What's Changed
Security
- google.golang.org/grpc v1.79.1: CVE-2026-33186
- go stdlib v1.26.0: CVE-2026-27137 CVE-2026-25679 CVE-2026-27142 CVE-2026-27138 CVE-2026-27139
- prevent hijacking via
ONBUILD COPY: #587
Maintenance
- chore(deps): bump step-security/harden-runner from 2.15.0 to 2.16.0: #563 #579
- chore(deps): bump docker/build-push-action from 6.19.2 to 7.0.0: #564
- chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.1.7 to 0.1.10 : #565 #576 #578
- chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.96.3 to 1.97.1: #565 #576 #578
- chore(deps): bump golang from 1.26.0 to 1.26.1 in /deploy: #562
- chore(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0: #567
- chore(deps): bump golang.org/x/sys from 0.41.0 to 0.42.0: #568
- chore(deps): bump google.golang.org/api from 0.269.0 to 0.272.0: #569 #573 #580
- chore(deps): bump cloud.google.com/go/storage from 1.60.0 to 1.61.3: #572 #574 #575 #576
- chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0: #571
- chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.41.3 to 1.41.4: #578
- chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.11 to 1.32.12: #578
- chore(deps): bump github.com/google/go-containerregistry from 0.21.2 to 0.21.3: #583
- chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3: #585
Fork Related
- bump integration test target docker from 28.5.2 to 29.2.1: #533