v1.8.1
Patch release on top of v1.8.0. All plugin images are rebuilt on the refreshed alpine 3.24.1 base — picking up the upstream libcrypto3 / libssl3 security fixes (alpine CVE-2026-34182) — plus one build fix for the checkov collector. No plugin behavior changed; every plugin is functionally identical to v1.8.0.
Fixes
- checkov collector: add
cargoto the virtual.build-depssopipcan compile therustworkxwheel from source on alpine 3.24 (the newer musl/Python has no prebuilt wheel, so pip source-builds it and needs a Rust toolchain). The toolchain isapk del'd after the build, so the runtime image is unchanged. (#249)
Base image
- All plugin images rebuilt
FROM earthly/lunar-scripts:main-alpineat alpine 3.24.1 (up from 3.23.5 in v1.8.0), carrying the base-layer OpenSSL updates.
Consumers pin this release with @v1.8.1 in lunar-config.yml. 27 plugin images (base + 24 collectors + 1 cataloger + 1 policy) published to Docker Hub under the *-v1.8.1 tag.
Full diff: v1.8.0...v1.8.1