Skip to content

fix: pin ClickHouse to patched 26.3 LTS release - #26

Merged
dustinhealy merged 1 commit into
mainfrom
fix/clickhouse-security-release
Oct 30, 2026
Merged

dustinhealy merged 1 commit into
mainfrom
fix/clickhouse-security-release

Conversation

@dustinhealy

@dustinhealy dustinhealy commented Oct 30, 2026 •

Copy link
Copy Markdown
Contributor

Summary

The self-hosted stack uses ClickHouse 25.12 for Langfuse storage and the local ClickHouse MCP server. Pin it to the security-patched 26.3.62.3 LTS build and update the existing smoke-test image assertion.

Validation

  • Docker Hub manifest resolves for clickhouse/clickhouse-server:26.3.62.3.
  • Compose rendering and git diff --check pass.
  • Full-stack PR smoke test passed.
  • E2E suite on merged main passed: 9 tests covering LibreChat, MCP chat queries, Langfuse observations, feedback scores, and the Admin Panel.
  • Isolated local ClickHouse, MCP, Langfuse web/worker, and dependencies became healthy. A real MCP SQL tool call returned 26.3.62.3; authenticated Langfuse Observations API v2 returned HTTP 200.

@dustinhealy
dustinhealy merged commit 8da0a6b into main Oct 30, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant