Releases: product-os/flowzone
Releases · product-os/flowzone
v19.8.7
Update balena-io/deploy-to-balena-action action to v2.0.92
Notable changes
- Update dependency balena-io/balena-cli to v20.2.3 [balena-renovate[bot]]
balena-io/deploy-to-balena-action (balena-io/deploy-to-balena-action)
v2.0.92
- Update dependency balena-io/balena-cli to v20.2.3 [balena-renovate[bot]]
List of commits
0d44360 (Update balena-io/deploy-to-balena-action action to v2.0.92, 2025-01-22)
v19.8.6
Update dependency node-22 to v22.13.1
Notable changes
- CVE-2025-23083 - src,loader,permission: throw on InternalWorker use when permission model is enabled (High)
- CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
- CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)
- CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
- [
520da342e0
] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#662 - [
99f217369f
] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555 - [
984f735e35
] - (CVE-2025-23085) src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) nodejs-private/node-private#650 - [
2446870618
] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#651
nodejs/node (node-22)
v22.13.1
: 2025-01-21, Version 22.13.1 'Jod' (LTS), @RafaelGSS
This is a security release.
Notable Changes
- CVE-2025-23083 - src,loader,permission: throw on InternalWorker use when permission model is enabled (High)
- CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
- CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)
Dependency update:
- CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
Commits
- [
520da342e0
] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#662 - [
99f217369f
] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555 - [
984f735e35
] - (CVE-2025-23085) src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) nodejs-private/node-private#650 - [
2446870618
] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#651
List of commits
5dd6f6d (Update dependency node-22 to v22.13.1, 2025-01-21)
v19.8.5
Update dependency node to v20.18.2
Notable changes
- CVE-2025-23083 - throw on InternalWorker use when permission model is enabled (High)
- CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
- CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)
- CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
- [
df8b9f2c3e
] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#663 - [
42d5821873
] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555 - [
8187a4b9bb
] - src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) - [
389f239a28
] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#652
nodejs/node (node)
v20.18.2
: 2025-01-21, Version 20.18.2 'Iron' (LTS), @RafaelGSS
This is a security release.
Notable Changes
- CVE-2025-23083 - throw on InternalWorker use when permission model is enabled (High)
- CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
- CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)
Dependency update:
- CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
Commits
- [
df8b9f2c3e
] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#663 - [
42d5821873
] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555 - [
8187a4b9bb
] - src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) - [
389f239a28
] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#652
List of commits
71d6811 (Update dependency node to v20.18.2, 2025-01-21)
v19.8.4
Update dependency docker/buildx to v0.20.0
Notable changes
- CrazyMax
- Tõnis Tiigi
- Sebastiaan van Stijn
- Guillaume Lours
- Jonathan A. Sternberg
- Arran Walker
- David Karlsson
- Nicolas De Loof
- New
buildx history
command has been added that allows working with build records of completed and running builds. You can use these commands to list, inspect, remove your builds, replay the logs of already completed builds, and quickly open your builds in Docker Desktop Build UI for further debugging. This is an early version of this command and we expect to add more features in the future releases. #2891 #2925 - Bake: Definition now supports new object notation for the fields that previously required CSV strings as inputs (attest, output, cache-from, cache-to, secret, ssh) #2758 #2848 #2871 #2814
- Bake: Make FS entitlements error by default. To disable it, you can set
BUILDX_BAKE_ENTITLEMENTS_FS=0
#2875 - Bake: Infer git auth token from remote files to build request #2905
- Bake: Add support for
--list
flag to list targets and variables #2900 #2907 - Bake: Update lookup order for default definition files to load the files with "override" suffix later #2886
- Bake: Fix entitlements check for default SSH socket #2898
- Bake: Fix named context from target platform matching #2877
- Bake: Fix missing default target in group's default targets #2863
- Validate BuildKit configuration before creating a builder #2864
- Compose compatibility has been updated to v2.4.7 #2893 #2857 #2829
- Fix missing last progress from loading layers #2876
- Fix missing documentation for
quiet
progress mode #2899 - github.com/AdaLogics/go-fuzz-headers
ced1acd
->e8a1dd7
- github.com/aws/aws-sdk-go-v2 v1.24.1 -> v1.30.3
- github.com/aws/aws-sdk-go-v2/config v1.26.6 -> v1.27.27
- github.com/aws/aws-sdk-go-v2/credentials v1.16.16 -> v1.17.27
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.11 -> v1.16.11
- github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.10 -> v1.3.15
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.10 -> v2.6.15
- github.com/aws/aws-sdk-go-v2/internal/ini v1.7.3 -> v1.8.0
- github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.4 -> v1.11.3
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.10 -> v1.11.17
- github.com/aws/aws-sdk-go-v2/service/sso v1.18.7 -> v1.22.4
- github.com/aws/aws-sdk-go-v2/service/ssooidc v1.21.7 -> v1.26.4
- github.com/aws/aws-sdk-go-v2/service/sts v1.26.7 -> v1.30.3
- github.com/aws/smithy-go v1.19.0 -> v1.20.3
- github.com/compose-spec/compose-go/v2 v2.4.4 -> v2.4.7
- github.com/containerd/containerd/api v1.7.19 -> v1.8.0
- github.com/containerd/containerd/v2 v2.0.2 new
- github.com/containerd/errdefs v0.3.0 -> v1.0.0
- github.com/containerd/errdefs/pkg v0.3.0 new
- github.com/containerd/platforms v0.2.1 -> v1.0.0-rc.1
- github.com/containerd/ttrpc v1.2.5 -> v1.2.7
- github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.6
- github.com/creack/pty v1.1.21 -> v1.1.24
- github.com/docker/cli v27.4.0-rc.2 -> v27.5.0
- github.com/docker/cli-docs-tool v0.8.0 -> v0.9.0
- github.com/docker/docker v27.4.0-rc.2 -> v27.5.0
- github.com/fxamacker/cbor/v2 v2.7.0 new
- github.com/go-openapi/swag v0.22.3 -> v0.22.4
- github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 -> v2.22.0
- github.com/hashicorp/go-cty-funcs
a090f58
->c51673e
- github.com/hashicorp/hcl/v2 v2.20.1 -> v2.23.0
- github.com/moby/buildkit v0.18.0 -> v0.19.0
- github.com/moby/spdystream v0.2.0 -> v0.4.0
- github.com/pkg/browser
5ac0b6a
new - github.com/prometheus/client_golang v1.20.2 -> v1.20.5
- github.com/stretchr/testify v1.9.0 -> v1.10.0
- github.com/tonistiigi/fsutil
31cf1f4
->b14e27f
- github.com/x448/float16 v0.8.4 new
- github.com/zclconf/go-cty v1.14.4 -> v1.16.0
- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.46.1 -> v0.56.0
- go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.46.1 -> v0.56.0
- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 -> v0.56.0
- go.opentelemetry.io/otel v1.28.0 -> v1.31.0
- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.44.0 -> v1.31.0
- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v0.44.0 -> v1.31.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.28.0 -> v1.31.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.28.0 -> v1.31.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.28.0 -> v1.31.0
- go.opentelemetry.io/otel/metric v1.28.0 -> v1.31.0
- go.opentelemetry.io/otel/sdk v1.28.0 -> v1.31.0
- go.opentelemetry.io/otel/sdk/metric v1.28.0 -> v1.31.0
- go.opentelemetry.io/otel/trace v1.28.0 -> v1.31.0
- golang.org/x/crypto v0.27.0 -> v0.31.0
- golang.org/x/net v0.29.0 -> v0.33.0
- golang.org/x/oauth2 v0.21.0 -> v0.23.0
- golang.org/x/sync v0.8.0 -> v0.10.0
- golang.org/x/sys v0.26.0 -> v0.28.0
- golang.org/x/term v0.24.0 -> v0.27.0
- golang.org/x/text v0.18.0 -> v0.21.0
- google.golang.org/genproto/googleapis/api
f6361c8
->5fefd90
- google.golang.org/genproto/googleapis/rpc [
f6361c8
](https://redirect.github.com/docker/buildx/commit/f63...
v19.8.3
v19.8.2
v19.8.1
v19.8.1
v19.8.0
v19.8.0
v19.7.1
v19.7.1
v19.7.0
Use github-script to generate release notes
Use the GitHub API to get previous tags
and commit messages, while avoiding issues due to
extremely long strings and special characters.