A security update for two vulnerabilities in dependencies:
- Go 1.27.3: CVE-2026-111943
- golang.org/x/net: GO-2026-6603
In addition, the cacertificates have been updated via updated deployment base image.
cosign verify docker.io/cloudflare/origin-ca-issuer:v0.15.1 \
--certificate-identity https://github.com/cloudflare/origin-ca-issuer/.github/workflows/docker.yaml@refs/tags/v0.15.1 \
--certificate-oidc-issuer https://token.actions.githubusercontent.com