Skip to content

2.72.0

Choose a tag to compare

View all tags
@appruntimeplatform-bot appruntimeplatform-bot released this 16 Jul 14:09
· 47 commits to develop since this release
v2.72.0
57ce5df

2.72.0

Release Date: July 16, 2026

Changes

  • Merge pull request #52 from cloudfoundry/feature/TNZGOV-10660-nstar-path-traversal - Author: Geoff Franks - SHA: 028f777
  • reject paths with '..' prefix before Join - Author: Amelia Downs - SHA: c519f03

Go Package Updates for cert-injector

  • Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260604005048-7023385849c0' to 'v0.0.0-20260709232956-b9395ee17fa0'
  • Bumped go.mod package 'golang.org/x/mod' from 'v0.37.0' to 'v0.38.0'
  • Bumped go.mod package 'golang.org/x/net' from 'v0.56.0' to 'v0.57.0'
  • Bumped go.mod package 'golang.org/x/sync' from 'v0.21.0' to 'v0.22.0'
  • Bumped go.mod package 'golang.org/x/sys' from 'v0.46.0' to 'v0.47.0'
  • Bumped go.mod package 'golang.org/x/text' from 'v0.39.0' to 'v0.40.0'
  • Bumped go.mod package 'golang.org/x/tools' from 'v0.47.0' to 'v0.48.0'

Go Package Updates for diff-exporter

  • Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260604005048-7023385849c0' to 'v0.0.0-20260709232956-b9395ee17fa0'
  • Bumped go.mod package 'golang.org/x/mod' from 'v0.37.0' to 'v0.38.0'
  • Bumped go.mod package 'golang.org/x/net' from 'v0.56.0' to 'v0.57.0'
  • Bumped go.mod package 'golang.org/x/sync' from 'v0.21.0' to 'v0.22.0'
  • Bumped go.mod package 'golang.org/x/sys' from 'v0.46.0' to 'v0.47.0'
  • Bumped go.mod package 'golang.org/x/text' from 'v0.39.0' to 'v0.40.0'
  • Bumped go.mod package 'golang.org/x/tools' from 'v0.47.0' to 'v0.48.0'
  • Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260706201446-f0a921348800' to 'v0.0.0-20260713224248-f5fc221cf8c4'

Go Package Updates for groot-windows

  • Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.71.0' to 'v0.73.0'
  • Bumped go.mod package 'code.cloudfoundry.org/groot' from 'v0.114.0' to 'v0.115.0'
  • Bumped go.mod package 'code.cloudfoundry.org/hydrator' from 'v0.96.0' to 'v0.98.0'
  • Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.77.0' to 'v3.78.0'
  • Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260604005048-7023385849c0' to 'v0.0.0-20260709232956-b9395ee17fa0'
  • Bumped go.mod package 'golang.org/x/mod' from 'v0.37.0' to 'v0.38.0'
  • Bumped go.mod package 'golang.org/x/net' from 'v0.56.0' to 'v0.57.0'
  • Bumped go.mod package 'golang.org/x/sync' from 'v0.21.0' to 'v0.22.0'
  • Bumped go.mod package 'golang.org/x/sys' from 'v0.46.0' to 'v0.47.0'
  • Bumped go.mod package 'golang.org/x/text' from 'v0.39.0' to 'v0.40.0'
  • Bumped go.mod package 'golang.org/x/tools' from 'v0.47.0' to 'v0.48.0'

Go Package Updates for nstar

  • Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260604005048-7023385849c0' to 'v0.0.0-20260709232956-b9395ee17fa0'
  • Bumped go.mod package 'golang.org/x/mod' from 'v0.37.0' to 'v0.38.0'
  • Bumped go.mod package 'golang.org/x/net' from 'v0.56.0' to 'v0.57.0'
  • Bumped go.mod package 'golang.org/x/sync' from 'v0.21.0' to 'v0.22.0'
  • Bumped go.mod package 'golang.org/x/sys' from 'v0.46.0' to 'v0.47.0'
  • Bumped go.mod package 'golang.org/x/text' from 'v0.39.0' to 'v0.40.0'
  • Bumped go.mod package 'golang.org/x/tools' from 'v0.47.0' to 'v0.48.0'

Go Package Updates for winc

  • Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260629130111-5ee9a1ab59ab' to 'v0.0.0-20260713130104-9e27d7fd7234'
  • Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.71.0' to 'v0.73.0'
  • Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.79.0' to 'v0.80.0'
  • Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.180' to 'v0.2.181'
  • Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260604005048-7023385849c0' to 'v0.0.0-20260709232956-b9395ee17fa0'
  • Bumped go.mod package 'golang.org/x/crypto' from 'v0.53.0' to 'v0.54.0'
  • Bumped go.mod package 'golang.org/x/mod' from 'v0.37.0' to 'v0.38.0'
  • Bumped go.mod package 'golang.org/x/net' from 'v0.56.0' to 'v0.57.0'
  • Bumped go.mod package 'golang.org/x/sync' from 'v0.21.0' to 'v0.22.0'
  • Bumped go.mod package 'golang.org/x/sys' from 'v0.46.0' to 'v0.47.0'
  • Bumped go.mod package 'golang.org/x/text' from 'v0.39.0' to 'v0.40.0'
  • Bumped go.mod package 'golang.org/x/tools' from 'v0.47.0' to 'v0.48.0'
  • Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260706201446-f0a921348800' to 'v0.0.0-20260713224248-f5fc221cf8c4'

✨ Built with go 1.26.5

Full Changelog: v2.71.0...v2.72.0

Resources

Assets 3
Loading