# Automatic security patches, redeploys after credential regeneration — retained record

> Retained news record from news:ml-railway-changelog.

Canonical: https://highsignal.app/data/records/81c397ea0a80e6ed

[← sources](https://highsignal.app/data)


source: [news](https://highsignal.app/data/news) (news:ml-railway-changelog)  published 2026-10-30 15:08 ingested 2026-10-31 02:57

[original source ↗](https://railway.com/changelog/2026-10-30-automatic-security-updates)

## retained text



```
This week's updates focus on applying security fixes and keeping services connected after credential changes.
Automatic security patches
Railway can now automatically patch services and functions affected by known security vulnerabilities (CVEs), redeploying them with the updated image. You no longer need to update and redeploy each affected service manually.
Workspace admins receive an in-app notification and an email after the update is applied, with details of the image change. You can also review the upgrade in your project's activity feed.
Redeploys after credential regeneration
Update credentials and watch services connected through variable references redeploy automatically
When you regenerate a database password or bucket credentials in the dashboard, Railway automatically redeploys services that reference those credentials through Railway variables. This includes connection strings such as DATABASE_URL that reference the updated password.
Previously, you needed to redeploy these services separately. Connected services now use their existing deployments with the updated credentials, without deploying newer commits from their branches.
Automatic redeploys apply to services connected through Railway variable references. If you entered credentials directly, you’ll need to update them manually.
```



document fetched 2026-10-31 02:57