Skip to main content

v3.19.0

Maintenance
Released Jan 20, 2026·Supported until Oct 20, 2026·Community 1.19.0·Enterprise 0.22.0
Breaking
None
Security
Clean
Changes
2F · 6B
Downtime
Zero

Upgrade Impact

2 features · 6 fixes
Non-breaking:no breaking changes. Drop-in upgrade from v3.18.x.
Improved rate-limiter accuracyToken-bucket algorithm replaced with sliding-window. No configuration changes needed.

What Changed

8
New Feature
Bug Fixes
Fixed API key rotation not invalidating cached tokensRotated API keys now immediately propagate to the gateway's in-memory cache.
Resolved memory spike during concurrent dataset importsImport workers now share a bounded buffer pool to cap peak memory usage.
Corrected model cost calculation for streaming responsesPrompt tokens are no longer double-counted when the response is streamed.
Fixed audit log missing entries for batch operationsBulk delete and bulk archive actions now emit individual audit events per resource.
Resolved intermittent 504 on long-running workflow nodesThe gateway timeout is now set per-node based on declared maxDuration instead of a global default.
Fixed incorrect token count display for vision model inputsImage tokens are now included in the conversation token counter.

Upgrade Guide

Pre-Upgrade Checklist
Verify current version is v3.18.x (direct upgrade path supported)
Back up PostgreSQL database and Redis data
Confirm Kubernetes cluster has sufficient resources for rolling update
Zero-downtime rolling upgrade supported
Upgrade Command

# Back up database first, then:

$ helm upgrade -i dify -f values.yaml dify-ee/dify --version 3.19.0

Rollback

$ helm rollback dify 0

Security & CVE

Full CVE report →
No security vulnerabilities fixed in this release.0 Critical · 0 High CVE across all container images
Image
dify-enterprise-api
dify-enterprise-gateway
dify-enterprise-frontend
dify-enterprise-backend
dify-enterprise-worker
critical
0
0
0
0
0
high
0
0
0
0
0
medium
0
0
0
0
0
low
0
0
0
0
0
Status
PASS
PASS
PASS
PASS
PASS
ScannerTrivy v0.58.0
Scanned
Jan 20, 2026
Data Source
Docker

Benchmark Report

Full CVE report →
TTFE – Time To First Event (ms)
AVG
0
MIN
0
MAX
0
P50
0
P90
0
P95
0
Connections
Max Concurrent
0
Avg Active
0
Empty Workflow QPS
Max QPS
0
Avg QPS
0
Avg Duration (ms)
0

License Compliance

All dependencies compliant- no copyleft issues detected
MITApache-2.0BSD
© 2026 Dify All rights reserved.Enterprise release information is confidential. Do not distribute externally.