Skip to content

v2.6.6 - Security release for Docker Scout CVE#99

Merged
neverinfamous merged 1 commit intomainfrom
release/v2.6.6
Apr 6, 2026
Merged

v2.6.6 - Security release for Docker Scout CVE#99
neverinfamous merged 1 commit intomainfrom
release/v2.6.6

Conversation

@neverinfamous
Copy link
Copy Markdown
Owner

Security Patch: Docker Build Pipeline

  • Remediated Docker Scout action failure related to CVE-2026-33671 (picomatch)
  • Patched npm's bundled tinyglobby dependency to enforce picomatch@4.0.4 at image build layer

Security

  • picomatch: Bumped to 4.0.4 across image bounds to resolve inefficient regex complexity in bundled node-gyp routines.

Compare: v2.6.5...v2.6.6

Copilot AI review requested due to automatic review settings April 6, 2026 12:22
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented Apr 6, 2026

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
d1-manager 72ef9b7 Apr 06 2026, 12:29 PM

This comment was marked as resolved.

@neverinfamous neverinfamous merged commit e6a861f into main Apr 6, 2026
14 checks passed
@neverinfamous neverinfamous deleted the release/v2.6.6 branch April 6, 2026 12:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants