Skip to content

WebhookEngine v0.3.1

Choose a tag to compare

View all tags
@voyvodka voyvodka released this 29 Jun 08:49
v0.3.1
94f9fb5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

WebhookEngine v0.3.1

Maintenance patch — a runtime base-image security refresh that clears 16 container CVEs (1 critical) reported by Docker Scout, plus a full dependency refresh across the dashboard, the @webhookengine/endpoint-manager package, and backend NuGet. No user-visible behaviour changes and no breaking changes; the v1 route prefix, the Standard Webhooks signature surface, and the WebhookEngine.Sdk public API are unchanged.

Features / Fixes / Changes

Security

  • Runtime base image refresh clears 16 container CVEs (Docker Scout). mcr.microsoft.com/dotnet/aspnet:10.0-alpine repinned f03685b → 57bd717 (Alpine 3.23.4 → 3.23.5, OpenSSL 3.5.6-r0 → 3.5.7-r0), clearing the 16 CVEs Docker Scout reported against the published voyvodka/webhook-engine:latest image — 1 critical (CVE-2026-34182, CVSS 9.1), 8 high, 5 medium, 2 low — all in the Alpine base layer (OpenSSL plus one BusyBox advisory), none in application code (Scout's layer view showed our own layers at 0/0/0). The rebuilt image scans clean (0 vulnerabilities under Trivy). The build-stage mcr.microsoft.com/dotnet/sdk:10.0 is also repinned 548d93f → ea8bde3 for Dependabot tracking — build-only, never ships in the final image.

Changed

  • Frontend dependency refresh. Dashboard bundle: react-router 7.17.0 → 8.0.1 (major; v8's only hard breaking change is removing the react-router-dom re-export, which the dashboard never used), lucide-react 1.18.0 → 1.22.0, recharts 3.8.1 → 3.9.0. Dev / build tooling: vite 8.0.16 → 8.1.0, @vitejs/plugin-react 6.0.2 → 6.0.3, @types/node 25.9.3 → 26.0.1, eslint 10.5.0 → 10.6.0, and typescript-eslint 8.61.0 → 8.62.0 (dashboard and @webhookengine/endpoint-manager); plus vite 8.0.11 → 8.0.16 in samples/portal-host.
  • Backend dependency refresh. OpenTelemetry.Instrumentation.AspNetCore 1.15.2 → 1.16.0 and Scalar.AspNetCore 2.16.4 → 2.16.6 (runtime); Microsoft.NET.Test.Sdk 18.6.0 → 18.7.0 (test projects — build-only, no runtime impact).

Quick Start

docker pull voyvodka/webhook-engine:0.3.1
git clone https://github.com/voyvodka/webhook-engine.git
cd webhook-engine
docker compose -f docker/docker-compose.yml up -d

Dashboard at http://localhost:5100 — login admin@example.com / changeme (reset before exposing publicly).

Links

Assets 2
Loading