Skip to content

v1.8.4

Latest
Latest

Choose a tag to compare

View all tags
@release-please release-please released this 22 Oct 23:29
v1.8.4
59e5ff6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

1.8.4 (2026-10-22)

Bug Fixes

  • update dependencies, distroless base image, and default proxy to v2.26.3 (#806) (92f5e01)

Security / CVE Fixes

Updates gcr.io/distroless/static:nonroot container base image digests to remove distrusted emSign ECC Root CA - G3 and AAA Certificate Services root certificates (ca-certificates), bumps the default Cloud SQL Auth Proxy image to v2.26.3, and updates dependencies:

Advisory CVE Description Affected Component Fixed Version
GO-2026-6809 CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509 and container OS root CA bundle (ca-certificates) gcr.io/distroless/static:nonroot, default proxy image distroless@d620678, cloud-sql-proxy:2.26.3
GO-2026-6617 CVE-2026-78659 Multiple HTTP/2 and networking vulnerabilities in golang.org/x/net golang.org/x/net v0.61.0
Assets 2
Loading