---
title: "Automatic security patches, redeploys after credential regeneration"
date: 2026-10-30T15:08:00.000Z
number: 0314
url: https://railway.com/changelog/2026-10-30-automatic-security-updates
---

# Automatic security patches, redeploys after credential regeneration

This week's updates focus on applying security fixes and keeping services connected after credential changes.

# Automatic security patches

![Automatic security updates appear in your project's activity feed](https://cms.railway.com/media/dc3f0e72-8168-4db4-82aa-7da33d9731a8-CleanShot-2026-10-27-at-10.05.12-PM-2x.png)

Railway can now automatically patch services and functions affected by known security vulnerabilities (CVEs), redeploying them with the updated image. You no longer need to update and redeploy each affected service manually.

Workspace admins receive an in-app notification and an email after the update is applied, with details of the image change. You can also review the upgrade in your project's activity feed.

# Redeploys after credential regeneration

[Update credentials and watch services connected through variable references redeploy automatically](https://cms.railway.com/media/90c72356-1d4c-40ec-8b6d-c303b6dafc25-credential-rotation.mp4)

When you regenerate a database password or bucket credentials in the dashboard, Railway automatically redeploys services that reference those credentials through Railway variables. This includes connection strings such as `DATABASE_URL` that reference the updated password.

Previously, you needed to redeploy these services separately. Connected services now use their existing deployments with the updated credentials, without deploying newer commits from their branches.

Automatic redeploys apply to services connected through Railway variable references. If you entered credentials directly, you’ll need to update them manually.