v1.2.1

Release v1.2.1

🔒 Security Fixes

• Patched CVE-2026-23949: Explicitly upgraded the jaraco.context python dependency to version >=6.1.0 during the Docker build process. This eliminates a high-severity vulnerability flagged by Docker Scout, which was previously being pulled in by system-level dependencies.
  • Note: We also remove the vulnerable .dist-info metadata from /usr/lib/python3/dist-packages/ so that security scanners correctly identify the patched version.

📝 Updating

If your GitLab/GitHub CI/CD pipelines use the :latest tag, or tags mapped to specific PHP versions (like :8.2, :8.3, etc.), the underlying images will be updated automatically on Docker Hub and GHCR once this release is published. Pulling the latest image will secure your pipeline environments.

docker pull devanoxpvtltd/laravel:latest

👨‍💻 Under the Hood

• 4e5637d fix: upgrade jaraco.context to version 6.1.0 to patch CVE-2026-23949

Full Changelog: v1.2.0...v1.2.1