Repository navigation

fix: clear scanner findings (docker/docker, buildkit, containerd, Go 1.26.10 and more) - #536

Open

coder[bot] wants to merge 14 commits into

mainfrom

stirby/envbuilder-zero-vulns

Open

fix: clear scanner findings (docker/docker, buildkit, containerd, Go 1.26.10 and more)#536
coder[bot] wants to merge 14 commits into
mainfrom
stirby/envbuilder-zero-vulns

Commits on Oct 8, 2026
- fix: drop docker/docker and update buildkit via the kaniko fork
  stirby
  committed
  7089f45
- fix: pin kaniko with layer reader close fix and go-containerregistry v0.21.7
  stirby
  committed
  9e64f32
Commits on Oct 11, 2026
- fix: build with Go 1.26.9 to pick up stdlib security fixes
  
  default
  authored and
  coder[bot]
  committed
  ae5ca34
- fix: bump golang.org/x/net to v0.60.0 and google.golang.org/grpc to v1.83.2
  
  default
  authored and
  coder[bot]
  committed
  09b6811
- fix: bump tailscale transitive deps insomniacslk/dhcp and cilium/ebpf
  
  default
  authored and
  coder[bot]
  committed
  fe044ea
- test(integration): migrate Docker client to moby/moby/client and moby/moby/api
  
  default
  authored and
  coder[bot]
  committed
  1527594
- fix: require opencontainers/runc v1.3.6
  
  default
  authored and
  coder[bot]
  committed
  ee37b00
- fix: require aquasecurity/trivy v0.72.0
  
  default
  authored and
  coder[bot]
  committed
  d223fe5
- fix: require containerd/containerd v1.7.36
  
  default
  authored and
  coder[bot]
  committed
  1d20790
- fix: pin kaniko without containerd v1 and drop containerd/containerd
  
  default
  authored and
  coder[bot]
  committed
  f403dc1
Commits on Oct 12, 2026
- chore: bump toolchain to go1.26.9 and golang.org/x/net to v0.60.0
  stirby
  committed
  77452e6
Commits on Oct 14, 2026
- Merge remote-tracking branch 'origin/stirby/kaniko-moby' into stirby/envbuilder-zero-vulns
  stirby
  committed
  37667dd
Commits on Oct 19, 2026
- fix: bump distribution/v3 to v3.1.2 and gomarkdown/markdown for GHSA-685w-q87j-wqw3 and GHSA-cv23-7vc5-jfh7
  stirby
  committed
  6c7d67e
Commits on Oct 26, 2026
- fix: bump go-chi/chi/v5 to v5.4.0 and Go to 1.26.10 for GHSA-j6qf-3m9c-vwj3 and GO-2026-6809
  stirby
  committed
  9420f6f

Commits

Commits on Oct 8, 2026

Commits on Oct 11, 2026

Commits on Oct 12, 2026

Commits on Oct 14, 2026

Commits on Oct 19, 2026

Commits on Oct 26, 2026