Skip to content

v1.8.1

Choose a tag to compare

@me-bender me-bender released this 10 Jul 19:44
· 44 commits to main since this release

Patch release on top of v1.8.0. All plugin images are rebuilt on the refreshed alpine 3.24.1 base — picking up the upstream libcrypto3 / libssl3 security fixes (alpine CVE-2026-34182) — plus one build fix for the checkov collector. No plugin behavior changed; every plugin is functionally identical to v1.8.0.

Fixes

  • checkov collector: add cargo to the virtual .build-deps so pip can compile the rustworkx wheel from source on alpine 3.24 (the newer musl/Python has no prebuilt wheel, so pip source-builds it and needs a Rust toolchain). The toolchain is apk del'd after the build, so the runtime image is unchanged. (#249)

Base image

  • All plugin images rebuilt FROM earthly/lunar-scripts:main-alpine at alpine 3.24.1 (up from 3.23.5 in v1.8.0), carrying the base-layer OpenSSL updates.

Consumers pin this release with @v1.8.1 in lunar-config.yml. 27 plugin images (base + 24 collectors + 1 cataloger + 1 policy) published to Docker Hub under the *-v1.8.1 tag.

Full diff: v1.8.0...v1.8.1