Last release today
01 Sep 2026
Ships on a steady schedule
a new release about every 8 days
Rarely documented
notes for 7 of the last 60 stable releases
2 versions withdrawn
withdrawn after publishing
12 years old
7765 releases · first in 2015
Release timeline
7765 releases since 2015One column per quarter.
Releases
- v1.84.0-dev.0.20260723093437-b6eac429d7b623 Jul 2026pre-release
Nothing published for this version
- v1.84.0-dev.0.20260722162835-25387aabbf6822 Jul 2026pre-release
Nothing published for this version
- v1.84.0-dev.0.20260722052243-081051cebab022 Jul 2026pre-release
Nothing published for this version
- v1.84.0-dev.0.20260721174856-506edc46b7a421 Jul 2026pre-release
Nothing published for this version
- v1.84.0-dev.0.20260717170606-75f3c0bb286617 Jul 2026pre-release
Nothing published for this version
- v1.84.0-dev.0.20260715235706-7d870454ecb215 Jul 2026pre-release
Nothing published for this version
- v1.84.0-dev.0.20260715220800-a3ce08c70b1415 Jul 2026pre-release
Nothing published for this version
- v1.84.0-dev.0.20260715210020-be1b06d6315b15 Jul 2026pre-release
Nothing published for this version
- v1.84.0-dev.0.20260714205322-f8a85fa4d1de14 Jul 2026pre-release
Nothing published for this version
- v1.84.0-dev.0.20260714202508-6032468578ea14 Jul 2026pre-release
Nothing published for this version
- v1.84.0-dev14 Jul 2026pre-release
Nothing published for this version
- v1.83.225 Aug 2026
Release notes
Open source →Security
- server: Reject requests missing both
:authorityandHostheaders with HTTP 400 and statusInternal. (#9365)- Special Thanks: @winklemad
- server: Reject requests missing both
- v1.83.119 Aug 2026
Release notes
Open source →Security
- xds/rbac: Fix a bug where nested
PrincipalorPermissionrules with:schemeorgrpc-prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)- Special Thanks: @nvxbug
- xds/rbac: Fix a bug where the
hostheader matcher was not being replaced with:authorityin nestedPrincipalorPermissionrules. (#9258)- Special Thanks: @nvxbug
- xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as
X-Role, matched no header, which could cause DENY rules to fail open. (#9332)- Special Thanks: @alimony
- xds/rbac: Fix a bug where a
:schemeorgrpc-prefixed header matcher was accepted when its name was not lowercase. (#9332)- Special Thanks: @alimony
- xds/rbac: Fix a bug where a
Hostheader matcher was not replaced with:authority. (#9332)- Special Thanks: @alimony
Performance
- transport: Restrict memory overhead of buffering small data frames. (#9331)
- xds/rbac: Fix a bug where nested
- v1.83.030 Jul 2026
Release notes
Open source →Security
- server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable
GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT. - xds/rbac: Support
MetadataandRequestedServerNamepermissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open. - xds/rbac: Fix panic when parsing unsupported fields in
NotRule/NotIdpermissions. - xds/rbac: Support the deprecated
source_ipprincipal identifier by treating it as equivalent todirect_remote_ip. - xds: Fix panic when parsing route header matchers configured with empty
exact_match,prefix_match, orsuffix_matchstrings. (#9223)
New Features
- xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the
force-xdstarget URI query parameter. (#9133) - xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)
- authz: Add
OnPolicyUpdatecallback toFileWatcherOptionsto notify when an authz policy is loaded or updated. (#9142)- Special Thanks: @hnefatl
- xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.
- This feature can be enabled by setting environment variable
GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)
- This feature can be enabled by setting environment variable
- xds: Add support for xDS-based HTTP CONNECT proxies.
- This feature can be enabled by setting environment variable
GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)
- This feature can be enabled by setting environment variable
- xds: Add support for
contains_matchin route header matchers. (#9223)
Bug Fixes
- credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)
- grpc: Fix compilation on Plan 9 targets (
GOOS=plan9), broken since v1.81.0. (#9255)- Special Thanks: @Yusufihsangorgel
- server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable
- v1.83.0-dev.0.20260708112541-2a112a82f5c58 Jul 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260703080509-1a80fca960d33 Jul 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260701193645-26ffdb33175d1 Jul 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260701113725-50139749cb5b1 Jul 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260630125735-484f1502aea230 Jun 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260629180213-1eb52d9b6ee129 Jun 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260625202006-d74861eb76cc25 Jun 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260625164017-83728f5ca72325 Jun 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260624080747-11d0baf8345f24 Jun 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260622053734-8d66cfc36ad122 Jun 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260612120310-5c7f93679ec912 Jun 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260611185230-9a130aad077511 Jun 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260609194428-f1864955bbb49 Jun 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260609120245-bd197fbb2fdb9 Jun 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260608180617-faa34bf170ce8 Jun 2026pre-release
Nothing published for this version
- v1.83.0-dev.0.20260608101438-cd257117bbda8 Jun 2026pre-release
Nothing published for this version
- v1.83.0-dev8 Jun 2026pre-release
Nothing published for this version
- v1.82.225 Aug 2026
Release notes
Open source →Security
- server: Reject requests missing both
:authorityandHostheaders with HTTP 400 and statusInternal. (#9365)- Special Thanks: @winklemad
- server: Reject requests missing both
- v1.82.2-0.20260722162934-4b63829cae8d22 Jul 2026pre-release
Nothing published for this version
- v1.82.115 Jul 2026
Release notes
Open source →Security
- server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable
GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT. - xds/rbac: Support
MetadataandRequestedServerNamepermissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open. - xds/rbac: Fix panic when parsing unsupported fields in
NotRule/NotIdpermissions. - xds/rbac: Support the deprecated
source_ipprincipal identifier by treating it as equivalent todirect_remote_ip.
- server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable
- v1.82.1-0.20260630135652-9494a2cf32a030 Jun 2026pre-release
Nothing published for this version
- v1.82.030 Jun 2026
Release notes
Open source →Behavior Changes
- server: Remove support for
GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKINGenvironment varibale. Strict incoming RPC path validation (which has been the default sincev1.79.3) can no longer be disabled. (#9112) - transport: Add environment variable to change the default max header list size from
16MBto8KB. This may be enabled by settingGRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019) - balancer: Load Balancing policy registry is now case-sensitive. Set
GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false(and file an issue) to revert to case-insensitive behavior. (#9017)
New Features
- experimental/stats: Expose a new API,
NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)- Special Thanks: @seth-epps
- client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
- Special Thanks: @chengxilo
- server: Add environment variable
GRPC_GO_SERVER_GOROUTINE_LABELSthat controls settingruntime/pprof.Labelson goroutines spawned by the server. SetGRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=trueto add thegrpc.methodlabel on goroutines spawned to handle incoming requests. (#9082)- Special Thanks: @dfinkel
Bug Fixes
- xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
- grpc: In the deprecated
gzipCompressor (used via the deprecatedWithCompressordial option), enforce theMaxRecvMsgSizelimit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)- Special Thanks: @evilgensec
- stats/opentelemetry: Record retry attempts,
grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923) - encoding: Ensure
Close()is always called on readers returned fromCompressor.Decompressif possible. (#9135) - channelz: Fix the
LastMessageSentTimestampandLastMessageReceivedTimestampfields inSocketMetricsto ensure they contain correct timestamp values. (#9109)
- server: Remove support for
- v1.82.0-dev.0.20260605180800-0f3086db7a755 Jun 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260604061855-fef07fbb2b944 Jun 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260603173933-91dd64f4b83c3 Jun 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260602085857-adc97de9521a2 Jun 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260601113647-57c9ff14e05b1 Jun 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260527195005-b58f32d9ff0727 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260527181213-761e655b13e827 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260527053358-18a8d3db883327 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260522210837-db35da8bc5e822 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260522050912-609310837bbc22 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260521035345-037c6efe40c321 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260520054942-4ee6ac46fada20 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260520054412-1c8e0950eda820 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260518192101-bb023f846c0118 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260515205658-660208049b9615 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260513170209-fd8a1060a84d13 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260512205117-7c47d2a0095812 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260507050753-1c63fa5f54927 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260507045039-959af53ce2997 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260506163239-94b9449eb2eb6 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260506071619-89fe783a79a46 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260505225859-3d0dd1e30b6b5 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260505151540-811290b5776c5 May 2026pre-release
Nothing published for this version
- v1.82.0-dev.0.20260505034530-679ae4c7df725 May 2026pre-release
Nothing published for this version