v7.11.1

Updates:

• Update to golang 1.27.2

Fixed CVEs:

• CVE-2026-78669: net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames

Assets

                                                          sha256  file
91dfeff2b222eadadbd9a17bf074bf5ece36d39c9b4f592a3b4f3c1f57534df2  bosh-cli-7.11.1-linux-amd64
f9cfa838d46fc7319413118d0be5a48b92816ceaa508365e48cbe89369646d68  bosh-cli-7.11.1-linux-arm64
bf58d258aeda0091ab69ff3635bcb649f6b3d8f6c37cb503a7437ade1938f424  bosh-cli-7.11.1-darwin-amd64
959aaf6cc8aa1eb79ac4cb95a084066e4639fb3a7cfc727fc391703b0eef062d  bosh-cli-7.11.1-darwin-arm64
5e04ac004e267f5024f0bb9d1cc7e2f8f220ac81d4a4f4db02eead2b2f2d8dc7  bosh-cli-7.11.1-windows-amd64.exe

v7.11.0

Assets

                                                          sha256  file
3ad84c3967672070b7f70f91f8da76abcbb604d588787b4f98457338cc9fc8d2  bosh-cli-7.11.0-linux-amd64
f248a4f35551cdf9d3809cc4f6bd43813449967c367ad170d36a65b31b98882b  bosh-cli-7.11.0-linux-arm64
8009b62d71b179be64a589585cd387fed2b05c6bc5b0c79a262a239a25d4b7f2  bosh-cli-7.11.0-darwin-amd64
f90301c8cb314b9e52ceff2783a77b3b1615a886510bdcf269b65e09b4be32ff  bosh-cli-7.11.0-darwin-arm64
fe53f8fe95116103d11247a171035a345bf75b92de50e1e26c21e9a728e059fa  bosh-cli-7.11.0-windows-amd64.exe

v7.10.12

Assets

                                                          sha256  file
db65e5d9f54b18c7f41a40157e5734559dec05ce47a0cf167622fcaabb75f498  bosh-cli-7.10.12-linux-amd64
237d28a0d5291fcbd5c488241fb0a01ccc4accfd7c171f6b33bfe7cb8c69cf4a  bosh-cli-7.10.12-linux-arm64
d01b607d4a6c77aeb94273a2a15fbad6bd9c03cd2b56ff832fb9eec192d8b474  bosh-cli-7.10.12-darwin-amd64
703561628a68f6d2831ee787f7e0c4f8f6144bc322f1fb5bd64b0612f2e66ec4  bosh-cli-7.10.12-darwin-arm64
086a76709ade4497d7d8c97096848ba6b111c70cf7862d2b972221907ecf669b  bosh-cli-7.10.12-windows-amd64.exe

What's Changed

• ci: add gh cli to task image by @KauzClay in #738
• fix: manually bump deps by @aramprice in #739
• Manually bump go-humanize to 1.1.0 by @ystros in #740
• Don't clear current stemcell on VM delete by @Ivaylogi98 in #737
• Add --fix-stemcell to create-env to force a stemcell re-upload by @julian-hj in #741

New Contributors

• @KauzClay made their first contribution in #738
• @Ivaylogi98 made their first contribution in #737
• @julian-hj made their first contribution in #741

Full Changelog: v7.10.11...v7.10.12

v7.10.11

Updates:

• Update to golang 1.27.1

Fixed CVEs:

• CVE-2026-84304: gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ...
• CVE-2026-84445: gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing :authority and Host headers

Assets

                                                          sha256  file
0c96400fcab5cb0e274264291df6ed8fe973f1146be0d086a82389939243a2eb  bosh-cli-7.10.11-linux-amd64
dd08212d010d406f9d5ac913d54bbdedad62c207f9d382f1d44f9c8097835565  bosh-cli-7.10.11-linux-arm64
319cf1382eeb8c164db8f7920990aa986ef4d4a36115b78fda6483c3b056ddac  bosh-cli-7.10.11-darwin-amd64
c9b7155e30184d60da5190022d5b2a01347a1217ff4b3ada24aa41223eed7914  bosh-cli-7.10.11-darwin-arm64
ccb1bc640adf00eeda14ec66dd45faa0d8d90b565d8212f01cdaf177e38d3ce6  bosh-cli-7.10.11-windows-amd64.exe

v7.10.10

Updates:

• Update to golang 1.26.7

Assets

                                                          sha256  file
ff092e567f6b6b41cbcaf8b4065eb2bae29a7463f537bd99ae6424c0d93291c9  bosh-cli-7.10.10-linux-amd64
e63160a0272861c10a20c57f26a98662225d56306698ca349804b300eb7460ca  bosh-cli-7.10.10-linux-arm64
e5ffc9d4fc79347cacd4c2cdcea324de96ef69fa66da2b3a9dd5f68abb9e603d  bosh-cli-7.10.10-darwin-amd64
b7ab8478d55e8145bb5c9789d1fed41ab1d1d4329b5a334155e90428d4986385  bosh-cli-7.10.10-darwin-arm64
da1449de1f9601dfc9bcb2b122ea4a99ef269e151fa88400664f3cf27cb73de2  bosh-cli-7.10.10-windows-amd64.exe

v7.10.9

Updates:

