What litmuschaos/litmus shipped
Written by FoxPlug from public releases; not affiliated with Litmuschaos. An automatic summary of the public release, pull request and commit data of github.com/litmuschaos/litmus. Litmuschaos did not write it and does not use or endorse FoxPlug. Every line links to the public change it describes.
Get a weekly update like this for your product, free
Week of September 14, 2026
What shipped
- Released version 3.32.0 with updates to installation manifests, OIDC provider naming, and StatusBadgeV2 component tests. Release
- Added GraphQL query complexity limiting via FixedComplexityLimit to prevent resource exhaustion from deeply nested or abusive queries. Pull request #5595
- Fixed OIDC callback to reject unverified email claims, preventing authentication with unverified email addresses. Pull request #5601
- Fixed silent data-loss where updating a ChaosEngine manifest via the UI would overwrite pre-existing node tolerations for runners and experiments. Pull request #5590
- Refactored PredefinedExperimentController to use getPredefinedExperiment API query instead of client-side filtering, reducing network payload. Pull request #5587
- Added YAML view to ChaosProbeConfiguration component allowing users to inspect complete probe configuration as read-only YAML. Pull request #5553
- Added fuzz tests for subscriber GraphQL data marshaling to validate JSON-marshalable payloads and safe GraphQL payload quoting. Pull request #5534
Why it matters
Version 3.32.0 addresses critical security and stability issues including email verification in authentication and data-loss prevention in experiment configuration. Query complexity limiting protects the GraphQL server from resource exhaustion attacks, while performance improvements reduce network overhead when loading predefined experiments.
Changelog entry
- chore(3.31.0): Add the installation manifest for 3.31.0 version Release
- Generalize OIDC/Dex naming to be provider-agnostic Release
- test: Add unit tests for StatusBadgeV2 component Release
- test: Add fuzz tests for subscriber GraphQL data marshaling Pull request #5534
- feat: Add YAML view to ChaosProbeConfiguration Pull request #5553
- refactor(web): Use getPredefinedExperiment API in PredefinedExperiment controller Pull request #5587
- fix(web): Prevent ChaosEngine tolerations data-loss during experiment UI updates Pull request #5590
- feat: Add GraphQL query complexity limiting via FixedComplexityLimit Pull request #5595
- fix(auth): Reject unverified email claims in the OIDC callback Pull request #5601
Litmus 3.32.0 is out. New GraphQL query complexity limiting prevents resource exhaustion. Fixed OIDC email verification and ChaosEngine toleration data-loss during UI updates. Improved performance for predefined experiments.
Litmus 3.32.0 released with important security and stability improvements. GraphQL query complexity limiting protects against resource exhaustion from nested queries. Fixed OIDC callback to properly validate email verification claims. Resolved data-loss regression in ChaosEngine tolerations during UI updates. Improved performance by optimizing predefined experiment loading with targeted GraphQL queries instead of full list pagination.