Clever Cloud Documentation – Changelog

Images update: FrankenPHP 1.12, Gradle 9.4, Rust 1.94, set PHP & Composer versions in all runtimes

Wed, 25 Mar 2026 00:00:00 +0000

We updated all our images, except PHP. Deployment is in progress for all our users.

Common:
- Linux kernel 6.19.7
- Anubis 1.25.0
- Chromium 146.0.7680.153
- Clever Tools 4.7.1
- cURL 8.19.0
- FFmpeg 8.1
- Ghostscript 10.07
- OAuth2Proxy 7.14.3
- Poppler 26.03
- SQLite 3.52.0
- Varnish 8.0.1
- Vim 9.2.0096
Elixir:
- Erlang 26.2.5.18
- Erlang 27.3.4.9
- Erlang 28.4.1
FrankenPHP:
- Update to 1.12.1 with PHP 8.5.4 (with CC_PHP_VERSION=8.5)
Go:
- Update to 1.26.1
Java:
- Gradle 9.4.1
- Maven 3.9.14
Node.js & Bun:
- Update to 24.14.1 (npm 11.11.0)
- Bun 1.3.11
- Yarn 4.13.0
Python:
- Update to 3.10.20
- Update to 3.11.15
- Update to 3.12.13
- uv 0.10.12
Ruby:
- Update to 3.4.9
Rust:
- Update to 1.94.0
- Rustup 1.29.0
Static:
- Caddy 2.11.2

PHP & Composer version

You can now set CC_PHP_VERSION and CC_COMPOSER_VERSION in any runtime. We also fixed a bug that prevented to use another Composer version than the LTS with FrankenPHP.

Log drains collection

We removed old log drains stack, except for application still using it.

Learn more about log drains old stack deprecation

Keycloak 26.5.6 (security update)

Mon, 23 Mar 2026 00:00:00 +0000

The release 26.5.6 of Keycloak is available on Clever Cloud. It addresses eight security vulnerabilities: CVE-2026-1180, CVE-2026-1035, CVE-2025-14777, CVE-2025-14082, CVE-2026-3121, CVE-2026-3190, CVE-2026-3911 and CVE-2026-2366.

You can update through the add-on’s dashboard in the Clever Cloud Console. You can also set CC_KEYCLOAK_VERSION of the underlying Java application to 26.5.6 and rebuild it, or use Clever Tools:

clever features enable operators

clever keycloak version check yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId 26.5.6

Learn more about Keycloak on Clever Cloud

Metabase 59 is now used by default

Mon, 23 Mar 2026 00:00:00 +0000

The x.59 branch of Metabase is available on Clever Cloud since earlier this month. It’s now the default branch deployed with the release 0.59.3. It means that:

All new add-ons will use it
All add-ons using default configuration (community-latest) will use it after a rebuild

You can update through the add-on’s dashboard in the Clever Cloud Console. You can also set CC_METABASE_VERSION of the underlying Java application to 0.59 or 1.59 for the enterprise edition (EE) and rebuild it, or use Clever Tools:

clever features enable operators

clever metabase version check yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId 0.59

Drains legacy stack deprecation

Thu, 19 Mar 2026 00:00:00 +0000

For the past few months, Clever Cloud has provided a new drain stack and a v4 API that is more reliable and provides better monitoring. It’s available through Clever Tools since release 4.4.0. If you still use the legacy drains implementation, we encourage you to migrate to the new stack as soon as possible.

The legacy drains will be disabled on June 1st, 2026. In the meantime, we will make some changes to prepare for the migration and help you transition smoothly:

March 19th, 2026: we added CC_PREVENT_LEGACY_LOGSCOLLECTION=false environment variable on applications linked to a legacy active drain
Starting with the next image release, if not set to false, we will consider this environment variable as true and only push logs of applications with a drain to the new drain stack
June 1st, 2026: legacy drains will be disabled and all applications will need to use the new drain stack to receive logs

How to migrate

To migrate to the new drain stack, just create a new drain with Clever Tools, then remove CC_PREVENT_LEGACY_LOGSCOLLECTION=false from your application environment variables and restart it. The new drain should start receiving logs immediately.

If you have any questions or if you need help with the migration, contact our support team.

Learn more about Clever Tools drain command

Clever Tools 4.7: SSH remote commands, improved drains and backup downloads

Wed, 11 Mar 2026 00:00:00 +0000

Clever Tools 4.7.0 is available. This release enhances SSH with remote command execution and interactive instance selection, improves drain monitoring and fixes database backup downloads.

SSH remote command execution

You can now execute a single command on a running instance with the new --command (or -c) option. The command runs in a login shell and exits immediately, making it convenient for quick diagnostics, scripting or automation.

# List application files
clever ssh -c 'ls -lah $APP_HOME'

# Inspect application environment variables
clever ssh -c "env | sort"

# Read application logs
clever ssh -c "journalctl -u bas-deploy.service --no-pager -n 50"

This also enables AI coding assistants (Claude Code, Codex, Cursor, OpenCode…) to inspect the state of a running instance, analyse configuration files, check logs or troubleshoot issues on your behalf.

Interactive instance selection

When multiple instances are running, clever ssh now displays an interactive selection prompt instead of a numbered list. This provides a more intuitive experience when choosing which instance to connect to.

clever ssh
> ? Select an instance:
> ❯ Sleepy Ponita - Instance 0 - UP (11281f38-...)
> Tense Caterpie - Instance 1 - UP (b10d19d9-...)

