Posts
-
ghook2pubsub v0.2.7 Released: Security Rebuild with Go 1.27.3
On 2026-10-22, UnitVectorY-Labs published ghook2pubsub v0.2.7. This release is a security-focused rebuild with no functional changes to how the service operates. ghook2pubsub bridges GitHub webhook deliveries to Google Cloud Pub/Sub, and v0.2.7 ensures the build toolchain itself reflects current security guidance around certificate authority trust. What’s new v0.2.7 is a maintenance release built with Go 1.27.3. The only change in this release is the builder image in the Dockerfile, updated from golang:1.27.2 to golang:1.27.3 to apply the Go toolchain fix...
Read article -
gcpmetadataexplorer v0.3.3 — security rebuild
On 2026-10-22, gcpmetadataexplorer v0.3.3 was released. This is a security-focused rebuild with no functional changes to the application. The image is rebuilt with Go 1.27.3 to apply the Go security update that distrusts compromised eMudhra intermediate CAs (GO-2026-6809 / CVE-2026-111943). Users get the same browsing experience for the GCP metadata server, now built on a patched toolchain. What’s new v0.3.3 contains no new features, improvements, or bug fixes to the explorer itself. The application code is identical to v0.3.2. The...
Read article -
gcpidentitytokenportal v0.5.6 Released
gcpidentitytokenportal v0.5.6 was released on October 22, 2026. This is a security maintenance release with no functional changes to the portal. The build environment was updated to Go 1.27.3 to incorporate the upstream fix that distrusts compromised eMudhra intermediate CAs (GO-2026-6809 / CVE-2026-111943). The application behavior, endpoints, and configuration remain identical to v0.5.5. What’s new v0.5.6 is a rebuild of the v0.5.5 release with an updated Go builder image. The Dockerfile now builds from golang:1.27.3 instead of golang:1.27.2 No source...
Read article -
firestore-batch-incrementer v0.1.8 — Security Rebuild
firestore-batch-incrementer v0.1.8 was released on 2026-10-22. This release is a security-only rebuild with no functional changes to how the batch incrementer works. The container image is rebuilt with Go 1.27.3 to address a toolchain trust issue involving compromised eMudhra intermediate CAs, ensuring the build environment reflects current security guidance while keeping the user experience identical to v0.1.7. What’s new v0.1.8 updates the build toolchain used to produce the container image from Go 1.27.2 to Go 1.27.3. The Go 1.27.3 release...
Read article -
authzjwtbearerinjector v0.3.10 Release
On 2026-10-22, authzjwtbearerinjector v0.3.10 was released. This is a security-focused rebuild with no functional changes, delivering an updated build environment that improves the project’s security posture for users running the Envoy ExtAuthz service in production. authzjwtbearerinjector is a Go-based service that implements the OAuth 2.0 JWT-bearer flow for Envoy Proxy, signing a local JWT and exchanging it for an access token that is injected into backend requests. Version 0.3.10 keeps the existing behavior intact while ensuring the container image is...
Read article -
authzgcpk8stokeninjector v0.2.10 – Security Rebuild
On October 22, 2026, authzgcpk8stokeninjector v0.2.10 was released. This is a security-focused rebuild of the container image with no functional code changes. The update moves the build toolchain to Go 1.27.3 to address a compromised eMudhra certificate authority issue, ensuring the images you deploy are built with a hardened trust store. What’s new v0.2.10 contains no new features, bug fixes, or behavioral changes. The release updates the Docker builder from golang:1.27.2 to golang:1.27.3 as a direct response to GO-2026-6809 /...
Read article -
mcp-vertex-search-snippets v0.3.4 — Security Rebuild
On 2026-10-22, mcp-vertex-search-snippets v0.3.4 was released. This is a security-focused maintenance release for the lightweight Go MCP server that exposes Google Vertex AI Search / Discovery Engine as an MCP search tool. There are no functional code changes or configuration updates; the release provides rebuilt binaries with an updated Go toolchain to address a certificate authority trust issue. What’s new v0.3.4 delivers pre-compiled binaries rebuilt with Go 1.27.3 to distrust the compromised eMudhra intermediate CAs referenced in GO-2026-6809 / CVE-2026-111943....
Read article -
mcp-tf-provider-docs v0.4.4 Released
mcp-tf-provider-docs v0.4.4 was released on October 22, 2026. This is a security-focused rebuild with no functional changes to the server itself. The release updates the build toolchain to Go 1.27.3 to distrust compromised eMudhra intermediate CAs referenced as GO-2026-6809 / CVE-2026-111943, and includes CI workflow improvements to keep the release pipeline reliable. For users, the binary behavior is unchanged from v0.4.3, but the updated build provides an improved security posture. What’s new This release contains no new user-facing features or...
Read article -
mcp-graphql-forge v0.11.4
On 2026-10-22, UnitVectorY-Labs published mcp-graphql-forge v0.11.4. This release is a security-focused rebuild with no functional changes to the server. The binaries are rebuilt with Go 1.27.3 to distrust the compromised eMudhra intermediate CAs referenced in GO-2026-6809 / CVE-2026-111943. For users, it is a drop-in replacement of v0.11.3 with no configuration changes required. What’s new v0.11.4 ships pre-built binaries for macOS amd64 and arm64, Linux 386, amd64, and arm64, and Windows 386 and amd64, each with md5 and sha256 checksums. The...
Read article -
mcp-filter-proxy v0.2.4 – Security Rebuild for CA Distrust
mcp-filter-proxy v0.2.4 was released on 2026-10-22. This release is a security-focused rebuild with no functional changes to the proxy itself. The binaries are rebuilt with Go 1.27.3 to distrust compromised eMudhra intermediate CAs referenced as GO-2026-6809 / CVE-2026-111943. For users, the upgrade is drop-in and requires no configuration changes. What’s new v0.2.4 contains no new user-facing features and no changes to application code. The proxy behavior, CLI flags, configuration, and API remain identical to v0.2.3. The release delivers prebuilt binaries...
Read article
subscribe via RSS