🚀 v2025.1.14 🚀

🎯 Core

• 🐛 CVE Fixes: Updated Go toolchain to 1.26.3 and bumped github.com/gofiber/fiber/v2 to v2.52.13 to resolve CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39836, and CVE-2026-42499. Note: fiber is only used transitively by the fileserver plugin, BUG #2339 (thanks @dmitryuk).

🧰 Plugins

🧪 Temporal

• ✨ LocalActivityParams (Go SDK compatibility): Added DataConverter, FailureConverter, and Attempt fields to LocalActivityParams to match the required Go SDK fields, preventing a potential nil-pointer dereference during local activity execution. Includes new unit tests covering default and populated values, PR #761 (thanks @xepozz).

🚀 v2025.1.13 🚀

Changelog

🎯 Core

• 🐛 CVE Fixes: Updated dependencies and Go version to 1.26.2 to resolve CVE-2026-32280 and CVE-2026-39883 (go/stdlib), CHORE (thanks @rebecca-canyon)

Changelog

🎯 Core

• 🐛 CVE Fix (deps): Updated google.golang.org/grpc to v1.79.3 to resolve CVE-2026-33186 — a server-side authorization bypass where malformed :path headers could circumvent path-based restricted deny rules in gRPC interceptors, CHORE (thanks @rebecca-canyon)

Changelog

📦 otel plugin

• 🐛 OTEL Semconv: Fixed a regression where the OpenTelemetry plugin failed to start due to conflicting semconv Schema URLs (v1.39.0 vs v1.40.0); updated semconv to v1.40, BUG (thanks @dmitryuk)

🎯 Core

• ✨ E2E Tests: Added end-to-end test suite with plugins (HTTP, gRPC, Jobs) including OpenTelemetry integration to prevent plugin compatibility regressions, FR

📦 grpc plugin

• ✨ Glob Patterns: Added support for ** (globstar/recursive) and brace expansion {pattern1,pattern2} in grpc.proto configuration paths, FR (thanks @Nyholm)

🎯 Core

• 🐛 CVE Fixes (deps): Updated Go packages to resolve CVE-2026-27141 and CVE-2026-25882, Issue (thanks @Orrison)
• 🐛 CVE Fixes (stdlib): Updated Go version to 1.26.1 to address CVE-2026-25679, CVE-2026-27142, CVE-2026-27137 in go/stdlib, Issue (thanks @Orrison)

Changelog

📦 gzip middleware

• 🐛 Gzip Middleware: Fixed a regression where responses could be encoded with zstd after upgrading to v2025.1.7; the middleware now enforces gzip-only compression BUG (thanks @dmitryuk)

Changelog

🎯 Core

• 🐛 Go Version: Updated minimum Go version to 1.26 to address CVE-2025-61726 in go/stdlib BUG (thanks @Orrison)

🚀 v2025.1.6 🚀

Changelog

🎯 Core

• ✨ Go Version: Updated minimum Go version to 1.25.5.

🚀 v2025.1.5 🚀

Changelog

🎯 Core

• ✨ SIGUSR2 Signal Support: Added support for the SIGUSR2 signal on Unix-like systems to enable graceful process restarts. When the configuration file is a symlink, RoadRunner will properly re-read the configuration from the symlink target after restart FR (thanks @koren88)
• ✨ Go Version: Updated minimum Go version to 1.25.4.

📦 Velox

• ✨ Velox: Updated to version v2025.1.5 with an updated template that pinned third-party dep tablewriter that caused problems when building RR.

Changelog

🎯 Core

• ✨ Fileserver Plugin: The Fileserver plugin has been restored to the standard bundle because of the resolution of all CVEs in its dependency, GoFiber.
• ✨ Green Tea Garbage Collector: The Green Tea garbage collector has been disabled by default after receiving several bug reports related to its use. For more details, see the Go RFC.
• ✨ Automaxprocs: The automaxprocs library from Uber has been removed, as Go 1.25 now includes this functionality natively.

