Skip to content

v5.177.5

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Oct 08:29
· 368 commits to v5 since this release
v5.177.5
937b2f0
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • Go builder images (src/Dockerfile, src/Dockerfile.contributor, src/Dockerfile.hub) now pin the golang:1.27-alpine index digest that resolves to Go 1.27.2, picking up the 1.27.2 standard-library fixes in net/http, net/http/internal/http2, net/http/httputil, net/textproto, crypto/tls and html/template that govulncheck reported as reachable from the dashboard, proxy, hub and spoke heartbeat (#12301).

SBOMs: SPDX JSON, generated by Syft against the linux/amd64 image digest, attached below for hive, hive-contributor, and hive-hub. They cover linux/amd64 only — see releases.md for why linux/arm64 is not scanned separately.

NOTICE: third-party license attribution for the Go module dependencies compiled into these images, attached below. Does not cover base-image OS packages or the Node.js/tmux layers built from source — see releases.md for the exact boundary.

Assets 6
Loading