Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
109 changes: 108 additions & 1 deletion developer-support/release-notes/dashboard.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,113 @@ Our minor releases are supported until our next minor comes out.

## 5.12 Release Notes

### 5.12.1 Release Notes

#### Release Date xx April 2026

#### Release Highlights

Tyk Dashboard has been updated to Go 1.25 and Debian 13 (Trixie) for enhanced security and performance, including updated FIPS-compliant images. This release also addresses multiple CVEs in dependent libraries.

For a comprehensive list of changes, please refer to the detailed [changelog](#Changelog-v5.12.1).

#### Breaking Changes

There are no breaking changes in this release.

#### Dependencies
<a id="dependencies-5.12.1"></a>

| Dashboard Version | Recommended Releases | Backwards Compatibility |
|--------|-------------------|-------------|
| 5.12.1 | MDCB v2.9.0 | MDCB v2.9.0 |
| | Operator v1.3.0 | Operator v0.17 |
| | Sync v2.1.6 | Sync v2.1.0 |
| | Helm Chart v5.1 | Helm all versions |
| | EDP v1.17.0 | EDP all versions |
| | Pump v1.14.0 | Pump all versions |
| | TIB (if using standalone) v1.7.0 | TIB all versions |

##### 3rd Party Dependencies & Tools
<a id="3rdPartyTools-v5.12.1"></a>

| Third Party Dependency | Tested Versions | Compatible Versions | Comments |
| ---------------------- | --------------- | ------------------- | -------- |
| [GoLang](https://go.dev/dl/) | 1.25 | 1.25 | [Go plugins](/api-management/plugins/golang) must be built using Go 1.24 |
| [Redis](https://redis.io/download/) | 5.x, 6.x, 7.x | 5.x, 6.x, 7.x | |
| [Valkey](https://valkey.io/download/) | 8.0.x, 8.1.x | 7.2.x, 8.0.x, 8.1.x | |
| [MongoDB](https://www.mongodb.com/try/download/community) | 6, 7, 8 | 5, 6, 7, 8 | |
| [DocumentDB](https://aws.amazon.com/documentdb/) | 4, 5 | 4, 5 | |
| [PostgreSQL](https://www.postgresql.org/download/) | 13.x - 17.x | 13.x - 17.x | |
| [OpenAPI Specification](https://spec.openapis.org/oas/v3.1.2.html) | v3.1.x | v3.1.x | Supported by [Tyk OAS](/api-management/gateway-config-tyk-oas)|

#### Deprecations

There are no deprecations in this release.

#### Upgrade instructions
<a id="upgrade-5.12.1"></a>

If you are upgrading to 5.12.1, please follow the detailed [upgrade instructions](#upgrading-tyk).

#### Downloads

- [Docker Image to pull](https://hub.docker.com/r/tykio/tyk-dashboard/tags?page=&page_size=&ordering=&name=v5.12.1)
- ```bash
docker pull tykio/tyk-dashboard:v5.12.1
```
- Helm charts
- [tyk-charts v5.1.0](/developer-support/release-notes/helm-chart#5-1-0-release-notes)

<Note>
Tyk Helm Charts are configured to install the LTS version of Tyk Dashboard. You will need to modify them to install v5.12.1.
</Note>

#### Changelog
<a id="Changelog-v5.12.1" data-scroll-offset></a>

##### Changed

<AccordionGroup>

<Accordion title='Updated Go version to 1.25'>
The Tyk Dashboard has been updated to Golang 1.25, improving security by staying up-to-date with Go versions.
</Accordion>

<Accordion title='Update base images to Debian 13 (Trixie)'>
Updated the base Docker images for Tyk Dashboard to Debian 13 (Trixie) to address multiple vulnerabilities in the underlying operating system.
</Accordion>

<Accordion title='Update FIPS images to Go 1.25 and Debian 13'>
Updated the FIPS-compliant Docker images to use Go 1.25 and Debian 13 as the base image to ensure continued security and compliance.
</Accordion>

</AccordionGroup>

##### Security Fixes

<AccordionGroup>

<Accordion title='CVE fixed'>
Addressed the following CVEs, providing increased protection against security
vulnerabilities, including, but not limited to:

- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-29063" target="_blank">CVE-2026-29063</a
- <a href="https://nvd.nist.gov/vuln/detail/CVE-2025-15281" target="_blank">CVE-2025-15281</a>
- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-0861" target="_blank">CVE-2026-0861</a>
- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-0915" target="_blank">CVE-2026-0915</a>
- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-25679" target="_blank">CVE-2026-25679</a>
- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-32285" target="_blank">CVE-2026-32285</a>
- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-32286" target="_blank">CVE-2026-32286</a>
- <a href="https://www.cvedetails.com/cve/CVE-2026-33186/" target="_blank">CVE-2026-33186</a>
- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-34986" target="_blank">CVE-2026-34986</a>

</Accordion>

</AccordionGroup>



### 5.12.0 Release Notes

#### Release Date 06 March 2026
Expand Down Expand Up @@ -71,7 +178,7 @@ There are no breaking changes in this release.
| | TIB (if using standalone) v1.7.0 | TIB all versions |

##### 3rd Party Dependencies & Tools
<a id="3rdPartyTools-v5.11.1"></a>
<a id="3rdPartyTools-v5.12.0"></a>

| Third Party Dependency | Tested Versions | Compatible Versions | Comments |
| ---------------------- | --------------- | ------------------- | -------- |
Expand Down
112 changes: 112 additions & 0 deletions developer-support/release-notes/gateway.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,118 @@ Our minor releases are supported until our next minor comes out.

## 5.12 Release Notes

### 5.12.1 Release Notes

#### Release Date xx April 2026

#### Release Highlights

Tyk Gateway has been updated to Go 1.25 and Debian 13 (Trixie) for enhanced security and performance, including updated FIPS-compliant images. This release addresses multiple CVEs in dependent libraries and fixes a route priority issue where parameterized paths incorrectly took precedence over static paths in the ValidateRequest middleware for Tyk OAS APIs.

For a comprehensive list of changes, please refer to the detailed [changelog](#Changelog-v5.12.1) below.

#### Breaking Changes

There are no breaking changes in this release.

#### Dependencies
<a id="dependencies-5.12.1"></a>

##### Compatibility Matrix For Tyk Components

| Gateway Version | Recommended Releases | Backwards Compatibility |
|--------|-------------------|---- |
| 5.12.1 | MDCB v2.9.0 | MDCB v2.9.0 |
| | Operator v1.3.0 | Operator v0.17 |
| | Sync v2.1.6 | Sync v2.1.0 |
| | Helm Chart v5.1 | Helm all versions |
| | Pump v1.14.0 | Pump all versions |

##### 3rd Party Dependencies & Tools

| Third Party Dependency | Tested Versions | Compatible Versions | Comments |
| ---------------------- | --------------- | ------------------- | -------- |
| [Go](https://go.dev/dl/) | 1.25 | 1.25 | [Go plugins](/api-management/plugins/golang) must be built using Go 1.25 |
| [Redis](https://redis.io/download/) | 6.2.x, 7.x, 7.4.x | 6.2.x, 7.x, 7.4.x | |
| [Valkey](https://valkey.io/download/) | 7.2.x, 8.0.x, 8.1.x | 7.2.x, 8.0.x, 8.1.x | |
| [OpenAPI Specification](https://spec.openapis.org/oas/v3.1.2.html) | 3.1.x, 3.0.x | 3.1.x, 3.0.x | Supported by [Tyk OAS](/api-management/gateway-config-tyk-oas)|

Given the potential time difference between your upgrade and the release of this version, we recommend users verify the ongoing support of third-party dependencies they install, as their status may have changed since the release.

#### Deprecations

There are no deprecations in this release.

#### Upgrade instructions
<a id="upgrade-5.12.1"></a>

If you are upgrading to 5.12.1, please follow the detailed [upgrade instructions](#upgrading-tyk).