📦 Velox

• ✨ Velox: Updated to version v2025.1.4 with an updated template that removed the automaxprocs dependency.

📦 Temporal plugin

• ✨ Support for the NO_PROXY environment variable to disable proxy usage FR (thanks @jur3)
• ✨ Support for setting the Workflow Versioning Behavior from the PHP Worker FR (thanks @roxblnfk)

📦 Kafka driver

• ✨ Support for partition strategies FR (thanks @adamsnoah98)

🎯 Core

• ✨ The Fileserver plugin has been excluded from the standard bundle but is available to be built with Velox. This is because its dependency, GoFiber, has had too many CVEs in recent months.
• ✨ Update dependencies and Go to the latest versions.
• ✨ Use the new Green Tea garbage collector by default; see Go RFC

Changelog

📦 Temporal plugin

• ✨ Support activity pause response and Timers summary.

🎯 Core

• ✨ Update project dependencies and Go to the latest version.

Changelog:

📦 KV plugin:

• 🐛 Null pointer exception when using KV plugin without Redis driver, BUG (thanks @Orrison)

Changelog:

🚨 Please, use the hotfix version v2025.1.1 instead of this release if you're using KV plugin.

🎯 Upgrade from RoadRunner v2024

• 🚨 Upgrade and compatibility docs.

📦 Kafka driver:

• 🐛 Fix TLS timeout parsing to avoid overflows, kafka#2168 (thanks @adamsnoah98)

📦 Jobs plugin:

• 🐛 Improve handling of restart/exit pipeline events: propagate errors on restart failures and ensure pipelines resume after channel closures, jobs#138

📦 AMQP driver:

• 🐛 Handle graceful channel closes to prevent redundant or erroneous close attempts, improve logging and correct events bus event amqp#186

📦 gRPC plugin:

• 🧹 Upgrade gRPC to support grpc@v1.72.0 and new List healthcheck method, grpc#2162 (thanks @matthewhartstonge)

📦 Redis driver:

• ✨ Add Prometheus metrics integration via redisprometheus collector for enhanced observability, redis#124 (thanks @dkomarek)

🎯 Core:

• 🚨 Security: address CVE-2025-22871 in the rr package to resolve critical audit findings, rr#2166 (thanks @Orrison)

Changelog:

📦 Kafka driver:

• 🧑‍🏭: Do not require a certificate and key for TLS if a Root CA is provided, FR, (thanks @AtCliffUnderline)

Changelog:

📦 gRPC plugin:

• 🐛: Segfault on some rare error unpacking conditions, BUG, (thanks @cv65kr)

🧹 Chore:

• 🧑‍🏭: Correctly return error if the startup process exited by timeout (exec_timeout), PR, (thanks @AleksandrKosovS)
• 🧑‍🏭: All plugins (and RoadRunner) were updated to Go 1.24.

🚀 v2024.3.3 🚀

Changelog:

RoadRunner-Temporal plugin:

• 🔥: Support for the Upsert Memo command: FR

🧹 Chore:

• 🧑‍🏭: All plugins dependencies were updated.

🚀 v2024.3.2 🚀

Changelog:

📦 http plugin:

• 🐛: Support all encoding (not only UTF-8) for the HTTP plugin payloads, BUG, (thanks @GityaMan)

RoadRunner-Temporal plugin:

• 🔥: Full support for the Typed Search Attributes: FR, FR, docs, (thanks @roxblnfk)
• 🔥: More useful debug logs: PR, (thanks @cv65kr)
• 🐛: Fix statuses for the turned off activity workers, BUG, (thanks @cv65kr)

gRPC (PHP) plugin:

• 🔥: Propagate response headers with grpc error metadata: PR. (thanks @rauanmayemir)

🧹 Chore:

• 🧑‍🏭: All plugins were updated.