Improved drain monitoring

The clever drain and clever drain get commands now display message rates and throughput with dynamic units (messages/hour, messages/minute, messages/second, KiB/second, MiB/second) that adapt to the actual values. Retry information is also shown, including attempt count, last and next attempt timestamps, helping you troubleshoot delivery issues more effectively.

Bug fixes

Database backup downloads now use Node.js stream pipelines, fixing backpressure issues that could cause incomplete downloads on large backups.
Detached HEAD deployments are now handled correctly when using the system Git feature, fixing failures that occurred when deploying from a detached HEAD state.

How to upgrade

To upgrade Clever Tools, use your favourite package manager. For example with npm:

npm update -g clever-tools
clever version

PostgreSQL 18.3, 17.9, 16.13, 15.17, 14.22 are available

Mon, 09 Mar 2026 00:00:00 +0000

New PostgreSQL versions are available for new add-ons and migration:

PostgreSQL 18.3
PostgreSQL 17.9
PostgreSQL 16.13
PostgreSQL 15.17
PostgreSQL 14.22

These versions include multiple bug fixes and improvements. PostgreSQL 14 and 15 are now shipped without plls and plcoffee extensions, which are no longer supported with up to date add-ons.

Learn more about PostgreSQL on Clever Cloud

Keycloak 26.5.5 (security update)

Fri, 06 Mar 2026 00:00:00 +0000

The release 26.5.5 of Keycloak is available on Clever Cloud. It addresses four security vulnerabilities: CVE-2026-3047, CVE-2026-3009, CVE-2026-2603 and CVE-2026-2092.

You can update through the add-on’s dashboard in the Clever Cloud Console. You can also set CC_KEYCLOAK_VERSION of the underlying Java application to 26.5.5 and rebuild it, or use Clever Tools:

clever features enable operators

clever keycloak version check yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId 26.5.5

Learn more about Keycloak on Clever Cloud

Otoroshi 17.13 brings Kubernetes Gateway API support, remote catalogs and audio STT extensions

Wed, 04 Mar 2026 00:00:00 +0000

Otoroshi v17.13 is available with experimental support for the Kubernetes Gateway API, enabling standardised Kubernetes-native traffic management. This release also introduces remote catalogs, allowing to fetch and manage plugin or configuration catalogs from external sources.

A webhook validator plugin is also included, providing HMAC signature verification for incoming webhook payloads. It supports multiple algorithms (SHA256, SHA512, SHA384, SHA1) and is provider-agnostic with configurable signature headers and signing templates, compatible with services such as GitHub, Stripe, Slack or YouSign.

Security headers plugin now supports Referrer-Policy and Permissions-Policy headers, and new configuration options allow exposing public keys with algorithms in JWKS endpoints. Several router fixes improve path matching with wildcard domains, query/header/cookie matching prioritisation, and trailing slash handling. The strict mode of the JWT user extractor plugin has also been fixed.

This release includes LLM extension 0.0.73, bringing audio speech-to-text support with Mistral Voxtral model and Azure OpenAI Audio API. It also includes various provider payload cleanups for Anthropic and xAI formats.

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_OTOROSHI_VERSION of the underlying Java application to v17.13.0_1772616661 and rebuild it, or use Clever Tools:

clever features enable operators

clever otoroshi version check yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId v17.13.0_1772616661

Learn more about Otoroshi with LLM on Clever Cloud

Metabase 59 is available, with Data Studio, AI and box-and-whisker plots

Tue, 03 Mar 2026 00:00:00 +0000

The x.59 branch of Metabase is now available on Clever Cloud. It introduces Data Studio, a comprehensive toolkit for data governance including a semantic layer library, dependency graphs, diagnostic tools and data transforms. It also brings box-and-whisker plots, conditional colors for big number displays, AI-powered text-to-SQL for open source users via Anthropic API, a new Agent API, multiple enhancements and bug fixes.

clever features enable operators

clever metabase version check yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId 0.59

This new branch is not yet the default if you use community-latest, we’ll move to it in the next few weeks.

Terraform provider 1.10.0

Tue, 03 Mar 2026 00:00:00 +0000

The 1.10.0 release of the Clever Cloud Terraform provider is available. It adds Linux runtime support for applications, missing feature flags for MySQL, PostgreSQL and MongoDB add-ons, and includes multiple bug fixes (add-on API responses, app state handling, Elasticsearch versioning, OAuth signature method).

Learn more about Clever Cloud Terraform provider

Images update: FrankenPHP 1.11.3 (PHP 8.5), Request Flow in all runtimes

Wed, 25 Feb 2026 00:00:00 +0000

We updated all our images. Deployment is in progress for all our users.

Common:
- Clever Tools 4.6.1
- md4c 0.5.2
- Redis 8.6.1
- Mise 2026.2.19
- Otoroshictl 0.0.17
FrankenPHP:
- Update to 1.11.3 (with CC_PHP_VERSION=8.5)
Python:
- uv 0.10.4
Static:
- Caddy 2.11.1
- Static Web Server 2.41.0

PHP Version in FrankenPHP

Customers asked for PHP version choice in our FrankenPHP runtime. PHP 8.4 is still the default, but you can now select PHP 8.5 by setting CC_PHP_VERSION=8.5 in your environment variables. It will use the latest FrankenPHP binary release (currently 1.11.3). PHP 8.5 will be the default in the coming months.

We’ll only support non end-of-life (EOL) versions of PHP in FrankenPHP, so regularly check PHP’s supported versions.

Request Flow extension

Request Flow is now available in all our runtimes, including Python without uv and Ruby.

Learn more about Request Flow

Fixes

This release fixes issues with logs in some Java applications.

Redis 8.6.1 is available (Security update)

Wed, 25 Feb 2026 00:00:00 +0000

We updated Redis™ to release 8.6.1. It brings bug fixes, performance optimizations from 8.6.0 and a security patch. Redis™ 8.6.1 is available for new add-ons. Those already deployed can upgrade through migration.

Starting with this release, Transparent Huge Pages (THP) are disabled at startup to prevent latency spikes and memory fragmentation under heavy workloads, in line with official Redis documentation.

Learn more about Redis™ on Clever Cloud

Keycloak 26.5.4 (security update)

Mon, 23 Feb 2026 00:00:00 +0000

The release 26.5.4 of Keycloak is available on Clever Cloud. It fixes bugs, improves performance and addresses five security vulnerabilities: CVE-2026-1190, CVE-2026-0707, CVE-2025-5416, CVE-2026-2575 and CVE-2026-2733.

You can update through the add-on’s dashboard in the Clever Cloud Console. You can also set CC_KEYCLOAK_VERSION of the underlying Java application to 26.5.4 and rebuild it, or use Clever Tools:

clever features enable operators

clever keycloak version check yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId 26.5.4

Learn more about Keycloak on Clever Cloud

Metabase security patches for versions 54 to 58

Fri, 20 Feb 2026 00:00:00 +0000

Metabase versions 0.54.20, 0.55.20, 0.56.20, 0.57.13 and 0.58.7 are now available on Clever Cloud. These releases fix security vulnerabilities (CVEs) and should be applied as soon as possible.

If you use community-latest as your CC_METABASE_VERSION, you have nothing to do or simply need to restart your instance to get the latest patched version. If you use a specific version, update CC_METABASE_VERSION of the underlying Java application to the latest patch for your branch and rebuild it.

You can update through the add-on’s dashboard in the Clever Cloud Console, or use Clever Tools:

clever features enable operators

clever metabase version check yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId

Learn more about Metabase on Clever Cloud

Clever Tools 4.6: multi-profile, config providers, system Git and AI skill

Wed, 18 Feb 2026 00:00:00 +0000

Clever Tools 4.6.0 is available. This release brings multi-profile support, config provider commands, add-on logs migration to the v4 API, optional system Git support and an AI assistant skill.

Multi-profile support

You can now login to multiple Clever Cloud accounts, each with its own credentials and alias. New commands allow you to list and switch between profiles, making it easier to work across different accounts or environments from a single machine. Each profile can also have per-profile endpoint and OAuth overrides configured during login for custom Clever Cloud deployments.

# Create named profiles
clever login --alias personal
clever login --alias work

# Create a profile with custom API endpoint
clever login --alias staging --api-host https://clever-cloud-api.example.com

# List all profiles
clever profile list

# Switch to another profile
clever profile switch --alias work

# With exactly 2 profiles, switch to the other one
clever profile switch

# Display the current profile
clever profile

Config providers

New config-provider commands are now available, giving you direct access to manage config providers from the CLI. You can list, get, set, remove and import environment variables.

# List all config providers
clever config-provider list

# Get variables from a config provider (by name or ID)
clever config-provider get my-config-provider

# Export variables in shell format
clever config-provider get my-config-provider --format shell

# Set a variable
clever config-provider set my-config-provider MY_VAR "my-value"

# Remove a variable
clever config-provider rm my-config-provider MY_VAR

# Import variables from a .env file
cat my-vars.env | clever config-provider import my-config-provider

# Import variables from JSON
echo '[{"name":"FOO","value":"bar"}]' | clever config-provider import my-config-provider -F json

AI assistant skill

Clever Tools is now available as a skill for AI coding assistants such as Claude Code, Codex, Cursor or GitHub Copilot. Once installed, the assistant gets knowledge of CLI commands, Clever Cloud concepts, available runtimes, add-on providers and common workflows.

# Install the skill for your AI coding assistant
npx skills add CleverCloud/clever-tools

System Git support (beta)

By default, Clever Tools uses an embedded JavaScript Git implementation for deploy operations. While it works without requiring Git to be installed, it can be slow on large repositories or branches with rewritten history (rebases, squashes), and does not support SSH-based protocols.

You can now opt in to use your system’s native git command instead, for faster and more reliable deployments. This feature is currently in beta and requires git to be available in your PATH.

# Enable system Git
clever features enable system-git

# Deploy as usual, now using your system's git
clever deploy

# Disable if not needed anymore
clever features disable system-git

How to upgrade

To upgrade Clever Tools, use your favorite package manager. For example with npm:

npm update -g clever-tools
clever version

Images update: Kernel 6.19, Request Flow in Go, Java, Node.js, PHP and Static with Apache

Wed, 18 Feb 2026 00:00:00 +0000

We updated all our images. Deployment is in progress for all our users.

Common:
- Linux Kernel 6.19.2
- ClamAV 1.5.1
- Mise 2026.2.13
- Otoroshictl 0.0.16
.NET:
- Update to 8.0.123
- Update to 9.0.113
Elixir:
- Erlang 27.3.4.7
Node.js & Bun:
- Update to 24.13.1 (npm 11.8.0)
PHP:
- Update to 8.4.18
- Update to 8.5.3
Rust:
- Update to 1.93.1

Apache Basic Auth

X-Robots-Tag: noindex, nofollow header is now added to responses with Basic Authentication through Apache

Request Flow extension

Request Flow is now available in Go, Java/Scala, Meteor, Node.js & Bun, PHP and Static with Apache runtimes. Python (without uv) and Ruby are coming soon. If your application currently uses Varnish in Go or Node.js, you must ask support to switch to this new release. Your application will have to move from port 8081 to 9000.

Learn more about Request Flow

Images update: .NET 10, Go 1.26, Mise 2026.2, Python 3.14, uv 0.10

Thu, 12 Feb 2026 00:00:00 +0000

We updated all our images. Deployment is in progress for all our users.

Common:
- git 2.53.0
- Mise 2026.2.8
- nginx 1.28.2
- pgpool2 4.7
.NET:
- Update to 10.0.102
Docker:
- Docker 29.2.1
Go:
- Update to 1.26.0
Node.js & Bun:
- Bun 1.3.9
- nvm 0.40.4
Python:
- Update to 3.13.12
- Update to 3.14.3
- pip 26.0.1
- uv 0.10.2

.NET 10 support

You can now set CC_DOTNET_VERSION=10.0, default version is still 8.0. We’ll move to 10.0 in the coming weeks.

Python 3.14 support

You can now set CC_PYTHON_VERSION=3.14, default version is still 3.13. We’ll move to 3.14 in the coming weeks.

Mise 2026.2

Latest branch of Mise includes many changes such as Node.js version detection from package.json, hooks overhaul or Shell-style variable expansion in env values. You can benefit from them with this release.

Learn more about latest versions of Mise

Fixes

This release includes:

A fix for Mise Tasks management in Linux Runtime
A fix for CC_NODE_BUILD_TOOL=yarn-berry

Keycloak 26.5.3 (security update)

Tue, 10 Feb 2026 00:00:00 +0000

The release 26.5.3 of Keycloak is available on Clever Cloud. It fixes bugs, reduces memory consumption during startup and addresses four security vulnerabilities: CVE-2026-1609, CVE-2026-1529, CVE-2026-1486 and CVE-2025-14778.

You can update through the add-on’s dashboard in the Clever Cloud Console. You can also set CC_KEYCLOAK_VERSION of the underlying Java application to 26.5.3 and rebuild it, or use Clever Tools:

clever features enable operators

clever keycloak version check yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId 26.5.3

Learn more about Keycloak on Clever Cloud

Materia KV supports Set value type

Thu, 05 Feb 2026 00:00:00 +0000

Materia KV now supports multiple commands to create and manage sets. You don’t have anything to change in your configuration to benefit from this new feature, just use the new supported commands in your applications.

Matomo 5.7 is available

Wed, 04 Feb 2026 00:00:00 +0000

The Matomo add-on on Clever Cloud has been updated to version 5.7.1, which is now used by default. The 5.7 branch focuses on stability, performance, usability and security.

You can deploy this release from the Clever Cloud Console or Clever Tools. Existing customers’ add-ons are already up-to-date.

Images update: Bun 1.3.8, OAuth2 Proxy 7.14, more PHP 8.5 extensions

Tue, 03 Feb 2026 00:00:00 +0000

We updated all our images. Deployment is in progress for all our users.

Common:
- OAuth2 Proxy 7.14.2
- Otoroshictl 0.0.15
- Tailscale 1.94.1
.NET:
- Update to 6.0.136
Docker:
- Docker Buildx 0.31.1
Java:
- Update to 11.0.30_p7
- Update to 17.0.18_p8
- Update to 21.0.10_p7
- Update to 25.0.2_p10
- Gradle 9.3.1
Node.js & Bun:
- Bun 1.3.8
PHP:
- Composer 2.9.5
- mcrypt extension 1.0.9
- PDFlib extension 11.0.0
- solr extension 2.9.1
- xdebug extension 3.5.0
Python:
- uv 0.9.28

Docker Buildx

As previously announced, Docker Buildx is now the default build system for Docker applications. You can switch back to the legacy build system by setting the CC_DOCKER_BUILDX environment variable to false.

Otoroshi 17.12 is available with JWT Verification, new WAF engine and plugin improvements

Fri, 30 Jan 2026 00:00:00 +0000

Otoroshi v17.12 is available with multiple improvements. It brings JWT verification support based on the settings of an OIDC authentication module with optional user session extraction through OIDCJwtVerifier. The release also allows Fail2Ban to be triggered by other plugins that can’t use the requestError phase.

This version also integrates a new WAF engine providing JVM-native implementation of ModSecurity SecLang with the OWASP Core Rule Set included. This eliminates binary dependencies and simplifies deployment in containerized environments, with flexible modes for comprehensive WAF inspection or lightweight request validation.

For plugin developers, this version introduces various internal improvements: Monaco editor support in classic forms for enhanced code editing experience, provider helpers to create customizable errors in plugins, and the ability to always display plugins even if missing from the JS plugins list.

This release includes LLM extensions 0.0.68 and 0.0.69, bringing OpenResponses-compatible endpoints for standardized LLM response handling through the OpenResponses framework. These versions embed rate limit and budget consumption data in GatewayEvents and LLMAuditEvents for enhanced tracking, and support exposing any model with an Anthropic API compatible format.

