Scalr/agent-helm agent-job-0.6.11

on GitHub

Updated

• Bumping chart version to v0.6.11 for scalr-agent v1.10.0

Added

• task.networkPolicy.dnsEgressTo sets the peers task pods may reach on port 53. The default, namespaceSelector: {}, keeps the current behavior. On large Cilium clusters, restrict it to the cluster DNS pods to avoid per-pod policy map overflow. See DNS Egress on Cilium.

Security

• Default runner image (task.runner.image.tag) bumped from 0.6.1 to 0.6.3. It updates libbrotli1 from 1.1.0-2+b7 to 1.1.0-2+deb13u1 to fix CVE-2026-111497. Python goes from 3.14.9 to 3.14.10, which fixes CVE-2026-115557 and CVE-2026-114583 and makes ssl reject certificate chains that use the compromised eMudhra intermediate CA keys. git-lfs goes from v3.8.0 to v3.8.1, gcloud from 590.0.0 to 590.0.1, and AWS CLI from 2.38.4 to 2.38.6. See changes: Scalr/runner@0.6.1...0.6.3