Skip to content

chore(main): release 1.8.4 - #807

Merged
kgala2 merged 2 commits into
mainfrom
release-please--branches--main--components--cloud-sql-proxy-operator
Oct 22, 2026
Merged

kgala2 merged 2 commits into
mainfrom
release-please--branches--main--components--cloud-sql-proxy-operator

Conversation

@release-please

@release-please release-please Bot commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

🤖 I have created a release beep boop

1.8.4 (2026-10-22)

Bug Fixes

  • update dependencies, distroless base image, and default proxy to v2.26.3 (#806) (92f5e01)

Security / CVE Fixes

Updates gcr.io/distroless/static:nonroot container base image digests to remove distrusted emSign ECC Root CA - G3 and AAA Certificate Services root certificates (ca-certificates), bumps the default Cloud SQL Auth Proxy image to v2.26.3, and updates dependencies:

Advisory CVE Description Affected Component Fixed Version
GO-2026-6809 CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509 and container OS root CA bundle (ca-certificates) gcr.io/distroless/static:nonroot, default proxy image distroless@d620678, cloud-sql-proxy:2.26.3
GO-2026-6617 CVE-2026-78659 Multiple HTTP/2 and networking vulnerabilities in golang.org/x/net golang.org/x/net v0.61.0

This PR was generated with Release Please. See documentation.

kgala2
kgala2 previously approved these changes Oct 22, 2026
@kgala2
kgala2 merged commit 59e5ff6 into main Oct 22, 2026
12 of 13 checks passed
@kgala2
kgala2 deleted the release-please--branches--main--components--cloud-sql-proxy-operator branch October 22, 2026 23:29
@release-please

Copy link
Copy Markdown
Contributor Author

🤖 Created releases:

🌻

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants