Sigrid On-Premise: Release Notes

This documentation covers on-premise Sigrid. It is not applicable for cloud-based Sigrid.

This page lists Sigrid release notes that are noteworthy for on-premise deployments, either because they are specific to on-premise or because they require additional steps beyond the standard update.

A new Helm chart is released with every Sigrid release. Most updates only require updating the Sigrid and Sigrid-Multi-Analyzer container images. This page highlights changes that require additional attention, such as:

• New or changed Helm configuration options
• Infrastructure or dependency changes
• Breaking changes affecting installation or upgrades
• Fixes or features specific to on-premise deployments

For a complete overview of all Sigrid changes, refer to the general release notes.

The Helm chart is published under the name sigrid-stack.

Release 1.0.20260529

Fixed: Sigrid Multi-Analyzer now respects analyzer enabled/disabled flags in sigrid.yaml. DependencyChecker properly receives scope settings for blocklist enforcement.

Actions: Update the Sigrid Helm chart, Sigrid deployment images, and Sigrid-Multi-Analyzer image. No configuration changes required.

Release 1.0.20260518

Fixed: Fixed console errors caused by missing Matomo analytics stub in on-premises deployments without a Matomo instance.

Note: This fix is transparent to existing deployments. A new Helm value nginx.config.fragment.location.matomo is available for on-prem deployments that want to configure their own Matomo instance.

Actions: Update the Sigrid Helm chart, Sigrid deployment images, and Sigrid-Multi-Analyzer image. No configuration changes required unless want to make use of Matomo.

Release 1.0.20260512

Updated: The LDAP group sync integration now removes Sigrid users that are no longer present in LDAP by default. See the on-premise documentation for more information.

Note: This behavior is controlled by the new --remove-users flag, which is now enabled by default alongside --override-groups. It can be disabled by overriding the args list in the Helm configuration values.

Actions: Update the Sigrid Helm chart, Sigrid deployment images, and Sigrid-Multi-Analyzer image. Review the default args if you want to opt out of automatic user removal.

Release 1.0.20260421 - BREAKING CHANGE

From now on, we’re aligning the version number of Helm chart releases with container image tags. So both now follow a unified, date-based versioning scheme. All future releases use the format 1.0.YYYYMMDD, aligned with the Sigrid container release versioning.

Change: Sigrid-Multi-Analyzer no longer connects directly to S3-compatible object storage. This simplifies the pipeline job but requires updates to the Helm configuration.

Fixed: Configuration values from global.onPremise only needed for Job pods are no longer passed to the API pods. During upgrading, this may show a diff as the unnecessary configuration values will be removed from ConfigMaps used by the API pods. Specifically, ecrRepository, oshKbUpdater, ldapGroupSync and postgresInit will disappear from those ConfigMaps, if those keys were already configured under global.onPremise.

Breaking: This change requires Sigrid and Sigrid-Multi-Analyzer version 1.0.20260421 or later and requires the actions below.

Actions: Update the Sigrid Helm chart, Sigrid deployment images, and Sigrid-Multi-Analyzer image before deploying.

1. Update Sigrid Helm chart to version 1.0.20260421, or greater.
2. Update Helm configuration.
   • For the expected configuration, see Kubernetes deployment.
   • Remove deprecated configuration from Helm values: inbound-api.config.importJob.objectStoreSecret.
   • Update global.imageTag or image.tag for individual services.
3. Clean up pipeline job configuration.
   • Update $SIGRID_VERSION.
   • Remove all legacy object store settings from the Sigrid pipeline job, including:
     • BUCKET
     • AWS_FORCE_PATH_STYLE
     • AWS_REGION
     • AWS_ACCESS_KEY_ID
     • AWS_SECRET_ACCESS_KEY
     • AWS_CA_BUNDLE

Release 0.4.14

Added: Database initialization for on-premise Sigrid can now also be performed automatically. If you are interested in using this feature, please refer to the feature page.

Note: This feature requires Sigrid and Sigrid-Multi-Analyzer version 1.0.20260309 or later; newer versions can be used, but the feature won’t work on earlier releases.

Actions: Update the Sigrid Helm chart, Sigrid deployment images, and Sigrid-Multi-Analyzer image. Update the Helm configuration to enable this new feature.

Release 0.4.13 - BREAKING CHANGE

Change: Newly onboarded systems now automatically grant access to the uploader. Previously, access had to be granted manually. After updating the Helm chart and container images, this step is handled automatically.

Breaking: This Helm chart version is required to deploy Sigrid and Sigrid-Multi-Analyzer 1.0.20260225 or later. Helm chart and container versions must always be released together.

Actions: Update the Sigrid Helm chart, Sigrid deployment images, and Sigrid-Multi-Analyzer image. For required configuration changes, see these instructions.

Release 0.4.12

Updated: LDAP group synchronization now allows the group membership attribute to be configured. If you are interested in using this feature, please refer to the feature page.

Note: This enhancement requires Sigrid and Sigrid-Multi-Analyzer version 1.0.20260224 or later; newer versions can be used, but the feature won’t work on earlier releases.

Actions: Update the Sigrid Helm chart, Sigrid deployment images, and Sigrid-Multi-Analyzer image. Update the Helm configuration to enable this feature.

Release 0.4.11

Added: On-premise Sigrid now supports automatic LDAP group synchronization. See the on-premise documentation for more information.

Note: This feature requires Sigrid and Sigrid-Multi-Analyzer version 1.0.20260223 or later; newer versions can be used, but the feature won’t work on earlier releases.

Actions: Update the Sigrid Helm chart, Sigrid deployment images, and Sigrid-Multi-Analyzer image. Update the Helm configuration to enable this new feature.

Release 0.4.10

Added: Open Source Health is now available in on-premise Sigrid. See the on-premise instructions for how to set this up.

Note: This feature requires Sigrid and Sigrid-Multi-Analyzer version 1.0.20251222 or later; newer versions can be used, but the feature won’t work on earlier releases. For an overview of OSH capabilities, see the system features page. End users are recommended to also read the on-premise OSH analysis guide.

Actions: Update the Sigrid Helm chart, Sigrid deployment images, and Sigrid-Multi-Analyzer image. Update the Helm configuration to enable this feature. For required configuration changes, see the OSH knowledge base updater instructions.

Contact and support

Feel free to contact SIG’s support team for any questions or issues you may have after reading this documentation or when using Sigrid.