Skip to content

Release 2.6.2

Choose a tag to compare

View all tags
@cdcavell cdcavell released this 22 Aug 12:39
· 91 commits to main since this release
v2.6.2
4561f3a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Summary

NetCoreApplicationTemplate 2.6.2 is a backward-compatible security patch release focused on the production container runtime.

This release updates the pinned ASP.NET Core .NET 10 runtime image to the patched .NET 10.0.11 servicing image after the 2.6.1 release container vulnerability gate detected CVE-2026-62901.

Security Fix

  • Updated the pinned mcr.microsoft.com/dotnet/aspnet:10.0 runtime image digest to the patched .NET 10.0.11 servicing image.
  • Addresses CVE-2026-62901 detected by the release-triggered Trivy HIGH/CRITICAL vulnerability threshold.
  • Preserves immutable digest pinning for the final production runtime image.

Release Metadata

  • Updated project, assembly, file, and template package versions to 2.6.2.
  • Updated NuGet package release notes.
  • Updated CITATION.cff and .zenodo.json.
  • Updated README and package installation examples.
  • Updated template-packaging documentation.
  • Updated the Kubernetes deployment example to use:
    ghcr.io/asibackbone/netcoreapplicationtemplate:2.6.2.

Compatibility

This release does not intentionally change:

  • Public APIs.
  • Template options or identities.
  • Configuration surface.
  • Generated scaffold structure.
  • Package identity.
  • Middleware or application architecture.
  • Intended application behavior.

The public NuGet package remains:

NetCoreApplicationTemplate

The template short name remains:

netcoreapp-template

Install

dotnet new install NetCoreApplicationTemplate::2.6.2

Generate a project:

dotnet new netcoreapp-template -n ContosoSecurityPortal

Container Image

ghcr.io/asibackbone/netcoreapplicationtemplate:2.6.2

Release Classification

Semantic Version: Patch

This release is a targeted security maintenance update correcting the container runtime image used for distribution while preserving the established NetCoreApplicationTemplate 2.x consumer contract.

Assets 5
Loading