John T. Myers dbba580e84 fix(security): refresh CI and gateway image dependencies (#1432) ...

Refresh the CI image tool pins so Go-built tools are rebuilt with patched Go releases and move the sandbox Python runtime to 3.14.5.

Rebase the gateway runtime to a pinned distroless Debian 13 image with glibc 2.41-12+deb13u3 while preserving the existing UID/GID 1000 runtime identity for upgrade compatibility. Update rustls-webpki to 0.103.13 and clarify Linux k3d guidance now that k3d is not installed through mise on Linux.

Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>

2026-05-18 14:25:08 -07:00

..

vm

fix(vm): restore sandboxes after gateway restart (#1407)

2026-05-15 15:08:59 -07:00

container-engine.sh

fix(docker): fall back to host arch for local builds (#1420)

2026-05-18 14:24:36 -05:00

docker-build-ci.sh

fix(ci): patch CI container vulnerability toolchain (#959)

2026-04-27 07:56:53 -07:00

docker-build-image.sh

fix(scripts): replace mapfile with bash 3.2-compatible read loop (#1334)

2026-05-15 13:38:25 -05:00

docker-publish-multiarch.sh

refactor(cli): remove gateway lifecycle management (#1221)

2026-05-07 09:54:13 -07:00

gateway-docker.sh

feat(gateway): add TOML configuration file (RFC 0003) (#1317)

2026-05-15 12:43:48 -07:00

gateway-vm.sh

feat(vm): boot sandboxes from ext4 root disks (#1263)

2026-05-15 13:23:10 -07:00

gateway.sh

feat(gateway): add TOML configuration file (RFC 0003) (#1317)

2026-05-15 12:43:48 -07:00

helm-k3s-local.sh

fix(security): refresh CI and gateway image dependencies (#1432)

2026-05-18 14:25:08 -07:00

keycloak-k8s-setup.sh

feat(helm): add kubernetes local-dev environment (#1158)

2026-05-05 13:42:21 -07:00

package-deb-install.sh

fix(packaging): enable mTLS for local packages (#1271)

2026-05-08 13:02:12 -07:00

package-deb.sh

refactor(packaging): rely on gateway runtime defaults (#1415)

2026-05-18 14:13:19 -07:00

package-snap.sh

feat(gateway): add TOML configuration file (RFC 0003) (#1317)

2026-05-15 12:43:48 -07:00

release.py

refactor(packaging): rely on gateway runtime defaults (#1415)

2026-05-18 14:13:19 -07:00

sandbox.sh

refactor(cli): remove gateway lifecycle management (#1221)

2026-05-07 09:54:13 -07:00

stage-prebuilt-binaries.sh

fix(scripts): replace mapfile with bash 3.2-compatible read loop (#1334)

2026-05-15 13:38:25 -05:00