Nothing in this release breaks an existing install: it adds a one-command support bundle, makes --strict redaction catch every IP address form, keeps a Kubernetes collector's identity across pod replacement, and ships two dependency security fixes.
Breaking changes
No breaking changes in this release.
Reviewed every change since 1.74.1. Nothing an existing install relies on was removed or renamed: no flag, config key, API or on-disk format. The changes add a command, tighten --strict redaction and fix bugs.
Read the marker, not the version number. Version numbers do not carry a semver major warning: a breaking change can ship in a minor release. Rely on the breaking-change marker, not on the version number.
Security updates
This release includes 2 security updates in shipped dependencies. Severity not stated by the advisory source.
2 of these carry no published severity, so the highest severity above does not describe them.
Which packages, and which advisories
| Package | To | Severity | Advisory |
|---|---|---|---|
golang.org/x/net | v0.56.0 | not published | CVE-2026-46600 |
golang.org/x/text | v0.39.0 | not published | CVE-2026-56852 |
Fixes
- S-3231 S-3693 S-3695
--strictredaction now masks IP addresses in every form it previously missed: IPv6, IPs inside URLs andhost:port, and IPs in agent log tails and config bodies. - S-4492On Kubernetes, a collector keeps its identity when its pod is replaced, instead of showing up as a new collector.
- S-4314The Kubernetes agent ConfigMap template accepts a server URL that is not https.
- S-3230The agent daemon starts its local IPC server, so local CLI commands can reach the running agent.
Features and improvements
- S-3020New
linkmesh-agent support-bundlecommand: one command on the host collects diagnostics into a single archive, redacted, ready to attach to a support request.
8 further changes — build and test work, internal refactoring, and changes with no effect you could observe — were reviewed and deliberately left out.
20 other dependency updates in shipped components, with no security relevance.