Skip to content

Quarterly Release: October 2025

Current Versions

Component Version
Server Image 2025.10.202601281725
UI Image 2025.10.202601212056
Prefect Istio Chart 0.1.3
Customer-Managed Chart 0.8.3
2.x Client Supported 2.20.22
3.x Client Supported 3.4.21

Patch History

January 28, 2026

This release includes security fixes for the Server images.

  • Server image: 2025.10.202601281725

January 21, 2026

This release includes security fixes for the Server and UI images.

  • Server image: 2025.10.202601212055
  • UI image: 2025.10.202601212056

January 8, 2026

This release includes security fixes for the Server and UI images.

  • Server image: 2025.10.202601082200
  • UI image: 2025.10.202601082203

December 17, 2025

This release includes a Customer-Managed Chart fix for the Concurrency Lease Reaper Redis SSL environment variables. The patched chart version is 0.8.3

December 12, 2025

This release includes a Customer-Managed Chart fix for the Orion secret to include Concurrency Lease Reaper. The patched chart version is 0.8.2.

This release also includes security fixes for the Server image.

  • Server Image: 2025.10.202512121645

December 2, 2025

This release adjusts the base image for our server and ui images to use the Red Hat Universal Base Image (UBI). This base image provides enhanced security and is a requirement for certain customers.

Specifically, the base image has changed from python:3.12.11-slim to redhat/ubi8:8.10-1763613534.

For more information, see Red Hat's documentation.

  • Server Image: 2025.10.202512022007
  • UI Image: 2025.1202.201742

Initial Release: October 2, 2025

Breaking Change

Deployment Concurrency Flag Removal: The ENABLE_DEPLOYMENT_CONCURRENCY_ORCHESTRATION flag has been removed as lease-based concurrency is now the default behavior for improved reliability.

Terminology Change

The product terminology has changed from self-managed to customer-managed.

The Google Artifact Registry path has been updated to match this change:

  • Previous path: us-docker.pkg.dev/prefect-prd-self-managed/cloud/
  • New path: us-docker.pkg.dev/prefect-prd-customer-managed/cloud/
  • Example: us-docker.pkg.dev/prefect-prd-customer-managed/cloud/ui:2025.1002.161850

This requires authenticating with a new service account, which should have been sent alongside this release.

Server Image Tag Format Change

The server image tag format has changed slightly:

  • Previous tag format: <year>.<month><date>.<timestamp> (example: 2025.0715.155226)
  • Current tag format: <release-year>.<month>.<timestamp> (example: 2025.10.202510021558)

This enables the tag to clearly indicate which quarterly release it belongs to, while still including a timestamp to indicate the release order.

Features

  • Deployment Concurrency Lease Management - Implemented lease-based deployment concurrency system to prevent slots from being held indefinitely, ensuring proper resource allocation and preventing deadlocks.
  • Enhanced Audit Log Visibility - Actor information now displayed in audit log table for both user and service account events, replacing the previous User column for better visibility and accountability.
  • Delayed Execution for RunDeployment Actions - Backports delayed execution functionality from Prefect Cloud and OSS to maintain API compatibility across all Prefect deployments. The RunDeployment action now accepts a schedule_after field that delays deployment execution by the specified duration, enabling opt-out workflow patterns where automated deployments can be cancelled before execution.

Maintenance

  • Artifact Partition Schema Permissions - Added missing artifact partition schema permissions for orion users to ensure proper data access and security.
  • Docket Logging Configuration - Enhanced logging support for docket-based services including the concurrency lease reaper for improved monitoring and debugging capabilities.
  • Integration Tests Deployment Handling - Updated deployment scripts to properly handle integration tests deployment processes.
  • Set plan_cache_mode to force_custom_plan for Orion connections. We were already setting this for the Events database, but it was missing from Orion connections. This setting prevents plan cache hangs on partitioned tables (flow_run, task_run, artifact). Without this, the planner cache can hang for seconds evaluating every combination of parameters against all partitions and their indices.
  • Event Filter Fix - Fixed a bug where event filters had labels with empty value arrays (like {"hello": []}), the PostgreSQL query generation wasn't handling them correctly - instead of returning no results, it would return all results due to missing filter clauses.
  • Removed unused sprinkler service - This service was no longer needed and has been removed to simplify the deployment.
  • Applied various security vulnerability fixes.

Helm Chart Changes

  • Changed the default global log level setting (under global.backend.extraEnv as PREFECT_CLOUD_LOGGING_LEVEL) from DEBUG to INFO.
  • Added the concurrency-lease-reaper service now that we have updated deployment concurrency to use lease-based management.
  • Added cache and concurrency-leases Redis environment variables to orion-db-migrations (to support an update to tag-based concurrency limits to be backed by global concurrency limits).
  • Added documentation to the README.md explaining how to adjust livenessProbes and readinessProbes when necessary.