#9831·dgraph

Release request: gRPC security update and posting-list cache improvements

Author: LinfeiXCreated Sep 16, 2026Updated Sep 16, 2026

Is your feature request related to a problem? Please describe During a recent CVE review of our Dgraph deployment, our security scanner flagged CVE-2026-84304 in Dgraph v25.4.1. We noticed that the gRPC upgrades to v1.83.1 in #9821 and then v1.83.2 in #9828 have already been merged, addressing the affected dependency. We also run with the posting-list cache disabled (percentage=0,...) and would like to test whether the changes in #9809 improve memory usage and performance for our workload. Describe the solution you'd like Would it be possible to cut a release tag with these changes soon? This would help us address the CVE finding and test the posting-list cache improvements in our environment. Describe alternatives you've considered Building a custom image from source is an option, but we would prefer an official release for our validation and deployment process. Additional context Related PRs: #9821: Upgrade gRPC from v1.82.1 to v1.83.1. #9828: Upgrade gRPC from v1.83.1 to v1.83.2. #9809: Posting-list UID cache improvements. Thanks for your work on these updates!