Skip to content

[1.0] chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 5a2d51a (#471) - #473

Closed
Jan-Kazlouski-elastic wants to merge 12 commits into
mainfrom
backport/1.0/pr-471
Closed

[1.0] chore(deps): update docker.elastic.co/wolfi/chainguard-base:latest docker digest to 5a2d51a (#471)#473
Jan-Kazlouski-elastic wants to merge 12 commits into
mainfrom
backport/1.0/pr-471

Conversation

@Jan-Kazlouski-elastic

Copy link
Copy Markdown
Contributor

Backports the following commits to 1.0:

github-actions Bot and others added 12 commits May 11, 2026 20:41
…adme (#438) (#439)

Backports the following commits to 1.0:
- Bump product_version to 1.0.0 + remove Beta designation from readme
(#438)

Co-authored-by: Matt Nowzari <matt.nowzari@elastic.co>
Last-minute housekeeping

- [x] Update `.backportrc.json` to include new `1.0` branch
- [x] Bring Dockerfile.wolfi up to correct version (The branch was cut
before the Renovate PR was approved, oops)
…2 HTTP/2 DoS) (#442) (#444)

Backports the following commits to 1.0:
- Bump httpclient5 to 5.5.1 to resolve CVE-2025-8671 (httpcore5-h2
HTTP/2 DoS) (#442)

Made with [Cursor](https://cursor.com)

Co-authored-by: Cursor <cursoragent@cursor.com>
… 0.16.0 (#449) (#450)

Backports the following commits to 1.0:
- [CVE-2026-5588] Upgrade Bouncy Castle to 1.84 via jruby-openssl 0.16.0
(#449)

Co-authored-by: Jan-Kazlouski-elastic <jan.kazlouski@elastic.co>
Co-authored-by: Cursor <cursoragent@cursor.com>
Backports the following commits to 1.0:
 - [CVE-2026-54297] Bump faraday to 2.14.3 (#454)

Co-authored-by: Jan-Kazlouski-elastic <jan.kazlouski@elastic.co>
Co-authored-by: Cursor <cursoragent@cursor.com>
Backports the following commits to 1.0:
 - [CVE-2026-41316] Bump erb to 4.0.4.1 (#456)

Co-authored-by: Jan-Kazlouski-elastic <jan.kazlouski@elastic.co>
Co-authored-by: Cursor <cursoragent@cursor.com>
Backports the following commits to 1.0:
 - [CVE-2026-42246] Pin net-imap 0.3.10 (#457)

Co-authored-by: Jan-Kazlouski-elastic <jan.kazlouski@elastic.co>
Backports the following commits to 1.0:
 - [CVE-2026-42257] Bump net-imap to 0.5.15 (#461)

Co-authored-by: Jan-Kazlouski-elastic <jan.kazlouski@elastic.co>
Co-authored-by: Cursor <cursoragent@cursor.com>
Backports the following commits to 1.0:
 - [CVE-2026-54428] Bump httpclient5 to 5.6.2 (#462)

Co-authored-by: Jan-Kazlouski-elastic <jan.kazlouski@elastic.co>
Co-authored-by: Cursor <cursoragent@cursor.com>
Backports the following commits to 1.0:
 - [CVE-2025-48924] Pin commons-lang3 to 3.18.0 (#463)

Co-authored-by: Jan-Kazlouski-elastic <jan.kazlouski@elastic.co>
Co-authored-by: Cursor <cursoragent@cursor.com>
Backports the following commits to 1.0:
 - [CVE-2026-33176] Bump activesupport to 7.2.3.1 (#464)

Made with [Cursor](https://cursor.com)

Co-authored-by: Cursor <cursoragent@cursor.com>
…est docker digest to 5a2d51a (#471)

Co-authored-by: Cursor <cursoragent@cursor.com>
@Jan-Kazlouski-elastic
Jan-Kazlouski-elastic requested a review from a team as a code owner August 10, 2026 07:30
@cla-checker-service

Copy link
Copy Markdown

❌ Author of the following commits did not sign a Contributor Agreement:
, , , , , , , , 90d8d8c

Please, read and sign the above mentioned agreement if you want to contribute to this project

@Jan-Kazlouski-elastic
Jan-Kazlouski-elastic deleted the backport/1.0/pr-471 branch August 10, 2026 07:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants