Tyk Pump Release Notes

Release notes documenting updates, enhancements and changes for Tyk Pump versions within the 1.11.X series.

Open Source (Mozilla Public License)

This page contains all release notes for Pump displayed in a reverse chronological order

Support Lifetime

Our minor releases are supported until our next minor comes out.

---

1.12 Release Notes

1.12.1 Release Notes

Release Date 18 August 2025

Release Highlights

This release improves log reliability in the Syslog Pump by ensuring that raw request and response data are no longer fragmented into multiple entries. Logs are now consolidated into a single entry per API request, making analysis easier while preserving compatibility with existing log parsers.

For a comprehensive list of changes, please refer to the detailed changelog below.

Breaking Changes

This release has no breaking changes

Dependencies

3rd Party Dependencies & Tools

Third Party Dependency	Tested Versions	Compatible Versions	Comments
MongoDB	5.x, 6.x, and 7.0	4.4.x, 5.x, 6.x, and 7.0	Used by Tyk Pump and Tyk Dashboard
PostgreSQL	13.x - 17.x	13.x - 17.x	Used by Tyk Pump and Tyk Dashboard
Redis	6.x - 7.0	6.x - 7.x	Used by all Tyk components

Given the time difference between your upgrade and the release of this version, we recommend customers verify the ongoing support of third-party dependencies they install, as their status may have changed since the release.

Deprecations

There are no deprecations in this release.

Upgrade instructions

For users currently on v1.12.0, we strongly recommend promptly upgrading to the latest release. If you are working with an older version (lower major), it is advisable to bypass version 1.12.0 and proceed directly to this latest patch release.

Go to the Upgrading Tyk section for detailed upgrade Instructions.

Downloads

• Docker Image v1.12.1
  • docker pull tykio/tyk-pump-docker-pub:v1.12.1
    

• Source code tarball for OSS - GH Tyk Pump Repo

Changelog

Fixed

• Show Consolidated Syslog Log Entries

  Resolved an issue in the Syslog Pump where enabling Decode Raw Request and Decode Raw Response caused log entries to fragment into multiple messages due to unescaped newline characters. The fix ensures a single consolidated log entry by escaping newlines (\n) in raw request and response fields, maintaining backward compatibility with existing log parsers.

1.12.0 Release Notes

Release Date 28 March 2025

Release Highlights

This release enhances Pump’s database compatibility and security by adding support for PostgreSQL 17, removing SQLite support, and addressing critical security vulnerabilities (CVEs). These improvements ensure better performance, long-term stability, and overall enhanced security.

For a comprehensive list of changes, please refer to the detailed changelog below.

Breaking Changes

This release removes support for SQLite in Pump, aligning with the broader removal of SQLite from the Tyk Dashboard. This change improves compatibility with enterprise environments and addresses implementation issues related to SQLite.

Dependencies

3rd Party Dependencies & Tools

With PostgreSQL v11 reaching EOL in November 2023, we can no longer guarantee full compatibility with this version of the database. If you are using PostgreSQL we recommend that you upgrade to a version that we have tested with, as indicated below.

Third Party Dependency	Tested Versions	Compatible Versions	Comments
MongoDB	5.x, 6.x, and 7.0	4.4.x, 5.x, 6.x, and 7.0	Used by Tyk Pump and Tyk Dashboard
PostgreSQL	13.x - 17.x	13.x - 17.x	Used by Tyk Pump and Tyk Dashboard
Redis	6.x - 7.0	6.x - 7.x	Used by all Tyk components

Given the time difference between your upgrade and the release of this version, we recommend customers verify the ongoing support of third-party dependencies they install, as their status may have changed since the release.

Deprecations

There are no deprecations in this release.

Upgrade instructions

For users currently on v1.11.0, we strongly recommend promptly upgrading to the latest release. If you are working with an older version (lower major), it is advisable to bypass version 1.11.0 and proceed directly to this latest patch release.

Go to the Upgrading Tyk section for detailed upgrade Instructions.

Downloads

• Docker Image v1.12.0
  • docker pull tykio/tyk-pump-docker-pub:v1.12.0
    

• Source code tarball for OSS - GH Tyk Pump Repo

Changelog

Changed

• Show Support for PostgreSQL 17

  Pump now supports PostgreSQL 17, ensuring compatibility with the latest database version.

• Show Removal of SQLite Support in Pump

  SQLite support has been fully removed from Pump.

Security Fixes

• Show Fixed the following CVE

  • GHSA-v778-237x

---

1.11 Release Notes

1.11.2 Release Notes

Release Date 10 January 2025

Release Highlights

This patch release focuses on improving the robustness of SQL-Pump in scenarios involving table sharding and analytics data, ensuring smoother operations and better compatibility with PostgreSQL-based environments.

Breaking Changes

This release has no breaking changes.

Dependencies

3rd Party Dependencies & Tools

With PostgreSQL v11 reaching EOL in November 2023, we can no longer guarantee full compatibility with this version of the database. If you are using PostgreSQL we recommend that you upgrade to a version that we have tested with, as indicated below.

Third Party Dependency	Tested Versions	Compatible Versions	Comments
MongoDB	5.x, 6.x, and 7.0	4.4.x, 5.x, 6.x, and 7.0	Used by Tyk Pump and Tyk Dashboard
PostgreSQL	12.x - 16.x	12.x - 16.x	Used by Tyk Pump and Tyk Dashboard
Redis	6.x - 7.0	6.x - 7.x	Used by all Tyk components

Given the time difference between your upgrade and the release of this version, we recommend customers verify the ongoing support of third-party dependencies they install, as their status may have changed since the release.

Deprecations

There are no deprecations in this release.

Upgrade instructions

For users currently on v1.11.0, we strongly recommend promptly upgrading to the latest release. If you are working with an older version (lower major), it is advisable to bypass version 1.11.0 and proceed directly to this latest patch release.

Go to the Upgrading Tyk section for detailed upgrade Instructions.

Downloads

• Docker Image v1.11.2
  • docker pull tykio/tyk-pump-docker-pub:v1.11.2
    

• Source code tarball for OSS - GH Tyk Pump Repo

Changelog

Fixed

• Show SQL-Pump Crashes When `tablesharding=true` and Analytics Are Skipped for Certain APIs

  The issue causing a runtime error when writing analytics data for skipped APIs has been addressed. SQL-Pump now processes these scenarios gracefully, ensuring stability in table-sharded configurations.

• Show Indices Not Created in Sharded `tyk_analytics` Tables if Indices with Same Names Exist in Earlier Tables

  Fixed the index creation logic to ensure indices are generated correctly for all sharded tables, regardless of whether indices with the same names exist in earlier tables. This ensures proper query performance and data integrity in environments with table sharding.

---

1.11.1 Release Notes

Release Date 04 December 2024

Release Highlights

This patch release focuses on critical dependency updates to address security vulnerabilities and maintain compatibility with the latest tools. Users are encouraged to upgrade to benefit from enhanced security and improved stability.

Breaking Changes

This release has no breaking changes.

Dependencies

3rd Party Dependencies & Tools

With PostgreSQL v11 reaching EOL in November 2023, we can no longer guarantee full compatibility with this version of the database. If you are using PostgreSQL we recommend that you upgrade to a version that we have tested with, as indicated below.

Third Party Dependency	Tested Versions	Compatible Versions	Comments
MongoDB	5.x, 6.x, and 7.0	4.4.x, 5.x, 6.x, and 7.0	Used by Tyk Dashboard
PostgreSQL	12.x - 16.x	12.x - 16.x	Used by Tyk Dashboard
Redis	6.x - 7.0	6.x - 7.x	Used by all Tyk components

Given the time difference between your upgrade and the release of this version, we recommend customers verify the ongoing support of third-party dependencies they install, as their status may have changed since the release.

Deprecations

There are no deprecations in this release.

Upgrade instructions

For users currently on v1.11.0, we strongly recommend promptly upgrading to the latest release. If you are working with an older version (lower major), it is advisable to bypass version 1.11.0 and proceed directly to this latest patch release.

Go to the Upgrading Tyk section for detailed upgrade Instructions.

Downloads

• Docker Image v1.11.1
  • docker pull tykio/tyk-pump-docker-pub:v1.11.1
    

• Source code tarball for OSS - GH Tyk Pump Repo

Changelog

Changed

• Show Upgraded Golang to v1.22.7

  Updated to the Go v1.22.7 to leverage its performance improvements, bug fixes, and security patches.

Security Fixes

• Fixed the following CVEs:
  • GHSA-7jwh-3vrq-q3m8
  • GHSA-mrww-27vc-gghv
  • GO-2024-2611

---

1.11.0 Release Notes

Release Date 13 August 2024

Breaking Changes

This release has no breaking changes.

Dependencies

3rd Party Dependencies & Tools

With PostgreSQL v11 reaching EOL in November 2023, we can no longer guarantee full compatibility with this version of the database. If you are using PostgreSQL we recommend that you upgrade to a version that we have tested with, as indicated below.

