Upstream version report (2026-06-26)

[github-actions]

Upstream Version Check — 2026-06-26

Component	Current	Latest	Status	Note
Dify	1.14.1	1.15.0	⏸ HOLD	Plugin Daemon co-bump обязателен (Dify 1.13.3 пинит daemon 0.5.3-local). Check upstream docker-compose.yaml.
Open WebUI	v0.9.5	v0.9.6	📦 patch
Plugin Daemon	0.6.0-local	0.6.3-local	⏸ HOLD	0.5.4/5/6 broken (#640 null content / #672 migrate / #521 CLI). Wait for 0.5.7+ from upstream.
Sandbox	0.2.15	0.2.15	✅ up to date
Ollama	0.21.2	v0.30.10	⏸ HOLD	0.20+ major jump. Verify Open WebUI compatibility before upgrade.
vLLM	v0.19.0	v0.23.0	⏸ HOLD	v1.x major. Spark-builds (eugr/vllm-node-tf5, gemma4-cu130) пинятся отдельно через VLLM_SPARK_IMAGE — bump только после теста на GB10 sm_121a.
TEI	cuda-1.9.3	v1.9.3	✅ up to date
TEI-Embed	cuda-1.9.3	v1.9.3	✅ up to date
TEI-Rerank	cpu-1.9.3	v1.9.3	✅ up to date
Weaviate	1.37.3	1.38.2	⏸ HOLD	Major/minor требует data migration testing.
Qdrant	v1.18.0	v1.18.2	⏸ HOLD	Major/minor требует data migration testing.
Milvus	v2.6.15	v2.6.18	📦 patch
Milvus etcd	v3.5.25	v3.6.12	🔄 minor
Docling	v1.16.1	v1.25.0	⏸ HOLD	v1.17 RapidOcr ONNX regression — startup FAIL без pre-warm step. Stay на v1.16.1.
LiteLLM	v1.83.14-stable.patch.3	v1.89.4	⏸ HOLD	1.83.x = nightly. Wait for next .stable.patch.X tag перед bump.
SearXNG	2026.5.10-df1f24fb7	2026.6.26-f8ffbf36f	🔄 minor
Open Notebook	1.8.5	v1.10.0	🔄 minor	arm64 verify skipped (manifest unreachable)
DB-GPT	v0.8.0	v0.8.1	🚫 no arm64	eosphorosai/dbgpt:v0.8.1 manifest missing arm64
Crawl4AI	0.8.6	v0.9.0	🔄 minor	arm64 verify skipped (manifest unreachable)
SurrealDB	v2.6.5	v3.1.5	⏸ HOLD	v3.x has breaking API changes — review before bump.
n8n	2.21.0	2.28.2-99c6e02-arm64	🔄 minor
RAGFlow	v0.24.1-spark	v0.26.1	⏸ HOLD	Self-built v0.24.0 (ar2r223/ragflow-spark@digest) из infiniflow upstream + Hendrik patches. Manual rebuild + arm64 verify нужны для bump.
RAGFlow ES	9.4.0	9.4.2	📦 patch
RAGFlow MySQL	8.0.39	9.7.1-oraclelinux9	⚠️ major
ES Exporter	v1.9.0	v1.10.0	🔄 minor
MinIO	RELEASE.2025-09-07T16-13-09Z	RELEASE.2025-09-07T16-13-09Z	✅ up to date
MinIO Client	RELEASE.2025-08-13T08-35-41Z	RELEASE.2025-08-13T08-35-41Z	✅ up to date
Authelia	4.39.19	v4.39.20	⏸ HOLD	Config format может сломаться между minors — review changelog.
Certbot	v5.6.0	v5.6.0	✅ up to date
SOPS	v3.13.0	v3.13.1	⏸ HOLD	Security-sensitive: при bump обязательно обновить SOPS_SHA256_ARM64/AMD64 из checksums.txt релиза.
Nginx	1.30.0-alpine	1.31.2-alpine3.23-perl	🔄 minor
Squid	7.2-26.04_edge	7.2-26.04_edge	✅ up to date
PostgreSQL	16-alpine3.23	18.4-alpine3.24	🔒 Dify-pinned	Dify 1.14.1 pins 15-alpine; bump выше = риск schema/protocol break — ждать новый Dify minor
Redis	7.4.8-alpine	8.8-alpine3.23	🔒 Dify-pinned	Dify 1.14.1 pins 6-alpine; bump выше = риск schema/protocol break — ждать новый Dify minor
Portainer	2.41.1	2.43.0-alpine	🔄 minor
Docker Socket Proxy	0.3.0	0.3.0	✅ up to date
Prometheus	v2.54.1	3.5.4	⏸ HOLD	v3.x major: новый storage format, careful migration.
Alertmanager	v0.32.1	0.33.0	🔄 minor	arm64 verify skipped (manifest unreachable)
Grafana	13.0.1	13.0.3	📦 patch
Loki	3.6.10	3.7.3	🔄 minor
Alloy	v1.16.1	1.17.0	🔄 minor	arm64 verify skipped (manifest unreachable)
Node Exporter	v1.11.1	1.11.1	✅ up to date
cAdvisor	v0.55.1	0.60.2	⏸ HOLD	v0.56.0/1/2 — release tag exists, но container manifest БЕЗ arm64 (see docs/adr/0009-cadvisor-minio-arm64-holds). Stay ≤v0.55.1.
Redis Exporter	v1.83.0	v1.86.0	🔄 minor
Postgres Exporter	v0.19.1	v0.19.1	✅ up to date
Nginx Exporter	1.5.1	v1.5.1	✅ up to date
K6	2.0.0	v1.8.0	✅ up to date

Legend

• ✅ up to date: No action needed.
• 📦 patch: Safe to update. Test and release.
• 🔄 minor: Review changelog. Test before release.
• ⚠️ major: Breaking changes possible. Careful testing required.
• 🔀 branch: Tracking a branch — latest stable release shown for reference.
• ⏸ HOLD: Upstream release exists, но pinned по известной причине (см. docs/adr/). НЕ обновлять без снятия блокера.
• 🔒 Dify-pinned: Upstream Dify docker-compose.yaml пинит конкретную версию этого компонента. Bump выше Dify pin = риск schema/protocol incompatibility. Ждать новый Dify minor с обновлённым pin.
• 🚫 no arm64: Upstream tag есть, но в multi-arch manifest НЕТ arm64. Несовместимо с DGX Spark (см. docs/adr/0009-cadvisor-minio-arm64-holds).
• ❌ fetch error: Could not reach upstream API.

How to update (только для 📦 / 🔄 / ⚠️)

1. On test server: agmind update --component <name> --version <latest> --force
2. Run agmind doctor — verify 0 errors
3. Verify arm64: bash tests/compose/test_image_tags_exist.sh core/compose.yml (make manifest-check)
4. If OK — update templates/versions.env — commit — create Release
5. If FAIL — agmind update --rollback