• Update to golang 1.26.6

Assets

                                                          sha256  file
b06db2e0ad45c1c24d90726c2e83011b025d5fe5c3dabb9d8af8f87db1f2a89c  bosh-cli-7.10.9-linux-amd64
baae83a0a6d8f1aa624cbeccf4cb22fdb539967c8646ccf66fe3913ff1c33432  bosh-cli-7.10.9-linux-arm64
d9a30adacb93691fa7327db4c8041a400b085810217121a63ea65a9de5b33331  bosh-cli-7.10.9-darwin-amd64
be3035f031d770ebe7adfe73179ace2bfbe9ee5752de5766f2d978c201bcdf9b  bosh-cli-7.10.9-darwin-arm64
c0a3596bfe3df74d1bcb949ccb2120990325b4508798d5a8bb2cbb6e873894e4  bosh-cli-7.10.9-windows-amd64.exe

v7.10.8

Fixed CVEs:

• GHSA-hrxh-6v49-42gf: gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

Assets

                                                          sha256  file
99a597324753fe4efa55fb8b0d9a5f9093e802e4f6b751a75d8b5fa910ef05d9  bosh-cli-7.10.8-linux-amd64
f103be54d536f1ca8ac29f0de55b4ea44bcac6180803f32954455f5f5190e9e4  bosh-cli-7.10.8-linux-arm64
6cfe0a837379afdfe60208d165dd4ba2795a6c5642a9184a79cc31ec4f7a061d  bosh-cli-7.10.8-darwin-amd64
2e7922427d20c6387d42d2ab22ce252fb044c4a4b006f8247af77a20a8708789  bosh-cli-7.10.8-darwin-arm64
1f008ca9737679195045fdb3950dfda3c0b4bbcd5f5487dc96ad66b11aba5e37  bosh-cli-7.10.8-windows-amd64.exe

v7.10.7

Updates:

• Update to golang 1.26.5

Assets

                                                          sha256  file
ed73153e899f6c8bc0280c3e747ef7718a0d07066707acfb5de93abeee29600a  bosh-cli-7.10.7-linux-amd64
11d6d134a7c94b7e36758e0776225c7f91076a95aa2bc7268d62c40347ab8cc5  bosh-cli-7.10.7-linux-arm64
7d88011540c33370a1fe1b2c3bf759c432fd6c3fbee0dac7cef58abe0c4117f4  bosh-cli-7.10.7-darwin-amd64
320d532d97930514116e5cccc157f61b549e079327030324fcc590a195e7a5ec  bosh-cli-7.10.7-darwin-arm64
287fbc5efa168d87e7fd4b274eb4f2110c2174e4ee268c0fcb05366f8dd70609  bosh-cli-7.10.7-windows-amd64.exe

v7.10.6

Updates:

• Update to golang 1.26.4

Assets

                                                          sha256  file
5a37b97085ad2656984a4ec15d051b4e0ebd3262a9f55d844daf01b46b90f268  bosh-cli-7.10.6-linux-amd64
25e10047e234247408437c8161f751d2bb1ac65d33fdbd6d26c75661dfc4dfca  bosh-cli-7.10.6-linux-arm64
a6f4bd831e5508e26f287051806ead4b11c3021ff147ad15b5c8d2e37fc00039  bosh-cli-7.10.6-darwin-amd64
d5ad0704ea01b8d43e553cc4cad42b5023b532178b6369957c81d5e8d623bce5  bosh-cli-7.10.6-darwin-arm64
76bbc65f272a45f5cf6875f80c4e10814f5091c26f9325eae9d37593b93ed5a5  bosh-cli-7.10.6-windows-amd64.exe

v7.10.5

Updates:

• Update to golang 1.26.3

Assets

                                                          sha256  file
e9847375ba5397589e7b070305defc70321ad0e62d18b67a70a330efcab6e526  bosh-cli-7.10.5-linux-amd64
2a16bf201ce979743c305a6a4f3616ce7e6bd683437084116a03263988afb0ad  bosh-cli-7.10.5-linux-arm64
65679d3b5d47003fe1d7d959efa6ed033b1c8dea8fc2d550276ff624530dc4bf  bosh-cli-7.10.5-darwin-amd64
0b031344a86628f4ccbbdd5f2a4b49cec747332349b863610b7e904536e70a83  bosh-cli-7.10.5-darwin-arm64
e38ccc6d7f1911bb390b677fac5f6f196207cd1c74eba0a261f23b36558bd691  bosh-cli-7.10.5-windows-amd64.exe