Palau

Release Date:  25 June 2026

Code Freeze:  01 June 2026

Namer: Rodney Hess (Beechwoods Software)

The Palau release is EdgeX version 4.0.2. It is compatible with previous V4.0 versions so migration and adoption will be straightforward. As a 4.0.2, this is a patch release on the existing Odesa LTS release. EdgeX 4.0’s Long Term Support (LTS) coverage continues until March 2027.

Release Theme:

Bug fix and CVE patch release, including optional performance enhancements (these need to be explicitly enabled) and parity updates for the two Device Service SDKs

• Palau provides key CVE patches that have emerged in our third party components and includes other critical bug fixes

• Palau adds optional internal performance optimizations as data flows within the EdgeX

• Palua adds parity between the C and Go Device Service SDKs, ensuring that all device services have consistent behavior

New Features

• Performance optimization to reduce payload for device events by removing some fields

  • An optional and non-breaking change has been enabled by use of the EDGEX_OPTIMIZE_EVENT_PAYLOAD environment variable that will remove some fields from the event payload

  • See new documentation here: Optimize Event Payload - EdgeX Foundry Documentation

• Performance optimization to reduce payload for device events by encoding the payload via the use of CBOR (Concise Binary Object Representation) rather than JSON

  • An optional and non-breaking change has been enabled by use of the EDGEX_MSG_CBOR_ENCODE environment variable

  • See new documentation here: Encode Message with CBOR - EdgeX Foundry Documentation

• Device SDK Alignment - ensuring parity between C and Go Device Services (adding behavior that was available in one but not the other)

  • Predefined provision watchers now auto-uploaded C #556

  • Mask and shift transformations applied to incoming data Go #1703

  • AutoEvent OnChangeThreshold for numeric events C #568

  • Resource, command, and device tags in to reading/event C #569

  • Reading units mechanism C #572

• Security Threat Model updated to match capabilities of EdgeX version 4

  • See updated documentation here: https://docs.edgexfoundry.org/4.0.2/threat-models/stride-model/EdgeX-STRIDE/

Additional Features/updates/project improvements or changes

• CVE fixes by updating versions of the go runtime, paho, OpenBao, Alpine Base and BusyBox

  • See summary here:

    

  • See for full details of scanning and recommendations

• Flags to override existing device entities with local device files in both Go and C (overwriteDevices and overwriteProfiles options)

Known Bugs

• The Device SDK C and C Device Services don't support URI for files features:

  • https://github.com/edgexfoundry/device-sdk-c/issues/459

  • https://github.com/edgexfoundry/device-sdk-c/issues/460

  • https://github.com/edgexfoundry/device-sdk-c/issues/461

Test Reports

The reports are for x86 and arm64, and include secure and non-secure modes

Open

Performance Metrics

As per Odesa - see here: Odesa Data

Changelogs

Core, Supporting and Security Services Changelog

Go Device Service SDK Changelog

C Device Service SDK Changelog

Go App Functions SDK Changelog

Python App Functions SDK Changelog

App Service Configurable Changelog

Device Services:

• BACnet Device Service Changelog

• CoAP Device Service Changelog

• Modbus Device Service Changelog

• MQTT Device Service Changelog

• ONVIF Device Service Changelog

• REST Device Service Changelog

• RFID LLRP Device Service Changelog

• SNMP Device Service Changelog

• USB Camera Device Service Changelog

• Virtual Device Service Changelog

EdgeX User Interface Changelog