Skip to content

v1.20.41

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Jul 03:11
· 17 commits to main since this release
v1.20.41
71da4f8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

📦 Uncategorized

  • pass amazon trace id as service id - ( PR: #138 )
  • [CI Pipeline] Released Patch version: 1.16.3 - ( PR: #139 )
  • get service_id environment variable and pass it to operator as a header - ( PR: #140 )
  • [CI Pipeline] Released Patch version: 1.16.5 - ( PR: #141 )
  • instance_id rather than service_id - ( PR: #142 )
  • [CI Pipeline] Released Patch version: 1.16.7 - ( PR: #143 )
  • no random suffix on instance id - ( PR: #144 )
  • [CI Pipeline] Released Patch version: 1.16.10 - ( PR: #145 )
  • [CI Pipeline] Released Patch version: 1.16.10 - ( PR: #146 )
  • Update header casing - ( PR: #147 )
  • [CI Pipeline] Released Patch version: 1.16.13 - ( PR: #148 )
  • new logging framework, log trace-ids - ( PR: #149 )
  • [CI Pipeline] Released Minor version: 1.17.0 - ( PR: #150 )
  • update scan vulnerability file usage - ( PR: #151 )
  • fix cve form data - ( PR: #152 )
  • Upgrade Axios - ( PR: #153 )
  • slim down logging - ( PR: #154 )
  • [CI Pipeline] Released Minor version: 1.18.0 - ( PR: #155 )
  • add healthcheck logging back for alarming - ( PR: #156 )
  • [CI Pipeline] Released Patch version: 1.18.2 - ( PR: #157 )
  • changes to github workflows for trivy scan - ( PR: #158 )
  • enrich request to operator - ( PR: #159 )
  • [CI Pipeline] Released Patch version: 1.18.13 - ( PR: #160 )
  • [CI Pipeline] Released Patch version: 1.18.14 - ( PR: #161 )
  • Include the client IP address as an additional parameter in reCAPTCHA assessments to strengthen protection. - ( PR: #162 )
  • Fix HIGH severity jws vulnerability (UID2-6367 https://avd.aquasec.com/nvd/2025/cve-2025-65945/) - ( PR: #163 )
  • fix: add qs resolution to resolve CVE-2025-15284 vulnerability - ( PR: #164 )
  • [CI Pipeline] Released Minor version: 1.19.0 - ( PR: #165 )
  • Check token empty before making the API call - ( PR: #166 )
  • fixed CVE-2026-25639 - ( PR: #167 )
  • UID2-6617: Fix CVE-2026-26996 minimatch ReDoS vulnerability - ( PR: #168 )
  • Sas UI d2 6622 various improvements - ( PR: #169 )
  • [CI Pipeline] Released Minor version: 1.20.0 - ( PR: #170 )
  • fix default port for metrics - ( PR: #171 )
  • [CI Pipeline] Released Patch version: 1.20.2 - ( PR: #172 )
  • UID2-6675: upgrade minimatch to fix CVE-2026-27903 ReDoS - ( PR: #173 )
  • UID2-6844: fix npm vulnerabilities - handlebars, path-to-regexp 0.1.x, picomatch - ( PR: #174 )
  • [CI Pipeline] Released Patch version: 1.20.8 - ( PR: #175 )
  • UID2-6874: Fix CVE-2026-4800 - upgrade lodash from 4.17.23 to 4.18.1 - ( PR: #176 )
  • [UID2-6898] Fix CVE-2025-62718: Upgrade axios 1.13.5→1.15.0 - ( PR: #177 )
  • UID2-6913: Pin third-party GitHub Action refs to commit SHAs - ( PR: #178 )
  • UID2-6799 Use 'ci-auto-merge' environment - ( PR: #179 )
  • UID2-6962: Fix CVE-2026-41242 - Upgrade protobufjs to 8.0.1 (CRITICAL) - ( PR: #180 )
  • fix(security): upgrade axios to >=1.15.2 (CVE-2026-42033/42035/42043/42264) - ( PR: #182 )
  • UID2-7079: bump protobufjs to >=8.0.2 (HIGH CVEs) - ( PR: #184 )
  • [CI Pipeline] Released Patch version: 1.20.27 - ( PR: #187 )
  • chore: upgrade GitHub Actions from Node 20 to Node 24 - ( PR: #188 )
  • UID2-7294: fix(deps): upgrade @grpc/grpc-js to fix CVE-2026-48068, CVE-2026-48069 - ( PR: #190 )
  • UID2-7292: prevent optout crash on malformed payload - ( PR: #189 )
  • [CI Pipeline] Released Patch version: 1.20.33 - ( PR: #191 )
  • UID2-7307 UID2-7309: fix form-data and protobufjs CVEs (HIGH) - ( PR: #192 )
  • UID2-7411: bump base image and remediate HIGH/CRITICAL vulns in docker-path images - ( PR: #193 )
  • [CI Pipeline] Released Patch version: 1.20.40 - ( PR: #194 )
  • [CI Pipeline] Released Patch version: 1.20.41 - ( PR: #195 )

