scaling, and token renewal issues.