🚀 v2024.3.1 🚀

Changelog:

📦 Jobs plugin:

• 🐛: Segfault when RoadRunner receives RPC request while initializing, BUG, (thanks @l-x)

RoadRunner-Temporal plugin:

• 🔥: New disable_activity_workers option to disable PHP activity pool entirely: FP. (thanks @cv65kr)

🧹 Chore:

• 🧑‍🏭: All plugins were updated (security fixes).

🚀 v2024.3.0 🚀

Meet the new RoadRunner release! This time we have a lot of new features, improvements, and bug fixes. Let's dive in! In this realse we have added a new feature called Auto Workers Scaling. This feature allows users to scale their RoadRunner workers automatically, up to 100 additional workers. SQS plugin was significantly reworked without major breaking changes, please, read the updated documentation carefully. RoadRunner-Temporalplugin now supports API-Keys (which would be added via our SDK-PHP and documentated in it as well).

📦 Core RoadRunner SDK:

• 🔥: Dynamic Workers Scaling: FR, docs

OTEL plugin:

• 🔥: Detect resources from environment variables when not set in config PR, (thanks @devnev)

📦 In-Memory KV driver:

• 🐛: Fixed very tricky memory leak, when trying to update the same key with TTL multiple times in a row: BUG, (thanks @segrax)

📦 Status plugin:

• 🔥: JSON status reporting, remove strict requirement for providing list of plugins: FR, (thanks @Kaspiman)

📦 Symfony integration:

• 🔥: Symfony Runtime (PHP) now supports RoadRunner v2023/2024: PR, (thanks @msmakouz)

📦 Redis driver:

• 🔥: Add TLS support PR, (thanks, @sicet7)

📦 Temporal:

• 🔥: Support API keys: PR, docs. This feature would be added to our SDK-PHP and documentated (how to use) in it as well.
• 🔥: Support h2c TLS without certs: PR, (thanks @cv65kr)

📦 SQS driver:

• 🔥: Complete rework without major breaks by @nickdnk. Please, read the updated docs carefully: docs NOTE: The default values for SQS now use short polling. Make sure you inspect your value for wait_time_seconds if you want to use long polling.

📦 Nats driver:

• 🐛: Properly pass user-defined headers FR

📦 Config plugin:

• 🔥: Config for RPC plugin does not work when included from another file BUG, (thanks @Kaspiman)

📦 Server plugin:

• 🔥: Add new option server.on_init.exit_on_error to stop RoadRunner when on_init error occured: FR, (thanks @wizardist)

📦 RabbitMQ (AMQP) driver:

• 🔥: Support publish confirmations FR, (thanks @algirdasci)
• 🐛: [PHP] Fixed option name from redelivery to requeue: BUG, (thanks @msmakouz)

📦 Locks plugin:

• 🐛: Fixed forceRelease method, removed requirement for input ID BUG, (thanks @fugikzl)

📦 Metrics plugin:

• 🔥: Declare metrics in upsert mode: CHORE, (thanks @cv65kr)

📦 Velox:

• 🐛: Fixed base64 logs output: BUG, (thanks @rauanmayemir)

Thanks to out contributors:

• @nickdnk - for the help with the SQS driver and reworking the whole JSON schema across all plugins (which is actually HUGE).
• @msmakouz - for working on the PHP RoadRunner SDK.
• @cv65kr - for the help with the Metrics and RoadRunner-Temporal plugins.
• @sicet7 - TLS support in the Redis plugin.
• @Kaspiman, @wizardist, @rauanmayemir, @algirdasci and @fugikzl - for being proactive, reporting issues and being collaborative.

🚀 v2024.2.1 🚀

OTEL plugin:

• 🔥: Several improvements by @devnev: Do not set Endpoint and Headers for gRPC if they're empty: PR, Support standard OTEL exporter protocol environment variables: PR. (thanks @devnev)

RoadRunner-Temporal plugin:

• 🐛: gRPC client closed too early after shutdown: BUG. (thanks @kkosowski-p)

AMQP driver:

• 🐛: redial_timeout was not respected when dynamically creating pipeline. BUG, (thanks @algirdasci)

🧹 Chore:

• 🧑‍🏭: All plugins were updated to Go 1.23 (including Velox Dockerfile).