Third Party Dependency	Tested Versions	Compatible Versions	Comments
GoLang	1.19, 1.20, 1.21	1.19, 1.20, 1.21	All our binaries
MongoDB	5.x, 6.x, and 7.0	4.4.x, 5.x, 6.x, and 7.0	Used by Tyk Dashboard
PostgreSQL	12.x - 16.x	12.x - 16.x	Used by Tyk Dashboard
Redis	6.x - 7.0	6.x - 7.x	Used by all Tyk components

Given the time difference between your upgrade and the release of this version, we recommend customers verify the ongoing support of third-party dependencies they install, as their status may have changed since the release.

Deprecations

There are no deprecations in this release.

Upgrade instructions

For users currently on v1.10.X, we strongly recommend promptly upgrading to the latest release. If you are working with an older version, it is advisable to bypass version 1.10 and proceed directly to this latest release.

Release Highlights

Security fixes

This release focuses on improving security and compliance, enhancing integration capabilities, and ensuring robust performance in secure environments.

Downloads

• Docker Image v1.11.0
• docker pull tykio/tyk-pump-docker-pub:v1.11.0
  

• Source code tarball for OSS - GH Tyk Pump Repo

Changelog

Added

• Show Add Kinesis backend support

  Tyk Pump now supports Kinesis as a backend to push analytics to a data lake efficiently.

---

1.10 Release Notes

Release Date 3 July 2024

Breaking Changes

This release has no breaking changes.

Dependencies

3rd Party Dependencies & Tools

With PostgreSQL v11 reaching EOL in November 2023, we can no longer guarantee full compatibility with this version of the database. If you are using PostgreSQL we recommend that you upgrade to a version that we have tested with, as indicated below.

Third Party Dependency	Tested Versions	Compatible Versions	Comments
GoLang	1.19, 1.20, 1.21	1.19, 1.20, 1.21	All our binaries
MongoDB	5.x, 6.x, and 7.0	4.4.x, 5.x, 6.x, and 7.0	Used by Tyk Dashboard
PostgreSQL	12.x - 16.x	12.x - 16.x	Used by Tyk Dashboard
Redis	6.x - 7.0	6.x - 7.x	Used by all Tyk components

Given the time difference between your upgrade and the release of this version, we recommend customers verify the ongoing support of third-party dependencies they install, as their status may have changed since the release.

Deprecations

There are no deprecations in this release.

Upgrade instructions

For users currently on v1.9.X, we strongly recommend promptly upgrading to the latest release. If you are working with an older version, it is advisable to bypass version 1.9 and proceed directly to this latest release.

Release Highlights

FIPS Compliance

Tyk Pump now offers FIPS 140-2 compliance. For further details please consult Tyk API Management FIPS support

Security fixes

This release focuses on improving security and compliance, enhancing integration capabilities, and ensuring robust performance in secure environments.

Downloads

• Docker Image v1.10.0
• docker pull tykio/tyk-pump-docker-pub:v1.10.0
  

• Source code tarball for OSS - GH Tyk Pump Repo

Changelog

Added

• Show Added FIPS compliance

  Added FIPS compliance for Tyk Pump.

Fixed

• Show Fixed Tyk Pump Splunk Integration using http_proxy and https_proxy Environment Variables

  Resolved an issue where http_proxy and https_proxy environment variables were not being respected in the Tyk Pump pod for Splunk connections.

Security Fixes

• Show Fixed the following CVEs

  • PRISMA-2021-0108
  • PRISMA-2023-0056
  • CVE-2024-27304
  • CVE-2023-45288

---

1.9 Release Notes

Release Date 5 Apr 2024

Breaking Changes

Attention: Please read this section carefully

MongoDB v4.4 will reach its end of life support at the end of February 2024. In order to support newer versions of MongoDB and align with newer versions of Tyk, we have changed the default MongoDB driver from mgo to mongo-go. The mongo-go driver supports MongoDB versions greater or equal to v4. If you are using a version of MongoDB less than v4, please follow this guide to update the driver type to mgo.

Users are strongly advised to follow the recommended upgrade instructions provided by Tyk before applying any updates.

Dependencies

3rd Party Dependencies & Tools

Third Party Dependency	Tested Versions	Compatible Versions	Comments
GoLang	1.19, 1.20, 1.21	1.19, 1.20, 1.21	All our binaries
MongoDB	5.x, 6.x, and 7.0	4.4.x, 5.x, 6.x, and 7.0	Used by Tyk Dashboard
PostgreSQL	11.x - 15.x LTS	11.x - 15.x	Used by Tyk Dashboard
Redis	6.x - 7.0	6.x - 7.x	Used by all Tyk components

Given the time difference between your upgrade and the release of this version, we recommend customers verify the ongoing support of third-party dependencies they install, as their status may have changed since the release.

Deprecations

There are no deprecations in this release.

Upgrade instructions

For users currently on v1.8.X, we strongly recommend promptly upgrading to the latest release. If you are working with an older version, it is advisable to bypass version 1.8 and proceed directly to this latest release.

Release Highlights

Redis 7 and storage library

Tyk Pump now supports Redis v7, utilizing our storage library v1.2.0.

MongoDB Driver

As of v1.9, the default MongoDB driver has been changed from mgo to mongo-go.

AWS Simple Queue Service Support

Thanks to a community contribution by masoudhaghbin, Tyk Pump can now pump logs to an AWS SQS instance.

Tyk Graph Pump

There has been a significant enhancement in Tyk Graph Pump with the removal of the dependency on the enable_detailed_recording setting. This change is designed to streamline operations, reduce storage requirements and enhance overall performance in production environments. By decoupling detailed recording from specific configuration options, Tyk Graph Pump now provides greater flexibility and control over data storage.

Downloads

• Docker Image v1.9.0
• docker pull tykio/tyk-pump-docker-pub:v1.9.0
  

• Source code tarball for OSS - GH Tyk Pump Repo

Changelog

Added

• Show Redis 7 Support

  Tyk Pump now support Redis v7 utilizing our storage library v1.2.0.

• Show Added AWS Simple Queue Service pump support

  Pump can now send logs to an Amazon SQS instance. This was a community contribution co-authored by masoudhaghbin. Please follow this guide to set up an SQS pump.

Changed

• Show Updated Go version to v1.21

  Tyk Pump now uses Go v1.21

• Show Resurface Pump Updated

  The Resurface Pump has been updated with the following improvements.

  • Upgrade logger-go dependency to version 3.3.1, which includes improvements in goroutine management, as well as a new Stop method for graceful shutdown.
  • Add support for async data writing, by adding a bounded channel to buffer data records and process them concurrently in the background.
  • Add Shutdown method for graceful shutdown of ResurfacePump backend.

  Thanks to community member Ramón Márquez for updating this pump.

Fixed

• Added backoff retry mechanism for Splunk Pump

  Tyk Pump now has an expontential backoff retry mechanism for sending logs to Splunk. This mechanism mitigates the chance of losing logs if Pump should fail to send logs to Splunk. This fixes a bug where Splunk responses were not being checked correctly and fixes a bug where Pump was not closing connections after receiving responses.

  Added a field so that GraphQL aggregated analytics will display correctly for SQL databases

  For SQL databases, the GraphQL aggregated analytics record will now have a new api_value field so that analytics will be shown in the Dashboard correctly.

  Environment variables TYK_PMP_PUMPS_AGGREGATE_* now correctly correspond to definitions in pump.conf

  Fixed a bug where any TYK_PMP_PUMPS_AGGREGATE_* environment variables didn’t correctly correspond to definitions in the pump.conf file.

  Added an api_id field so that GraphQL aggregated analytics will display correctly

  For SQL databases, the GraphQL aggregated analytics record will now have a new api_id field so that analytics will be shown in the Dashboard correctly.

  Fixed a bug where Tyk Pump could not connect to Redis Sentinel when TLS is enabled

  Fixed a bug causing Tyk Pump not to connect when Redis Sentinel was deployed using TLS.

Security Fixes

• Show Fixed the following CVEs

  • CVE-2022-39325
  • CVE-2022-3978

Community Contributions

Special thanks to the following members of the Tyk community for their contributions to this release:

• Show Added Simple Queue Service pump support

  Pump can now send logs to an Amazon SQS instance. Thanks to masoudhaghbin for creating this pump. Please follow this guide to set up an SQS pump.

• Show Resurface Pump Updated

  The Resurface Pump has been updated with the following improvements.

  • Upgrade logger-go dependency to version 3.3.1, which includes improvements in goroutine management, as well as a new Stop method for graceful shutdown.
  • Add support for async data writing, by adding a bounded channel to buffer data records and process them concurrently in the background.
  • Add Shutdown method for graceful shutdown of ResurfacePump backend.

  Thanks to community member Ramón Márquez for updating this pump.

---

1.8 Release Notes

1.8.3 Release Notes

Changelog

Fixed

• Corrected configuration for pumps.kafka.meta.timeout to be interpreted as the number of seconds (Type: int) instead of a duration requiring a unit (Type: Duration).
• Fixed an issue where Graph SQL Pump couldn’t restart correctly when analytics storage table name was changed in Pump config. Some relations were not torn down and migrated correctly.

1.8.2 Release Notes

Changelog

Fixed

• Resolved performance issue where SQL Aggregate analytics failed to load on the Dashboard during heavy traffic by introducing a new index on the sql_aggregate Pump called idx_dimension.
• Fixed Prometheus Pump crashes on non UTF-8 URLs by updating to prometheus-client v1.16.
• Fixed MongoDB connection string issues related to certain characters (”?” and ”@”), recommending URL-encoded values in usernames and passwords. This ensures compatibility with both mgo and mongo-go drivers.
• Fixed security vulnerabilities: CVE-2022-36640, CVE-2022-21698, GO-2022-0322 and GHSA-cg3q-j54f-5p7p.

Added

• Add track_all_paths configuration for Prometheus Pump. If enabled, all APIs will have path in the tyk_http_status_per_path metric. Otherwise, only endpoint that have “track” plugin set with have path shown in the metric. Endpoints without “track” plugin set will have “unknown” path shown in the metric.

Updated

• Improved security by obfuscating Mongo Pump credentials in log outputs.

1.8.1 Release Notes

Notes on MongoDB v5 and v6 compatibility

For MongoDB v5 and v6 users, please set mongo driver type to mongo-go.

From pump v1.8.1, the default MongoDB driver it uses is mgo. This is to align with the default MongoDB driver of other Tyk components. This driver supports MongoDB versions up to v4. If you are using a later version of MongoDB v5 or MongoDB v6, please follow this guide to update the driver type to mongo-go.

Changelog

Fixed

• GraphQL analytics records were being excluded from the tyk_analytics collection for Mongo Pump. This has been fixed so that GraphQL analytic records are now included as expected.
• Fixed MongoDB connection issue when using a password with URL escape characters (with mongo-go driver)
• Fixed an issue in Prometheus pump when filtering fields , e.g. API Name, that contain -- in their value. For example, test--name. Prometheus Pump filtered the field as two separate instances, e.g. test & name, instead of the expected test--name.
• When omit_configfile is set to true, Pump will not try to load the config file and spit out error logs

Updated

• Updated the default Hybrid Pump RPC pool size from 20 to 5 connections in order to reduce default CPU and memory footprint. See Pump configurations
• Import and use latest storage library v1.0.5
• Updated default MongoDB driver to mgo. Follow this guide to update the driver type
• Pump name is now case-insensitive. It will override two or more pumps with the same name but in different cases (e.g. Mongo / mongo)

1.8.0 Release Notes

Release date: 2023-05-04

Major features

Pump 1.8 introduces two new pumps: The GraphQL SQL Aggregate Pump - which allows you to transfer GraphQL transaction logs to SQL; and Resurface Pump - which allows you to transfer data to Resurface.io for context based security analysis.

We have changed the default MongoDB driver from mgo to mongo-go. The new driver supports MongoDB versions greater or equal to v4. If you are using older version of MongoDB v3.x, please follow this guide to update the driver type.

We have also added a config option that allow you to decode the raw requests and responses for all pumps so you don’t need to worry about processing them in your data pipeline. For demo mode, there is now an option to generate future data for your convenience.

In this release, we are using a new Tyk storage library to connect to Mongo DB. This would allow us to switch to use the official Mongo Driver very easily in the future.

Notes on MongoDB v3.x compatibility

In 1.8.0, the default MongoDB driver it use is mongo-go. This driver supports MongoDB versions greater or equal to v4. If you are using older version of MongoDB v3.x, please follow this guide to update the driver type.

Changelog

Added

• Added GraphQL SQL Aggregate Pump.
• Added Resurface Pump - Resurface can provide context-based security analysis for attack and failure triage, root cause, threat and risk identification based on detailed API logs sent from Tyk Pump.
• Add config option raw_request_decoded and raw_response_decoded for decoding from base64 the raw requests/responses fields before writing to Pump. This is useful if you want to search for specific values in the raw request/response. Both are disabled by default. This setting is not available for Mongo and SQL pumps, since the dashboard will decode the raw request/response.
• Add the ability to generate future data in demo mode using —demo-future-data flag.
• Remove critical CVE go.uuid vulnerability
• Use the latest Tyk storage library to connect to Mongo
• Hybrid Pump refactoring - we now have better RPC connection control, testability, and documentation

Fixed

• Std pump does not log accurate time when set to json format
• GraphPump doesn’t include names of queries/mutation and subscriptions called
• Mongo Pump’s connection hangs forever if misconfigured

Further Information

Upgrading Tyk

Please refer to the upgrading Tyk page for further guidance on the upgrade strategy.

FAQ

Please visit our Developer Support page for further information relating to reporting bugs, upgrading Tyk, technical support and how to contribute.