What's Changed
- [redhat-3.16] PROJQUAY-11492: chore(web): bump axios to 1.15.2 by @nindsimonv in #6022
- [redhat-3.16] NO-ISSUE: fix(ci): use larger runner for build-and-publish multi-arch job by @openshift-cherrypick-robot in #6059
- [redhat-3.16] PROJQUAY-11655: fix(templates): remove hardcoded external CDN references by @openshift-cherrypick-robot in #6092
- PROJQUAY-11676: fix(cve): CVE-2026-48526 - PyJWT [redhat-3.16] by @rhdmalone in #6116
- [redhat-3.16] PROJQUAY-11597: fix(cve): CVE-2026-44432 - urllib3 by @nindsimonv in #6131
- [redhat-3.16] PROJQUAY-11779: chore(web): bump axios to 1.16.1 by @nindsimonv in #6174
- PROJQUAY-11733: fix(cve): CVE-2026-9277 - shell-quote by @aroyoredhat in #6182
- [redhat-3.16] PROJQUAY-11717: fix(cve): CVE-2026-10143 - kafka-python bump by @openshift-cherrypick-robot in #6194
- PROJQUAY-11662: fix(cve): CVE-2026-6322 - FastUri by @namansharma18899 in #6180
- [redhat-3.16] NO-ISSUE: fix: prevent deadlock in test_has_garbage under parallel execution (PROJQUAY-11089) by @openshift-cherrypick-robot in #6222
- [redhat-3.16] NO-ISSUE: ci: move vpc sg rule cleanup to dedicated workflow job by @openshift-cherrypick-robot in #6207
- [redhat-3.16] NO-ISSUE: chore(config-tool): update Go base image to 1… by @alexissolanas in #6248
- PROJQUAY-11709: deps: Bump golang.org/x/net to version 0.55.0 by @alexissolanas in #6256
- [redhat-3.16] PROJQUAY-11874: fix(cve): CVE-2026-12143 - form-data by @aroyoredhat in #6276
- [redhat-3.16] PROJQUAY-11712: chore(deps): update go version to 1.25.0 by @openshift-cherrypick-robot in #6306
- PROJQUAY-12119: fix(cve): CVE-2026-45822 - decode-uri-component by @alexissolanas in #6364
- [redhat-3.16] PROJQUAY-11964: deps: bump sanitize-html to 2.17.5 by @nindsimonv in #6363
- [redhat-3.16] PROJQUAY-9369: fix: Trigger Clair rescan after proxy cache completes blob downloads by @openshift-cherrypick-robot in #5018
- PROJQUAY-12081: fix(cve): CVE-2026-13676 - FastUri by @namansharma18899 in #6359
- [redhat-3.16] PROJQUAY-10893: fix(proxy): prevent SSRF in proxy cache upstream registry configuration by @nindsimonv in #6414
- v3.16.5 Changelog Bump by @bcaton85 in #6451
Full Changelog: v3.16.4...v3.16.5