Skip to content

1.0.13

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Jul 04:22
· 131 commits to master since this release
1.0.13
9a171d8

1.0.13 — Security & CI hardening

Dependency CVE bumps, new supply-chain scanning workflows, and the operator UI
pinned to dc-agent-react v1.3.0.

Changes

  • Bumped dependencies for CVEs: Jetty 12.0.20 → 12.0.34, JGit
    7.1.0 → 7.7.0, Handlebars; added OWASP suppressions.
  • Added CI security scanning: CodeQL, OWASP Dependency-Check, SpotBugs, and
    Dependabot; plus OpenSSF Scorecard and SonarCloud workflows.
  • Fixed Trivy / OWASP / SpotBugs / Scorecard workflow failures.
  • Pinned the operator UI to dc-agent-react v1.3.0 (frontend.version).

Full Changelog: 1.0.12...1.0.13

Assets 4
Loading