CHANGELOG:
- (Bugfix) (Collector) Write the member startup event through the database client service (a Coordinator, or the single server) instead of the member's local 127.0.0.1 endpoint, so DBServer and agent events reach the central _events collection the member.startup inventory reads instead of a node-local collection
- (Documentation) Update the supported Kubernetes versions table to each provider's current latest release (GKE/AKS/EKS/BareMetal/Minikube/Other up to 1.37, IBM Cloud up to 1.36, OpenShift up to 4.22)
- (Bugfix) (Security) Bump the Go toolchain to 1.26.10 and github.com/go-jose/go-jose/v4 to 4.1.6 to clear the HIGH image CVEs CVE-2026-111943 (crypto/x509 man-in-the-middle via untrusted intermediate certificates) and CVE-2026-116587 (go-jose JWK RSA-parameter denial of service)
- (Bugfix) (Security) (Gateway) Bump the bundled Envoy image to v1.39.6 (latest 1.39 patch) to clear the statically-linked Brotli decoder RCE CVE-2026-111497 (fixed in 1.39.3, CISA KEV) which version-based scanners cannot see in the Bazel-built Envoy binary, plus the subsequent 1.39.4-1.39.6 patch fixes
What's Changed
- Collector: write member startup events to the central _events (via the client service) instead of a node-local collection by @ajanikow in #2222
- Update supported Kubernetes versions table to each provider's current latest release by @ajanikow in #2225
- Bump Go toolchain to 1.26.10, go-jose/v4 to 4.1.6 and bundled Envoy to v1.39.6 to clear HIGH/KEV image CVEs by @ajanikow in #2226
Full Changelog: 1.4.6...1.4.7