LoginSign Up
← Back to all sparks
D

Dapr

DEVOPS
Velocity6.3

Portable event-driven runtime for building distributed applications

dapr.io ↗

Dapr 1.19 ships cross-app workflows, an MCP server and 40% faster workflow throughput.

distributed runtimeworkflowsai agentsmcpsecurity
◆Current state
Dapr 1.19 reached GA on Oct 22 after seven release candidates. It raises workflow throughput by up to 40%, lets one app control workflows owned by another under access policies, and adds alpha Binary Store, Search and Vector building blocks plus a Dapr MCP server. In the same week, 1.16 through 1.18 received patches for an Operator scoping leak, compromised eMudhra intermediates and Redis Entra ID token expiry.
◆Where it's heading
Dapr is pushing workflows to the centre of the runtime: faster engines, cross-app control and policy rules that gate scheduling on upstream events. New building blocks for files, search and vectors, along with the MCP server, point at AI-agent and data-heavy workloads. Several older lines are still patched in parallel, especially for security.
◆Prediction
Expect 1.19.x patches soon, given the behaviour changes flagged in SDKs, and more components for the alpha Search and Vector blocks beyond Meilisearch.

◆Recent moves

  1. 6d ago

    Dapr 1.19: cross-app workflows, MCP server, faster runtime

    ⚡ SPARK

    After seven candidates, 1.19 GA lands the workflow focus of this cycle: up to 40% more throughput, cross-app workflow control under access policies, and detached workflows. It also opens new ground with alpha storage, search and vector building blocks and an MCP server.

    View source ↗
  2. 7d ago

    Dapr 1.19.0-rc.7: final candidate, two backports

    The seventh and final candidate adds two backports: Operator scope enforcement and a lighter path for wake-ups on completed workflows.

    View source ↗
  3. 7d ago

    Dapr 1.17.18: Operator scope-leak fix backported

    1.17.18 carries the Operator scoping fix to the 1.17 line, which returned other apps' HTTPEndpoints with secrets resolved to plaintext.

    View source ↗
  4. 7d ago

    Dapr 1.18.9: Operator no longer leaks other apps' secrets

    1.18.9 fixes Operator APIs that ignored app scopes and resolved Kubernetes secrets for HTTPEndpoints and MCPServers owned by other apps. Any workload with a Dapr identity in the namespace could read them, so Kubernetes users should upgrade.

    View source ↗
  5. 7d ago

    Dapr 1.19.0-rc.6: actor timeout status and CI fixes

    The sixth 1.19 candidate returns DeadlineExceeded for timed-out actor calls and fixes test flakes.

    View source ↗
  6. 8d ago

    Dapr 1.17.17: Redis Entra ID expiry and eMudhra trust fixed

    1.17.17 fixes Redis components that broke permanently once their Entra ID token expired and stops trusting the compromised eMudhra intermediates. Both affect production Azure deployments on the older line.

    View source ↗