Installation

docker pull ghcr.io/iabtechlab/euid-tcportal:1.20.41
ghcr.io/iabtechlab/euid-tcportal:latest

Image reference to deploy:

iabtechlab/euid-tcportal

Changelog

  • pass amazon trace id as service id - ( PR: #138 )
  • [CI Pipeline] Released Patch version: 1.16.3 - ( PR: #139 )
  • get service_id environment variable and pass it to operator as a header - ( PR: #140 )
  • [CI Pipeline] Released Patch version: 1.16.5 - ( PR: #141 )
  • instance_id rather than service_id - ( PR: #142 )
  • [CI Pipeline] Released Patch version: 1.16.7 - ( PR: #143 )
  • no random suffix on instance id - ( PR: #144 )
  • [CI Pipeline] Released Patch version: 1.16.10 - ( PR: #145 )
  • [CI Pipeline] Released Patch version: 1.16.10 - ( PR: #146 )
  • Update header casing - ( PR: #147 )
  • [CI Pipeline] Released Patch version: 1.16.13 - ( PR: #148 )
  • new logging framework, log trace-ids - ( PR: #149 )
  • [CI Pipeline] Released Minor version: 1.17.0 - ( PR: #150 )
  • update scan vulnerability file usage - ( PR: #151 )
  • fix cve form data - ( PR: #152 )
  • Upgrade Axios - ( PR: #153 )
  • slim down logging - ( PR: #154 )
  • [CI Pipeline] Released Minor version: 1.18.0 - ( PR: #155 )
  • add healthcheck logging back for alarming - ( PR: #156 )
  • [CI Pipeline] Released Patch version: 1.18.2 - ( PR: #157 )
  • changes to github workflows for trivy scan - ( PR: #158 )
  • enrich request to operator - ( PR: #159 )
  • [CI Pipeline] Released Patch version: 1.18.13 - ( PR: #160 )
  • [CI Pipeline] Released Patch version: 1.18.14 - ( PR: #161 )
  • Include the client IP address as an additional parameter in reCAPTCHA assessments to strengthen protection. - ( PR: #162 )
  • Fix HIGH severity jws vulnerability (UID2-6367 https://avd.aquasec.com/nvd/2025/cve-2025-65945/) - ( PR: #163 )
  • fix: add qs resolution to resolve CVE-2025-15284 vulnerability - ( PR: #164 )
  • [CI Pipeline] Released Minor version: 1.19.0 - ( PR: #165 )
  • Check token empty before making the API call - ( PR: #166 )
  • fixed CVE-2026-25639 - ( PR: #167 )
  • UID2-6617: Fix CVE-2026-26996 minimatch ReDoS vulnerability - ( PR: #168 )
  • Sas UI d2 6622 various improvements - ( PR: #169 )
  • [CI Pipeline] Released Minor version: 1.20.0 - ( PR: #170 )
  • fix default port for metrics - ( PR: #171 )
  • [CI Pipeline] Released Patch version: 1.20.2 - ( PR: #172 )
  • UID2-6675: upgrade minimatch to fix CVE-2026-27903 ReDoS - ( PR: #173 )
  • UID2-6844: fix npm vulnerabilities - handlebars, path-to-regexp 0.1.x, picomatch - ( PR: #174 )
  • [CI Pipeline] Released Patch version: 1.20.8 - ( PR: #175 )
  • UID2-6874: Fix CVE-2026-4800 - upgrade lodash from 4.17.23 to 4.18.1 - ( PR: #176 )
  • [UID2-6898] Fix CVE-2025-62718: Upgrade axios 1.13.5→1.15.0 - ( PR: #177 )
  • UID2-6913: Pin third-party GitHub Action refs to commit SHAs - ( PR: #178 )
  • UID2-6799 Use 'ci-auto-merge' environment - ( PR: #179 )
  • UID2-6962: Fix CVE-2026-41242 - Upgrade protobufjs to 8.0.1 (CRITICAL) - ( PR: #180 )
  • fix(security): upgrade axios to >=1.15.2 (CVE-2026-42033/42035/42043/42264) - ( PR: #182 )
  • UID2-7079: bump protobufjs to >=8.0.2 (HIGH CVEs) - ( PR: #184 )
  • [CI Pipeline] Released Patch version: 1.20.27 - ( PR: #187 )
  • chore: upgrade GitHub Actions from Node 20 to Node 24 - ( PR: #188 )
  • UID2-7294: fix(deps): upgrade @grpc/grpc-js to fix CVE-2026-48068, CVE-2026-48069 - ( PR: #190 )
  • UID2-7292: prevent optout crash on malformed payload - ( PR: #189 )
  • [CI Pipeline] Released Patch version: 1.20.33 - ( PR: #191 )
  • UID2-7307 UID2-7309: fix form-data and protobufjs CVEs (HIGH) - ( PR: #192 )
  • UID2-7411: bump base image and remediate HIGH/CRITICAL vulns in docker-path images - ( PR: #193 )
  • [CI Pipeline] Released Patch version: 1.20.40 - ( PR: #194 )
  • [CI Pipeline] Released Patch version: 1.20.41 - ( PR: #195 )
Assets 2
Loading