windmill

mirror of https://github.com/windmill-labs/windmill.git synced 2026-08-18 16:02:10 +00:00

Files

T

Ruben Fiszel d467161117 fix: bump bundled Go CLIs to patched versions to clear image CVEs (#9996 )

The runtime image bundles several Go CLIs whose pinned versions were built
with an outdated Go toolchain (go1.21.7 for kubectl/helm), which image
scanners flag for fixable Go stdlib CVEs. Bump each to the latest release
built on the current patched Go 1.26.4:

- kubectl 1.28.7 (EOL) -> 1.36.2 (latest stable)
- helm 3.14.3 -> 3.21.2 (latest v3; staying on v3 to avoid the Helm 4
  breaking changes for a bundled CLI users depend on)
- crane v0.20.6 -> v0.21.7

crane is also updated in DockerfileSlim/DockerfileSlimEe (the slim images
don't bundle kubectl/helm). The docker client comes from the floating
docker:29-dind tag, which already rebuilds to a current Go toolchain.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-08 00:25:41 +02:00

RHEL8

Refresh slim image runtime packages (#9396 )

2026-06-02 08:16:11 +00:00

RHEL9

Refresh slim image runtime packages (#9396 )

2026-06-02 08:16:11 +00:00

dev.nu

feat: make nsjail available in all standard images (CE) (#7793 )

2026-02-04 18:48:16 +00:00

DockerfileCaddyL4

feat: caddy with l4 image (#4178 )