🚀 Mercure v0.23.5 is here, focusing on Helm chart hardening for Kubernetes!
After a production audit, we brought major security updates to the OSS chart, including opt-in NetworkPolicies, out-of-the-box readOnlyRootFilesystem, and restricted PodSecurity defaults.
I just published a blog post with the full story, the technical details, and the Go GC cache fixes.
Read it here: https://dunglas.dev/2026/05/mercure-0-23-5-helm-chart-hardening/
#Kubernetes #DevOps #Helm #Golang #Mercure #OpenSource #Security
Mercure 0.23.5: Helm chart hardening - Kévin Dunglas
Mercure v0.23.5 just landed, and the dominant theme is the Helm chart. If you run hubs on Kubernetes, especially in HA or multi-tenant mode, this release tightens defaults and adds the kind of policy templates that previously required forking the chart or templating policies outside it. The story behind the release: we audited a production







