What's Changed
- [redhat-3.12] PROJQUAY-12118: fix(cve): CVE-2026-45822 - decode-uri-component by @openshift-cherrypick-robot in #6515
- [redhat-3.12] PROJQUAY-12271: chore(deps): upgrade pyasn1 from 0.6.3 to 0.6.4 to address CVE-2026-59885 by @openshift-cherrypick-robot in #6602
- [redhat-3.12] PROJQUAY-12328: chore(deps): Bump pillow to 12.3.0 by @nindsimonv in #6625
- PROJQUAY-12121: chore(deps): override brace-expansion to address CVE-2026-13149 by @namansharma18899 in #6655
- v3.12.21 Changelog Bump by @github-actions[bot] in #6682
- PROJQUAY-12219: chore(deps): chore(deps): override js-yaml to address CVE-2026-59869 by @namansharma18899 in #6678
- PROJQUAY-12358: fix(mirroring): prevent SSRF in repository sources by @redhat-chai-bot in #6719
Full Changelog: v3.12.20...v3.12.21