What's Changed
- [redhat-3.10] PROJQUAY-12117: fix(cve): CVE-2026-45822 - decode-uri-component by @openshift-cherrypick-robot in #6516
- PROJQUAY-12270: chore(deps): upgrade pyasn1 from 0.6.3 to 0.6.4 for CVE-2026-59885 by @rhdmalone in #6609
- [redhat-3.10] PROJQUAY-12337: chore(deps): Bump pillow to 12.3.0 by @nindsimonv in #6626
- PROJQUAY-12120: chore(deps): override brace-expansion to address CVE-2026-13149 by @namansharma18899 in #6656
- PROJQUAY-12213: chore(deps): chore(deps): override js-yaml to address CVE-2026-59869 by @namansharma18899 in #6679
- v3.10.25 Changelog Bump by @github-actions[bot] in #6688
- PROJQUAY-12356: fix(mirroring): prevent SSRF in repository sources by @redhat-chai-bot in #6718
Full Changelog: v3.10.24...v3.10.25