Upgrade guide: link

Community plugins

We are introducing a new term in the RoadRunner community — Community plugins. If you have a brilliant idea for the http middleware or JOBS driver or even a new plugin - feel free to check our Customization tutorials, create and notify us about your plugin.

Plugins updates:

🔥 Meet the new JOBS driver - Google Pub/Sub

RoadRunner now supports the Google Pub/Sub queues. Currently, this driver is released in BETA and has a few limitations which you may find in the docs

AMQP and Kafka JOBS drivers

• 🔥 Support an auto-restart pipeline on redial or some fatal problems when connecting to the RabbitMQ broker. Instead of silently exit from the pipeline, RR will try to re-initialize the pipeline.

Thanks to our PHP team, KV now has AsyncStorageInterface support which makes your experience with the KV plugin even faster. Feel free to read the technical details here: link

Samples repository

• 🔥 Our RoadRunner samples repository was updated and now includes a Jobs driver example for the Jobs plugin. More info here: link.

Our Go-SDK was deprecated

• 😭 Our Go-SDK was deprecated and split into separate packages. Read more in the Upgrade guide.

Velox configuration update

• 🔥 Velox configuration was simplified:

[roadrunner]
  # ref -> reference, tag, commit or branch
  ref = "v2024.2.0"

# the debug option is used to build RR with debug symbols to profile it with pprof
[debug]
enabled = false

## Rest is the same ....

Now, there is no need to include linker flags, and buildtime + build version would be inherited automatically. If you need to debug your binary, please, use the debug option set to true.

Special thanks to our sponsors ❤️ :

1. Buhta
2. Coderabbitai
3. Kaspiman
4. benalf
5. rapita
6. uzulla

🚀 v2024.1.5 🚀

Status plugin:

• 🐛: Fix k8s-related problem, when status was not available during the graceful shutdown process: BUG. (thanks @cv65kr)

JOBS plugin:

• 🔥: Experimentally added new handlers for the more canonical ACK, NACK, and REQUEUE operations for the JOBS drivers. PHP SDK will be updated soon. FR, (thanks @shieldz80)

✏️ Future changes:

• 💡: Configuration includes will be out of experimental status in the next minor release (v2024.2.0) and currently don't have restrictions on where to put the included config. Keep in mind that the path for the included configurations is calculated from the working directory of the RoadRunner process. FR

🚀 v2024.1.4 🚀

Temporal plugin:

• 🐛: Fix Local activities executed on the Workflow PHP Worker instead of the Activity PHP Worker: BUG. With this fix, LA performance should see a significant increase. (thanks @Zylius)

🚀 v2024.1.3 🚀

RR core:

• 🔥: Deprecate RR_* env variables prefix. This was an undocumented feature which caused confusion, because any configuration value might be automatically replaced (without using env in the configuration) with a matching RR_* environment variable, PR.

Temporal plugin:

• 🔥: Enable client certificate rotation: FR. With this change, you may replace a certificate on a Live system. (thanks @benkelukas)
• 🔥: Expose continue_as_new_suggested for the PHP Worker: PR.

Kafka

• 🐛: Reduce the number of maxPollRecords from 10k to 100, PR.

Endure container:

• 🐛: Fix incorrectly used error log message: PR.

General:

• 🔥: Update Go to v1.22.4.

RoadRunner PHP:

Worker:

• 🔥: Add RR_VERSION env to the Environment class: PR, (thanks @Kaspiman)

🚀 v2024.1.2 🚀

Upcoming new JOBS driver: google-pub-sub:

• 🔥: Currently in a polishing phase, the new plugin will be released as part of the v2024.2.0. Stay tuned! (thanks @cv65kr)

gRPC plugin:

• 🐛: Strip extra slashes when there is no package defined in the protofile: PR, (thanks @satdeveloping)

OTEL plugin:

• 🐛: Fix hardcoded AlwaysSample samples: BUG, (thanks @bazilmarkov)

RR core plugin:

• 🐛: RR workers/reset commands don't respect default config values: BUG, (thanks @r4m-alexd)

🚀 v2024.1.1 🚀

HTTP plugin:

• 🐛 Bug: Fix for the NPE on types check: BUG, (thanks @cto-asocial)

gRPC plugin:

• 🔥 Remove experimental status from the OTEL in gRPC, PR

SDK:

• 🔥 Additional debug logging for the maxExecs with jitter: PR (thanks @Kaspiman)

🚀 v2024.1.0 🚀

Upgrade guide: link

HTTP plugin:

• 🔥 Use protobuf encoded payloads to prevent field reordering and JSON escaped symbols.

Kafka driver:

• 🔥 Support TLS configuration (thanks @dkomarek)

SDK:

• 🔥 Use a small random jitter to prevent the Thundering herd problem when user uses max_jobs option and all the workers restarted at the same time. This feature is enabled automatically. (thanks @Kaspiman)

🚀 v2023.3.12 🚀

Centrifuge plugin:

• 🔥 Add support for the NotifyChannelState centrifuge API.

Temporal plugin:

• 🔥 Add support for the Updates API.
• 🔥 Add support for the healthchecks: FR, (thanks @shanginn).

🧹 Chore:

• 🧑‍🏭: All since log entries are now always shown as milliseconds, FR, (thanks @dmitryuk).

🚀 v2023.3.11 🚀

Centrifuge plugin:

• 🐛️ Check the connection properly before attempting to send a request: PR

OTEL plugin:

• 🐛️ Do not force setting endpoint and headers: BUG. Update docs on OTEL env usage: Docs, (thanks @fasdalf and @arku31).

HTTP plugin:

• 🐛️ Response status 200 instead of 500 in debug mode if PHP code fails: BUG, (thanks @Volonda).

🧹 Chore:

• 🧑‍🏭 Dependencies: Build with Go 1.22.0.

🚀 v2023.3.10 🚀

Core SDK bugfixes:

• 🐛️ Request queue gets too large, BUG/FR, Docs (thanks, @L3tum)
• 🐛️ Huge memory allocation in the debug mode FIX.
• 🐛️ Stop handler (worker->stop()) was returned (breaking change fix) FIX, (thanks @Zylius)

🧹 Chore:

• 🧑‍🏭 Dependencies: update project/system dependencies.

🚀 v2023.3.9 🚀

HTTP plugin

• 🐛️ Streaming responses can experience a lock-up when the client disconnects early, BUG, (thanks @segrax)

SQS JOBS driver

• 🐛️ Use user specified credentials if they are set even if we're inside AWS, BUG, (thanks @matteokov)

Service plugin

• 🐛️ Services directly killed when restarting on terminating. BUG, (thanks @chazzbg)

Server plugin

• 🔥 Add user parameter to on_init command section. PR, docs, (thanks @Kaspiman)

Redis KV driver

• 🐛️ Correctly finish the OTEL span. PR, (thanks @Kaspiman)

🧹 Chore:

• 🧑‍🏭 Dependencies: update project/system dependencies.
• 🧑‍🏭 Docs: update docs, BUG.

🚀 v2023.3.8 🚀

HTTP plugin

• 🔥 Experimental HTTP3 server, FR, docs: link, (thanks @cv65kr & @cidious)

gRPC plugin

• 🔥 Experimental support for the OTLP protocol inside the gRPC plugin: FR, docs: link (thanks @rauanmayemir)

Beanstalk driver

• 🐛️ Fix NPE on empty options BUG, (thanks @SerhiiMova).

Velox

• 🔥 To ensure that Velox is able to build every RoadRunner version, we've added a new CI CRON job that builds RoadRunner with Velox daily. This job is not related to the RoadRunner release process, but it will help us to ensure that Velox is always compatible with the latest RoadRunner version.

🧹 Chore:

• 🧑‍🏭 Dependencies: update project/system dependencies.