Immutable
release. Only release title and notes can be modified.
0.39.0 (2026-09-07)
Features
Bug Fixes
- bump grpc-go to v1.83.1 for CVE-2026-84304 DoS fix (761e37f)
- deps: bump CrowdSec to v1.8.0 (f7aafb5)
- security: force caddy-builder rebuild in PR scan gates (CVE-2026-84304 recurrence) (5c04623)
- security: re-pin grpc-go after OTel downgrade block in caddy-builder (CVE-2026-84304) (8cbc71f)
- security: realign nightly container build with the hardened dependency baseline (3caa9e0)
- security: replace a medium-severity container-image scan suppression with a build-time dependency fix (907113b)
- security: triage 2026-09-04 supply-chain scan (bundled Caddy/CrowdSec/Alpine) (22ac603)
- sync frontend package-lock with package.json to unblock Docker build (8604193)
- uptime: coordinate monitor teardown with in-flight targeted sync (a0022cf)
- uptime: FK-safe monitor teardown order + re-anchor CodeQL suppression (8466a6e)