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_OTOROSHI_VERSION of the underlying Java application to v17.12.0_1769783775 and rebuild it, or use Clever Tools:

clever features enable operators

clever otoroshi version check yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId v17.12.0_1769783775

Learn more about Otoroshi with LLM on Clever Cloud

Images update: Docker 29.2, Gradle 9.3, Rust 1.93 and more runtimes with Request Flow

Wed, 28 Jan 2026 00:00:00 +0000

We updated all our images. Deployment is in progress for all our users.

Common:
- Clever Tools 4.5.3
- qpdf 12.3.2
- Mise 2026.1.8
Docker:
- Update to 29.2.0
- Docker Buildx 0.31.0
Elixir:
- Erlang 28.3.1
Go:
- Update to 1.25.6
Java:
- Gradle 8.14.4
- Gradle 9.3.0
- Maven 3.9.12
Node.js & Bun:
- Bun 1.3.7
PHP:
- Update to 8.3.30
- Update to 8.4.17
- Update to 8.5.2
- Composer 2.9.4
Python:
- uv 0.9.26
Ruby:
- Update to 3.2.10
Rust:
- Update to 1.93.0

Request Flow expansion

Request Flow is now available in .NET, Elixir, Haskell and Rust applications. We plan its expansion to more runtimes in the coming weeks in three releases:

Go and Node.js/Bun
Java and PHP
Python and Ruby

This feature is still in its testing phase, feel free to test it and give us feedback.

Changes in applications custom metrics retention

Tue, 27 Jan 2026 00:00:00 +0000

Starting February 2nd, 2026, the retention period for custom application metrics will be 7 days. This change only affects metrics that you expose from your applications through the statsd protocol or Prometheus endpoints.

System metrics remain unaffected by this change. All automatically collected metrics, including CPU usage, RAM consumption, disk usage, network activity, and load metrics, will continue to be available with the existing retention period.

Terraform provider 1.9.0

Fri, 23 Jan 2026 00:00:00 +0000

The 1.9.0 release of the Clever Cloud Terraform provider is available. It brings bug fixes, Java JAR support, app-to-app dependencies, more integrations and backup datasource for PostgreSQL.

Learn more about Clever Cloud Terraform provider

Images update: PHP 8.5, Composer 2.9, Ruby 4.0, V (Vlang) 0.5

Thu, 15 Jan 2026 00:00:00 +0000

We updated all our images. Deployment is in progress for all our users.

Common:
- Linux kernel 6.17.13
- cURL 8.18.0
- NGINX 1.28.1
- OAuth2 Proxy 7.13.0
- Otoroshictl 0.0.13
- Poppler 26.01.0
- Tailscale 1.92.4
Docker:
- Update to 29.1.4
Elixir:
- Update to 1.19.5
- Erlang 28.3
Node.js:
- Update to 24.13.0 (npm 11.6.2)
- Bun 1.3.6
PHP:
- Update to 8.1.34
- Update to 8.2.30
- Update to 8.3.29
- Update to 8.4.16
- Update to 8.5.1
- Composer 2.9.2
- Symfony CLI 5.16.1
- Blackfire extension 1.92.51
- gRPC extension 1.76.0
- Imagick extension 3.8.1
- Maxmind DB extension 1.13.0
- New Relic extension 12.2.0.27
- Protobuf extension 3.23.4, 3.25.8 and 4.33.2
- Redis extension 6.3.0
- Tideways extension 5.31.0 (Daemon 1.11.4)
- YAML extension 2.3.0
Python:
- uv 0.9.24
Ruby:
- Update to 3.4.8
- Update to 4.0.1
V (Vlang):
- Update to 0.5

PHP 8.5 and Composer 2.9

PHP 8.5 is now available. To use it, set CC_PHP_VERSION=8.5 as PHP 8.4 release is still the default version. We’ll move to PHP 8.5 as the default version in April 2026. PHP 8.1 is now considered as end-of-life.

Supported extensions for PHP 8.5 are: amqp, apcu, blackfire, event, excimer, gnupg, grpc, imagick, imap, mailparse, maxminddb, memcached, oauth, opentelemetry, pdo_sqlsrv, protobuf, pspell, rdkafka, redis, sqlsrv, ssh2, tideways, uploadprogress, yaml, zip.

Composer 2.9 introduces a new default behavior: it automatically blocks updates to packages with known security advisories. As mentioned by developers, “it prevents you from accidentally updating to vulnerable package versions. You can configure this behavior via the new audit.block-insecure config settings if needed.”

Learn more about Composer Audit configuration settings

Hugo default version update

In next release, we will update the default Hugo version to 0.152 and only keep 0.150and superior as available versions. If you need an older version, use Mise to set hugo or hugo-extended version in mise.toml file.

Clever Tools 4.5 is available

Wed, 14 Jan 2026 00:00:00 +0000

Clever Tools 4.5.1 is available, with everything from 4.5.0 plus a bug fix for Arch Linux users. This release is a big step forward in our CLI redesign, with major changes under the hood to the way commands are structured and implemented.

Learn more about Clever Tools file structure rework in our ADR

Better help our users

From a user perspective, this release mainly brings clearer --help outputs:

It also allows us to automatically generate reference documentation during the release process with an LLM-ready version.

