From 2b99d037c3bfecd0f97f9b4c68b1e81f42494056 Mon Sep 17 00:00:00 2001 From: "release-please[bot]" <55107282+release-please[bot]@users.noreply.github.com> Date: Thu, 22 Oct 2026 22:49:23 +0000 Subject: [PATCH 1/2] chore(main): release 1.8.4 --- CHANGELOG.md | 7 +++++++ README.md | 2 +- docs/quick-start.md | 2 +- version.txt | 2 +- 4 files changed, 10 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 18ce7c4c..fff76784 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,12 @@ # Changelog +## [1.8.4](https://github.com/GoogleCloudPlatform/cloud-sql-proxy-operator/compare/v1.8.3...v1.8.4) (2026-10-22) + + +### Bug Fixes + +* update dependencies, distroless base image, and default proxy to v2.26.3 ([#806](https://github.com/GoogleCloudPlatform/cloud-sql-proxy-operator/issues/806)) ([92f5e01](https://github.com/GoogleCloudPlatform/cloud-sql-proxy-operator/commit/92f5e01b86fb4838e4507f1f2eeddbc282002a21)) + ## [1.8.3](https://github.com/GoogleCloudPlatform/cloud-sql-proxy-operator/compare/v1.8.2...v1.8.3) (2026-10-08) diff --git a/README.md b/README.md index a7adf84d..871bec1e 100644 --- a/README.md +++ b/README.md @@ -44,7 +44,7 @@ your kubernetes cluster: ```shell -kubectl apply -f https://storage.googleapis.com/cloud-sql-connectors/cloud-sql-proxy-operator/v1.8.3/cloud-sql-proxy-operator.yaml +kubectl apply -f https://storage.googleapis.com/cloud-sql-connectors/cloud-sql-proxy-operator/v1.8.4/cloud-sql-proxy-operator.yaml ``` diff --git a/docs/quick-start.md b/docs/quick-start.md index 7697b715..a2bce336 100644 --- a/docs/quick-start.md +++ b/docs/quick-start.md @@ -21,7 +21,7 @@ your kubernetes cluster: ```shell -curl https://storage.googleapis.com/cloud-sql-connectors/cloud-sql-proxy-operator/v1.8.3/install.sh | bash +curl https://storage.googleapis.com/cloud-sql-connectors/cloud-sql-proxy-operator/v1.8.4/install.sh | bash ``` diff --git a/version.txt b/version.txt index a7ee35a3..bfa363e7 100644 --- a/version.txt +++ b/version.txt @@ -1 +1 @@ -1.8.3 +1.8.4 From bd0ac18e8845f9059358514be6a312977584de88 Mon Sep 17 00:00:00 2001 From: kgala2 Date: Thu, 22 Oct 2026 23:04:58 +0000 Subject: [PATCH 2/2] docs(changelog): add Security / CVE Fixes section for 1.8.4 --- CHANGELOG.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index fff76784..fdeae3de 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,16 @@ * update dependencies, distroless base image, and default proxy to v2.26.3 ([#806](https://github.com/GoogleCloudPlatform/cloud-sql-proxy-operator/issues/806)) ([92f5e01](https://github.com/GoogleCloudPlatform/cloud-sql-proxy-operator/commit/92f5e01b86fb4838e4507f1f2eeddbc282002a21)) +### Security / CVE Fixes + +Updates `gcr.io/distroless/static:nonroot` container base image digests to remove distrusted `emSign ECC Root CA - G3` and `AAA Certificate Services` root certificates (`ca-certificates`), bumps the default Cloud SQL Auth Proxy image to `v2.26.3`, and updates dependencies: + +| Advisory | CVE | Description | Affected Component | Fixed Version | +| --- | --- | --- | --- | --- | +| [GO-2026-6809](https://pkg.go.dev/vuln/GO-2026-6809) | [CVE-2026-111943](https://nvd.nist.gov/vuln/detail/CVE-2026-111943) | Distrust compromised intermediate certificates in `crypto/x509` and container OS root CA bundle (`ca-certificates`) | `gcr.io/distroless/static:nonroot`, default proxy image | `distroless@d620678`, `cloud-sql-proxy:2.26.3` | +| [GO-2026-6617](https://pkg.go.dev/vuln/GO-2026-6617) | [CVE-2026-78659](https://nvd.nist.gov/vuln/detail/CVE-2026-78659) | Multiple HTTP/2 and networking vulnerabilities in `golang.org/x/net` | `golang.org/x/net` | `v0.61.0` | + + ## [1.8.3](https://github.com/GoogleCloudPlatform/cloud-sql-proxy-operator/compare/v1.8.2...v1.8.3) (2026-10-08)