Posts
-
mcp-rest-forge v0.2.4 Released
On October 22, 2026, mcp-rest-forge v0.2.4 was released. This update is a security-focused rebuild with no functional changes to the server itself. Binaries are built with Go 1.27.3 to distrust compromised eMudhra intermediate CAs, addressing GO-2026-6809 / CVE-2026-111943. The release also updates the TOON output dependency to the latest upstream version. For users, this means a safer deployment with no configuration or migration work required. What’s new Security rebuild with Go 1.27.3. The release artifacts are rebuilt to apply the...
Read article -
ghprmerge v0.9.1 Released
On 2026-10-22, ghprmerge v0.9.1 was published for the UnitVectorY-Labs/ghprmerge project. This release is a security-focused rebuild that updates the Go toolchain trust store to address compromised eMudhra intermediate CAs, with accompanying improvements to how rebase readiness and PR status are reported to users. ghprmerge automates bulk evaluation and merging of GitHub pull requests across an organization, a core workflow for teams running automated dependency updates. v0.9.1 keeps the tool safe to use while making its reporting clearer when PRs are...
Read article -
ghorgsync v0.6.3 Released: Security Rebuild
On October 22, 2026, ghorgsync v0.6.3 was published. This release is a security-focused rebuild with no functional changes to the tool itself. Binaries are built with a Go toolchain that distrusts the compromised eMudhra intermediate CAs referenced in GO-2026-6809 / CVE-2026-111943, ensuring safer TLS verification when ghorgsync contacts GitHub. For users, the experience remains identical to v0.6.2, but updating is recommended for the improved security posture. What’s new v0.6.3 contains no new features or user-visible behavior changes. The release notes...
Read article -
LockboxKMS v0.3.10: Security Rebuild with Updated Go Toolchain
On October 22, 2026, LockboxKMS v0.3.10 was released. This is a security-focused maintenance update for the web interface that encrypts text using Google Cloud KMS. The release contains no functional changes to the application itself; it is a drop-in rebuild with Go 1.27.3 to address trust store concerns around compromised eMudhra intermediate CAs referenced as GO-2026-6809 / CVE-2026-111943. The update continues LockboxKMS’s rapid security maintenance cadence, ensuring the container image is built with an up-to-date toolchain while preserving the same...
Read article -
kube-oidc-gateway v1.1.3 — Security Rebuild
kube-oidc-gateway v1.1.3 was released on 2026-10-22. This is a security-focused rebuild with no functional code changes. The container image is built with Go 1.27.3 to include the CA bundle update that distrusts compromised eMudhra intermediate certificates, tracked as GO-2026-6809 / CVE-2026-111943. For users, this means the same endpoints, configuration, and behavior as v1.1.2, but with an updated TLS trust store in the Go runtime used to connect to the Kubernetes API server. What’s new v1.1.3 updates the build toolchain only....
Read article -
iapheaders v0.5.4: Security Rebuild for Trusted CA Store
On 2026-10-22, UnitVectorY-Labs published iapheaders v0.5.4. This release is a security-focused rebuild of the existing application with no functional code changes. The container image is now built with Go 1.27.3 to incorporate an updated certificate authority trust store that distrusts compromised eMudhra intermediate CAs, tracked as GO-2026-6809 / CVE-2026-111943. For users running the iapheaders Docker image, this is a drop-in update that improves TLS verification posture without changing behavior or configuration. What’s new v0.5.4 delivers the same iapheaders experience for...
Read article -
hellorest v1.3.4: Security Rebuild with Go 1.27.3
hellorest v1.3.4 was released on October 22, 2026. This release is a security-focused rebuild with no changes to the public API. The Docker image is now built with Go 1.27.3 to apply Go’s removal of trust for compromised eMudhra intermediate CAs referenced in GO-2026-6809 / CVE-2026-111943. For users, it means the same simple GET / service returning {"hello":"world"} with an unchanged X-App-Version header, delivered from a hardened build toolchain. What’s new v1.3.4 updates the build environment only. The Dockerfile builder...
Read article -
hallucinateapi v0.1.3: Security Rebuild
On October 22, 2026, hallucinateapi v0.1.3 was released. This update is a security rebuild with no functional changes to the API behavior. The project continues to serve OpenAPI 3.0 GET and POST operations by using operation descriptions as LLM instructions, validating requests and responses against the schema, and returning schema-constrained JSON. What’s new v0.1.3 is built with Go 1.27.3 to address GO-2026-6809 / CVE-2026-111943, which concerns compromised eMudhra intermediate certificate authorities. The Go 1.27.3 trust store distrusts those CAs, and...
Read article -
gologhttpjson v0.2.2: Security Rebuild
On October 22, 2026, gologhttpjson v0.2.2 was released. This release is a security rebuild with no functional changes to the application. The Docker images and build artifacts have been rebuilt with Go 1.27.3 to address the compromised eMudhra intermediate CA issue referenced as GO-2026-6809 / CVE-2026-111943. Behavior, configuration, and logging remain identical to v0.2.1. What’s new v0.2.2 contains no new features or bug fixes to the running service. The Go source code is unchanged from v0.2.1. The release updates the...
Read article -
goenvecho v1.4.2 – Security Rebuild
On October 22, 2026, goenvecho v1.4.2 was released. This is a security-focused rebuild with no functional code changes. The container image is rebuilt with Go 1.27.3 to distrust compromised eMudhra intermediate CAs referenced as GO-2026-6809 / CVE-2026-111943. For users, the release is a drop-in upgrade: behavior, API, and configuration remain identical to v1.4.1. What’s new Security rebuild: the published container image is built with the golang:1.27.3 builder instead of golang:1.27.1 to address the eMudhra CA trust issue. No Go source...
Read article
subscribe via RSS