Pave the way for future improvements

These changes were an essential building block for the next major step: redesigning the Clever Tools commands and options. An effort that will be carried out gradually over the coming months.

How to upgrade

To upgrade Clever Tools, use your favorite package manager. For example with npm:

npm update -g clever-tools
clever version

Metabase 58 is available with Documents and Guest Embeds

Tue, 13 Jan 2026 00:00:00 +0000

The x.58 branch of Metabase is now available on Clever Cloud. It brings multiple improvements and bug fixes, Modular Embedding, Guest Embeds, but also Documents. They let you blend charts and metrics with narrative text using Markdown or a rich text editor. Collaborate with comments, mentions, and emoji reactions—like a Notion doc meets Metabase, or a lightweight Jupyter notebook.

To update, set CC_METABASE_VERSION of the add-on’s Java application to 0.58 for the community edition or 1.58 for the enterprise edition (EE). This new branch is the default if you use community-latest.

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_METABASE_VERSION of the underlying Java application to 0.58 or 1.58 for the enterprise edition (EE) and rebuild it, or use Clever Tools:

clever features enable operators

clever metabase version check yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId 0.58

Keycloak 26.5 is available with CORS enhancements, logout confirmation, workflows

Thu, 08 Jan 2026 00:00:00 +0000

The release 26.5.1 of Keycloak is available on Clever Cloud. It brings bug fixes and new features from the 26.5.0 release:

CORS enhancements
Logout confirmation page
Organization invitation management
Enhanced HTTP performance (preview)
Hiding OpenID Connect scopes from the discovery endpoint
Workflows (preview) to automate administrative tasks and processes within a realm
OpenTelemetry support for metrics and logging, combining all observability information in this popular standard
JWT Authorization Grants (preview), the recommended alternative to external to internal token exchange (RFC 7523)

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_KEYCLOAK_VERSION of the underlying Java application to 26.5.1 and rebuild it, or use Clever Tools:

clever features enable operators

clever keycloak version check yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId 26.5.1

Otoroshi 17.11 is available with new Data Exporters, OpenFGA Authorizations, Websocket Mirroring

Mon, 05 Jan 2026 00:00:00 +0000

Otoroshi v17.11 is available with multiple improvements and bug fixes. It brings Datadog and New Relic data exporters, fine-grained authorizations through OpenFGA API, a plugin to mirror websocket traffic to another target, workflow support for websocket message transformations and 3 new load balancing strategies: HeaderHash, CookieHash and QueryHash.

This release comes with LLM extension 0.0.67 which supports Cloud Temple as new provider, Nano Banana as Image model provider and Azure OpenAI as embedding model provider.

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_OTOROSHI_VERSION of the underlying Java application to v17.11.0_1767272929 and rebuild it, or use Clever Tools:

clever features enable operators

clever otoroshi version check yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId v17.11.0_1767272929

Learn more about Otoroshi with LLM on Clever Cloud

Kubernetes 1.35 is available

Tue, 23 Dec 2025 00:00:00 +0000

We updated Kubernetes to release 1.35.0. It brings bug fixes, in-place update of Pod resources, numeric values for taints, OCI images mounted as volumes and is the last to support cgroup v1. Kubernetes 1.35.0 is available for new deployments. Migration of existing clusters will be available soon.

Set Metabase domain at creation

Tue, 23 Dec 2025 00:00:00 +0000

When you deploy a Metabase add-on on Clever Cloud, you can access its web interface through a <random_chars>-metabase.services.clever-cloud.com domain. You can now set a custom domain at creation through the access-domain option in Clever Tools:

clever addon create metabase yourMetabaseNameOrId --option access-domain=metabase.example.com

This domain DNS configuration needs to point to Clever Cloud’s servers. For example, if the Metabase add-on is deployed in the par (Paris) region, you need to create a CNAME record pointing to domain.par.clever-cloud.com..

Learn more about Metabase on Clever Cloud

Elasticsearch 9 is available

Mon, 22 Dec 2025 00:00:00 +0000

We updated Elasticsearch Platinum to release 9.2.1 which brings multiple fixes, features and enhancements. It’s available for add-ons creation and will be used as default starting January 2026.

If you need to migrate an existing add-on to this version, contact Clever Cloud support. If you use Elasticsearch 7 or 8, you can migrate them to releases 7.17.29 and 8.19.7 respectively.

Learn more about Elasticsearch on Clever Cloud

Terraform provider 1.8.0

Fri, 19 Dec 2025 00:00:00 +0000

The 1.8.0 release of the Clever Cloud Terraform provider is available. It brings bug fixes, clevercloud_database_query action, upload action for FS Buckets, exposed environment variables for applications and more Clever Cloud’s Keycloak features.

Learn more about Clever Cloud Terraform provider

Redis 8.4 is available

Thu, 18 Dec 2025 00:00:00 +0000

We updated Redis™ to release 8.4.0. It brings bug fixes, performance optimizations, and new commands. Redis™ 8.4.0 is available for new add-ons. Those already deployed can upgrade through migration.

Learn more about Redis™ on Clever Cloud

Images update: Docker 29, Elixir clean up, Static Web Server for llms.txt

Wed, 17 Dec 2025 00:00:00 +0000

We updated all our images except FrankenPHP and PHP. Deployment is in progress for all our users.

Common:
- Linux kernel 6.17.12
- Anubis 1.23.1
- Clever Tools 4.4.1
- Git 2.52.0
- Mise 2025.12.1
- Nano 8.7
- Poppler 25.12.0
- Postgresql-client 18.1
- Redis 8.4
- Rust 1.92.0
- Tailscale 1.90.9
- Tmux 3.6
Docker:
- Docker 29.0.2
- Docker Buildx 0.30.1
Elixir:
- Update to 1.19.4
- Erlang 26.2.5.16
- Erlang 27.3.4.6
- Erlang 28.2
Go:
- Update to 1.25.5
Node.js:
- Update to 24.11.1 (npm 11.6.1)
- Bun 1.3.4
- Yarn 4.12.0
Python:
- Update to 3.9.25
- Update to 3.12.0
- Update to 3.13.11
- uv 0.9.17
Ruby:
- Update to 3.3.10
- Update to 3.4.7
Static:
- Static Web Server 2.40.1

Elixir support

Starting with this release, we don’t support end-of-life Elixir versions from 1.8 to 1.13 anymore. They were no longer used by our customers. Thus, we also removed Erlang versions from 22 to 24.

Static Web Server for llms.txt

Static Web Server 2.40.1 includes a new feature we contributed to, allowing to serve Markdown version of a web page when it exists and the request contains the Accept: text/markdown header. This is useful to serve documentation to LLMs following the llms.txt proposal. It can be combined with Hugo transform.HTMLToMarkdown function for example, as we do on this documentation.

To enable this feature, just set SERVER_ACCEPT_MARKDOWN environment variable to true in your Static Web Server application.

Environment variable checking

Starting with this release, if an invalid environment variable name or value is set in your application, deployment will fail with an error message. You can set CC_TROUBLESHOOT=true to get more details.

Learn more about Environment variable sanity checking

Pulsar is now generally available

Mon, 15 Dec 2025 00:00:00 +0000

Apache Pulsar is out of Beta on Clever Cloud. It doesn’t change anything for existing add-ons as we consider it stable for some months, except for billing:

In the January invoice (for December usage), you’ll see your Pulsar consumption, still free
Pulsar will be a paid service starting January 1, 2026

New Apache Pulsar pricing

Monthly prices will be as follows:

Traffic IN/OUT	Price per GB
< 512 MB	Free
512 MB - 100 GB	€0.800
100 GB - 500 GB	€0.500
500 GB - 5 TB	€0.400
> 5 TB	€0.300

Hot Storage (SSD)	Price per GB
< 256 MB	Free
256 MB - 50 GB	€0.200
50 GB - 250 GB	€0.150
250 GB - 1 TB	€0.120
> 1 TB	€0.100

Cold Storage (HDD)	Price per GB
All volumes	€0.015

In the coming weeks, we will update the Pulsar dashboard and product page to reflect these changes.

Learn more about Apache Pulsar on Clever Cloud

Set Matomo domain at creation

Fri, 12 Dec 2025 00:00:00 +0000

When you deploy a Matomo add-on on Clever Cloud, you can access its web interface through a <random_chars>-matomo.services.clever-cloud.com domain. You can now set a custom domain at creation through the access-domain option in Clever Tools:

clever addon create addon-matomo yourMatomoNameOrId --option access-domain=matomo.example.com

This domain DNS configuration needs to point to Clever Cloud’s servers. For example, if the Matomo add-on is deployed in the par (Paris) region, you need to create a CNAME record pointing to domain.par.clever-cloud.com..

Otoroshi 17.10 is available with updated MCP support, a plugin to detect and block React2Shell attacks

Tue, 09 Dec 2025 00:00:00 +0000

Otoroshi v17.10 is available with multiple improvements, bug fixes and a new plugin to detect and block React2Shell attacks. To use it, add the React2Shell detector plugin to your routes and activate blocking if needed.

This release comes with LLM extension 0.6.6 which supports latest versions of Model Context Protocol (MCP) with official Streamable HTTP transport implementation. MCP Connectors can now be used in Workflows.

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_OTOROSHI_VERSION of the underlying Java application to v17.10.0_1765204068 and rebuild it, or use Clever Tools:

clever features enable operators

clever otoroshi version check yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId v17.10.0_1765204068

Learn more about Otoroshi with LLM on Clever Cloud

Set Keycloak domain at creation

Thu, 04 Dec 2025 00:00:00 +0000

When you deploy a Keycloak add-on on Clever Cloud, you can access its web interface through a <random_chars>-keycloak.services.clever-cloud.com domain. You can now set a custom domain at creation through the access-domain option in Clever Tools:

clever addon create keycloak yourKeycloakNameOrId --option access-domain=keycloak.example.com

This domain DNS configuration needs to point to Clever Cloud’s servers. For example, if the Keycloak add-on is deployed in the par (Paris) region, you need to create a CNAME record pointing to domain.par.clever-cloud.com..

Matomo 5.6 is available with AI Agent plugin and per-website privacy settings

Wed, 03 Dec 2025 00:00:00 +0000

Our Matomo add-on has been updated to version 5.6.1 which is now used by default. It includes improvements, bug fixes, and adds a plugin to detect AI Agents. To use it, activate it in plugins administration parameters. Privacy settings can now be configured independently for each website.

You can deploy this release from our Console or Clever Tools. Existing customers’ add-ons are already up-to-date.

Otoroshi 17.9 is available with new plugins: Swagger UI, llms.txt Accept Markdown

Wed, 03 Dec 2025 00:00:00 +0000

Otoroshi v17.9 is available with multiple improvements and bug fixes and two new plugins we’ve contributed to:

LLMs.txt Accept Markdown: proxies requests with Accept: text/markdown header according to llms.txt proposal
Swagger UI: serves a Swagger UI page from a configurable OpenAPI specification URL

Release 17.9.2 brings routes templates and a fix to reduce excessive CPU usage. You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_OTOROSHI_VERSION of the underlying Java application to v17.9.2_1764753761 and rebuild it, or use Clever Tools:

clever features enable operators

clever otoroshi version check yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId v17.9.2_1764753761

Learn more about Otoroshi with LLM on Clever Cloud

Metabase 57 is now used by default

Mon, 01 Dec 2025 00:00:00 +0000

The x.57 branch of Metabase is available on Clever Cloud since last month. It’s now the default branch deployed with the release 0.57.4. It means that:

All new add-ons will use it
All add-ons using default configuration (community-latest) will use it after a rebuild

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_METABASE_VERSION of the underlying Java application to 0.57 or 1.57 for the enterprise edition (EE) and rebuild it, or use Clever Tools:

clever features enable operators

clever metabase version check yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId
clever metabase version update yourMetabaseNameOrId 0.57

Terraform provider 1.7.0

Mon, 01 Dec 2025 00:00:00 +0000

The 1.7.0 release of the Clever Cloud Terraform provider is available. It brings bug fixes, reboot action for applications and encryption at rest for PostgreSQL databases.

Learn more about Clever Cloud Terraform provider

Set Otoroshi admin and routes domains at creation

Fri, 28 Nov 2025 00:00:00 +0000

When you deploy an Otoroshi add-on on Clever Cloud, you can access its web interface through a <random_chars>-otoroshi.services.clever-cloud.com domain. When you create a new route, it starts with a app-id.cleverapps.io. You can now set custom domains at creation through the access-domain and routes-domain options in Clever Tools:

clever addon create otoroshi myOtoroshiName --option access-domain=otoroshi.example.com --option routes-domain=routes.example.com

These domains’ DNS configuration needs to point to Clever Cloud’s servers. For example, if the Otoroshi add-on is deployed in the par (Paris) region, you need to create CNAME records pointing to domain.par.clever-cloud.com..

Keycloak 26.4.6 is available (security release)

Wed, 26 Nov 2025 00:00:00 +0000

The release 26.4.6 of Keycloak is available on Clever Cloud. It brings multiple enhancements and a security fix for CVE-2025-13467. It adds filtering of LDAP referrals by default to align with best practices for LDAP configurations.

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_KEYCLOAK_VERSION of the underlying Java application to 26.4.6 and rebuild it, or use Clever Tools:

clever features enable operators

clever keycloak version check yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId
clever keycloak version update yourKeycloakNameOrId 26.4.6

Terraform provider 1.6.0

Wed, 19 Nov 2025 00:00:00 +0000

The 1.6.0 release of the Clever Cloud Terraform provider is available. It brings bug fixes and allows to disable Network Groups.

Learn more about Clever Cloud Terraform provider

Terraform provider 1.5.0

Mon, 17 Nov 2025 00:00:00 +0000

The 1.5.0 release of the Clever Cloud Terraform provider is available. It brings bug fixes, support for Network Groups, GitHub applications from public or private repositories, migration of PostgreSQL databases.

Learn more about Clever Cloud Terraform provider

Otoroshi 17.8.1: LLM Bots Blocker, HTTP Security Headers and Time Restriction plugins

Fri, 14 Nov 2025 00:00:00 +0000

Otoroshi v17.8.1 is available with multiple improvements and bug fixes. It brings two new plugins to inject common HTTP security headers (HSTS, CSP, XFO, X-XSS-Protection, X-Content-Type-Options) on responses or restrict when a route is accessible (days range, time range): HTTP Security Headers and Time Restriction.

It comes with LLM extension 0.6.0 which includes a new LLM Bots Blocker plugin to block requests from known LLM bots (like ChatGPT, Bard, etc.) using a proof-of-work (PoW) challenge mechanism.

You can update through add-on’s dashboard in the Clever Cloud Console. You can also set CC_OTOROSHI_VERSION of the underlying Java application to v17.8.1_1763110173 and rebuild it, or use Clever Tools:

clever features enable operators

clever otoroshi version check yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId
clever otoroshi version update yourOtoroshiNameOrId v17.8.1_1763110173

Learn more about Otoroshi with LLM on Clever Cloud

Clever Tools 4.4 is available

Thu, 13 Nov 2025 00:00:00 +0000

Clever Tools 4.4.0 is available. In this release, the drain command uses API v4 with more reliable behavior and information about your logs drains. The otoroshi command comes with a new get-config subcommand to retrieve an Otoroshi configuration in YAML format, used by otoroshictl. Thus, you can now easily add a Clever Cloud Otoroshi instance to your otoroshictl configuration and manage it with a CLI tool:

# Install otoroshictl with Rust's Cargo and enable operators/otoroshi command in Clever Tools:
cargo install otoroshictl
clever features enable operators

clever otoroshi get-config <otoroshi_id_or_name> | otoroshictl config import --current --stdin
otoroshictl resources get routes

How to upgrade

To upgrade Clever Tools, use your favorite package manager. For example with npm:

npm update -g clever-tools
clever version