#### Downloads

- [Docker image to pull](https://hub.docker.com/r/tykio/tyk-gateway/tags?page=&page_size=&ordering=&name=v5.12.1)
- ```bash
docker pull tykio/tyk-gateway:v5.12.1
```
- Helm charts
- [tyk-charts v5.1.0](/developer-support/release-notes/helm-chart#5-1-0-release-notes)

Please note that the Tyk Helm Charts are configured to install the LTS version of Tyk Gateway. You will need to modify them to install v5.12.1.

- [Source code tarball of Tyk Gateway v5.12.1](https://github.com/TykTechnologies/tyk/releases/tag/v5.12.1)

#### Changelog
<a id="Changelog-v5.12.1" data-scroll-offset></a>

##### Changed
<AccordionGroup>

<Accordion title='Updated Go version to 1.25'>
The Tyk Gateway has been updated to Golang 1.25, improving security by staying up-to-date with Go versions.
</Accordion>

<Accordion title='Update base images to Debian 13 (Trixie)'>
Updated the base Docker images for Tyk Gateway to Debian 13 (Trixie) to address multiple vulnerabilities in the underlying operating system.
</Accordion>

<Accordion title='Update FIPS images to Go 1.25 and Debian 13'>
Updated the FIPS-compliant Docker images to use Go 1.25 and Debian 13 as the base image to ensure continued security and compliance.
</Accordion>

</AccordionGroup>

##### Fixed
<AccordionGroup>

<Accordion title='Fix route priority logic for ValidateRequest middleware'>
Resolved an issue where parameterized paths could incorrectly take precedence over static paths when using the ValidateRequest middleware in Tyk OAS APIs. Static paths will now correctly bypass validation if not explicitly configured, restoring the expected routing behavior.
</Accordion>

</AccordionGroup>

##### Security Fixes

<AccordionGroup>

<Accordion title='CVE fixed'>
Addressed the following CVEs, providing increased protection against security
vulnerabilities, including, but not limited to:

- <a href="https://nvd.nist.gov/vuln/detail/CVE-2025-15281" target="_blank">CVE-2025-15281</a>
- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-0861" target="_blank">CVE-2026-0861</a>
- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-0915" target="_blank">CVE-2026-0915</a>
- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-25679" target="_blank">CVE-2026-25679</a>
- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-32285" target="_blank">CVE-2026-32285</a>
- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-32286" target="_blank">CVE-2026-32286</a>
- <a href="https://www.cvedetails.com/cve/CVE-2026-33186/" target="_blank">CVE-2026-33186</a>
- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-34986" target="_blank">CVE-2026-34986</a>

</Accordion>

</AccordionGroup>



### 5.12.0 Release Notes

#### Release 06 March 2026
Expand Down
12 changes: 6 additions & 6 deletions developer-support/release-notes/overview.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -9,13 +9,13 @@ export const releaseData = {
"home": "tyk-dashboard",
"name": "Tyk Dashboard",
"licensed": true,
"latest": "5.12.0",
"latest": "5.12.1",
"releaseNotesPath": "developer-support/release-notes/dashboard",
"lts": "5.8.12",
"latestData": {
"name": "5.12.0",
"name": "5.12.1",
"date": "06/03/2026",
"docker": "https://hub.docker.com/r/tykio/tyk-dashboard/tags?page=1&name=v5.12.0"
"docker": "https://hub.docker.com/r/tykio/tyk-dashboard/tags?page=1&name=v5.12.1"
}
},
{
Expand Down Expand Up @@ -72,13 +72,13 @@ export const releaseData = {
"home": "tyk-oss-gateway",
"name": "Tyk Gateway",
"licensed": false,
"latest": "5.12.0",
"latest": "5.12.1",
"releaseNotesPath": "developer-support/release-notes/gateway",
"lts": "5.8.12",
"latestData": {
"name": "5.12.0",
"name": "5.12.1",
"date": "06/03/2026",
"docker": "https://hub.docker.com/r/tykio/tyk-gateway/tags?page=1&name=v5.12.0",
"docker": "https://hub.docker.com/r/tykio/tyk-gateway/tags?page=1&name=v5.12.1",
"tag": "https://github.com/TykTechnologies/tyk/releases/tag/v5.12.0"
}
},
Expand Down
Loading