[TT-12238] docs: Tyk 5.8.14 release notes

developer-support/release-notes/dashboard.mdx

@@ -659,9 +659,8 @@ Please note that the Tyk Helm Charts are configured to install the LTS version o
 
 <AccordionGroup>
 
-<Accordion title='CVE fixed'>
-Addressed CVEs reported in dependent libraries, providing increased protection against security
-vulnerabilities, including, but not limited to:
+<Accordion title='Fix CVEs'>
+We have addressed CVEs reported in dependent libraries, providing increased protection against security vulnerabilities, including, but not limited to:
 
 - <a href="https://nvd.nist.gov/vuln/detail/CVE-2025-15467" target="_blank">CVE-2025-15467</a>
 - <a href="https://nvd.nist.gov/vuln/detail/CVE-2025-69419" target="_blank">CVE-2025-69419</a>
@@ -1660,6 +1659,132 @@ Fixed an issue where the `/apis/streams/{apiID}` endpoint was expecting a `Conte
 
 ## 5.8 Release Notes
 
+### 5.8.14 Release Notes 
+
+#### Release Date 20 May 2026
+
+#### Release Highlights
+
+This patch release contains various bug fixes and addresses some vulnerabilities in 3rd party libraries, providing improved performance and security enhancements.
+
+For a comprehensive list of changes, please refer to the detailed [changelog](#Changelog-v5.8.14) below.
+
+#### Breaking Changes
+
+There are no breaking changes in this release.
+
+#### Dependencies
+<a id="dependencies-5.8.14"></a>
+
+##### Compatibility Matrix For Tyk Components
+
+| Gateway Version | Recommended Releases | Backwards Compatibility |
+| :---- | :---- | :---- |
+| 5.8.14   | MDCB v2.11.0     | MDCB v2.11.0 |
+|         | Operator v1.4.0 | Operator v0.17 |
+|         | Sync v2.1.8     | Sync v2.1.1 |
+|         | Helm Chart v5.2.0 | Helm all versions |
+|         | EDP v1.17.2     | EDP all versions |
+|         | Pump v1.15.0    | Pump all versions |
+|         | TIB (if using standalone) v1.7.1 | TIB all versions |
+
+##### 3rd Party Dependencies & Tools
+
+| Third Party Dependency                                       | Tested Versions        | Compatible Versions    | Comments | 
+| :------------------------------------------------------------ | :---------------------- | :---------------------- | :-------- | 
+| [Golang](https://go.dev/dl/)                                     | 1.25  |  1.25  | [Go plugins](/api-management/plugins/golang) must be built using Go 1.25 | 
+| [Redis](https://redis.io/download/)  | 6.2.x, 7.x  | 6.2.x, 7.x  | Used by Tyk Gateway | 
+| [MongoDB](https://www.mongodb.com/try/download/community)  | 5.0.x, 6.0.x, 7.0.x  | 5.0.x, 6.0.x, 7.0.x  | | 
+| [DocumentDB](https://aws.amazon.com/documentdb/)  | 4, 5  | 4, 5  | | 
+| [PostgreSQL](https://www.postgresql.org/download/)         | 13.x - 17.x        | 13.x - 17.x            | | 
+| [OpenAPI Specification](https://spec.openapis.org/oas/v3.0.3)| v3.0.x                 | v3.0.x                 | Supported by [Tyk OAS](/api-management/gateway-config-tyk-oas) |
+
+Given the potential time difference between your upgrade and the release of this version, we recommend users verify the ongoing support of third-party dependencies they install, as their status may have changed since the release.
+
+#### Deprecations
+
+There are no deprecations in this release.
+
+#### Upgrade instructions
+<a id="upgrade-5.8.14"></a>
+
+If you are upgrading to 5.8.14, please follow the detailed [upgrade instructions](#upgrading-tyk).
+
+#### Downloads
+
+- [Docker Image to pull](https://hub.docker.com/r/tykio/tyk-dashboard/tags?page=&page_size=&ordering=&name=v5.8.14)
+  - ```bash
+    docker pull tykio/tyk-dashboard:v5.8.14
+    ```
+- Helm charts
+  - [tyk-charts v5.2.0](/developer-support/release-notes/helm-chart#5-2-0-release-notes)
+
+#### Changelog
+<a id="Changelog-v5.8.14" data-scroll-offset></a>
+
+##### Fixed
+
+<AccordionGroup>
+
+<Accordion title='Fix JavaScript Regex Unicode Escape Sequence Handling During OpenAPI Import'>
+We have resolved an issue where JavaScript-style Unicode regex patterns in OpenAPI documents failed validation during API import.
+
+Previously, when regex patterns containing Unicode escape sequences (for example `\u0000-\u017f`) were defined with single quotes in YAML, the YAML-to-JSON conversion process would double-escape the backslashes, transforming valid `\u` sequences into invalid `\\u` sequences that were rejected by Tyk's regex validator.
+
+The system now automatically translates these escape sequences during API ingestion, ensuring that OpenAPI documents with JavaScript regex patterns import successfully regardless of whether single or double quotes are used in the YAML definition.
+</Accordion>
+
+<Accordion title='Fix Dashboard Certificate Filter for APIs'>
+We have resolved an issue where the Dashboard's "Filter by API" feature on the TLS/SSL Certificates page did not return all certificates linked to an API.
+
+Previously, the filter only displayed certificates used for client-to-gateway mTLS, ignoring certificates used for gateway-to-upstream mTLS, custom domain certificates, and certificate pinning. This resulted in incomplete and misleading results for users trying to view all certificates actively used by a given API.
+
+The Dashboard now correctly returns all certificates when filtering by API.
+</Accordion>
+
+<Accordion title='Fix API Expiry Date Drift'>
+We have resolved an issue where an API's expiry date could drift back by one day each time the API was saved in the API Designer. This was reported by users in positive UTC timezones (such as UTC+8). Saving an API without changing the expiry is now fully idempotent, and the expiry date remains stable across repeated saves regardless of the user's timezone.
+</Accordion>
+
+<Accordion title='Resolve Gateway Registration Failures at Scale on Unlimited Node Licenses'>
+We have resolved a set of related issues affecting Gateway registration with the Dashboard at scale for deployments using an **unlimited node license**. During mass registrations or rolling upgrades, a combination of lock contention, excessive Redis load, and incorrect handling of `409 Conflict` responses could leave Gateways stuck in registration loops without the credentials needed to serve traffic.
+
+Gateway registration is now significantly more robust at scale: registration requests are no longer serialized across the fleet, Gateways recover cleanly from transient `409 Conflict` responses instead of looping, and the Redis load generated during registration storms is substantially reduced.
+
+A dedicated fix for **limited node license** deployments will be provided in an upcoming release.
+</Accordion>
+
+</AccordionGroup>
+
+##### Security Fixes
+
+<AccordionGroup>
+
+<Accordion title='CVE fixed'>
+Addressed CVEs reported in dependent libraries, providing increased protection against security
+vulnerabilities, including, but not limited to:
+
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-33762" target="_blank">CVE-2026-33762</a>
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-1229" target="_blank">CVE-2026-1229</a>
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-33532" target="_blank">CVE-2026-33532</a>
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-2950" target="_blank">CVE-2026-2950</a>
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2025-13465" target="_blank">CVE-2025-13465</a>
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2025-15599" target="_blank">CVE-2025-15599</a>
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-39882" target="_blank">CVE-2026-39882</a>
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-34165" target="_blank">CVE-2026-34165</a>
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-33671" target="_blank">CVE-2026-33671</a>
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-4800" target="_blank">CVE-2026-4800</a>
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-39883" target="_blank">CVE-2026-39883</a>
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-33487" target="_blank">CVE-2026-33487</a>
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2025-62718" target="_blank">CVE-2025-62718</a>
+- <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-40175" target="_blank">CVE-2026-40175</a>
+
+</Accordion>
+
+</AccordionGroup>
+
+---
+
 ### 5.8.13 Release Notes
 
 #### Release Date 22 April 2026
@@ -1692,7 +1817,7 @@ There are no breaking changes in this release
 
 | Third Party Dependency                                       | Tested Versions        | Compatible Versions    | Comments | 
 | :------------------------------------------------------------ | :---------------------- | :---------------------- | :-------- | 
-| [Go](https://go.dev/dl/)                                     | 1.25  |  1.25  | [Go plugins](/api-management/plugins/golang) must be built using Go 1.25 | 
+| [Golang](https://go.dev/dl/)                                     | 1.25  |  1.25  | [Go plugins](/api-management/plugins/golang) must be built using Go 1.25 | 
 | [Redis](https://redis.io/download/)  | 6.2.x, 7.x  | 6.2.x, 7.x  | | 
 | [MongoDB](https://www.mongodb.com/try/download/community)  | 5.0.x, 6.0.x, 7.0.x  | 5.0.x, 6.0.x, 7.0.x  | | 
 | [DocumentDB](https://aws.amazon.com/documentdb/)  | 4, 5  | 4, 5  | | 
@@ -1757,6 +1882,7 @@ vulnerabilities, including, but not limited to:
 </AccordionGroup>
 
 
+---
 
 ### 5.8.12 Release Notes