maximhq/bifrost transports/v2.3.2

Bifrost HTTP v2.3.2

on GitHub

Bifrost HTTP Transport Release v2.3.2

🔒 Security

• Go 1.27.3 - Security release for CVE-2026-111943 in crypto/x509: certificate chains through a small set of intermediates from a specific Certificate Authority are no longer accepted by Verify, which covers every TLS connection Bifrost makes to providers, MCP servers and other upstreams. Bifrost now builds with Go 1.27.3, and the Docker images (Dockerfile, Dockerfile.local, Dockerfile.redhat) move to golang:1.27.3-alpine3.24. Custom Go plugins must be rebuilt with Go 1.27.3 to load.

🔧 Maintenance

• Dependency Upgrades - Bumped core to v1.13.1 and framework to v1.10.1 across all modules

🗄️ Database Migrations

• No new database migrations in this release.

Installation

Docker

docker run -p 8080:8080 maximhq/bifrost:v2.3.2

Binary Download

npx @maximhq/bifrost --transport-version v2.3.2

Docker Images

• maximhq/bifrost:v2.3.2 - This specific version
• maximhq/bifrost:latest - Latest version (updated with this release)

This release was automatically created with dependencies: core v1.13.1, framework v1.10.1. All plugins have been validated and updated.