2025.11

Version	Release Date
2025.11.0	November 19, 2025

System Requirements Update

Ensure your infrastructure meets the latest requirements for optimal performance and security:

Component	Minimum Version	Recommended Version
KOTS	1.117.3	Latest
Kubernetes	1.28	1.33
PostgreSQL	15	17
Redis	6	7
ggscout	0.19.0	Latest

Helm & Upgrade Considerations

To ensure compatibility, please review Helm values updates from the previous version. Air gap deployment? Find all the images and tag names in the air gap install page.

Helm v4 Support

Helm v4 is not yet supported. Please use Helm v3.13+. Learn more.

Secrets Detection Engine

• v2.150 — 1 new detector (Coveo API Key), 1 improved (Resend), 1 new checker, 1 analyzer upgrade, 1 engine enhancement.

Enhancements

• Large occurrence patches display. See SaaS release: Oct 28.
• Incident list source links, API change_type field. See SaaS release: Nov 7.
• Dev-in-the-Loop incident ID display and dashboard navigation. See SaaS release: Nov 17.
• Self-Hosted:
  • Added official support for PostgreSQL 18 and Redis 8.
  • Added terms and conditions acceptance requirement during business workspace sign-up and trial activation for improved legal compliance.
  • Replicated now inherits global image pull secrets, simplifying Helm configuration by removing the need for separate imagePullSecrets in the replicated section. Learn more.

Fixes

• Perimeter scan button visibility, SSO IDP configuration, sources tooltips and health checks, incidents commit info and code fixing section. See SaaS release: Oct 25.
• GitLab PAT updates 403 error, SharePoint health-check error 9999. See SaaS release: Oct 28.
• Microsoft Teams notifier client secret update, incident feedback registration. See SaaS release: Nov 7.
• Container Registry automatic monitoring, Jira Data Center webhook version. See SaaS release: Nov 17.
• Fixed an issue where filepath exclusions failed to apply when selecting individual repositories, while working correctly with select all repositories.
• Self-Hosted:
  • Dashboard access now blocked when ReplicatedSDK is not running to enforce proper license validation.
  • Fixed PostgreSQL and Redis preflights failing when CA certificate was provided without client certificate and key.