changelogs: Prepare 1.34.8 release

Signed-off-by: Ryan Northey <[email protected]>

Author: phlax

changelogs/current.yaml

@@ -8,6 +8,17 @@ minor_behavior_changes:
 
 bug_fixes:
 # *Changes expected to improve the state of the world and are unlikely to have negative effects*
+- area: dependency
+  change: |
+    Resolve dependency CVEs:
+
+    - CVE-2025-0725: curl
+    - CVE-2024-11407: gRPC
+    - CVE-2024-25176: luajit
+    - CVE-2024-25177: luajit
+    - CVE-2024-25178: luajit
+    - CVE-2025-27817: kafka
+    - CVE-2025-27818: kafka.
 
 removed_config_or_runtime:
 # *Normally occurs at the end of the* :ref:`deprecation period <deprecated>`

changelogs/summary.md

@@ -1,4 +1,12 @@
 **Summary of changes**:
 
-* Docker images:
-  - Fix for distroless images to ensure nonroot.
+* Security updates:
+
+  Resolve dependency CVEs:
+  - CVE-2025-0725: curl
+  - CVE-2024-11407: gRPC
+  - CVE-2024-25176: luajit
+  - CVE-2024-25177: luajit
+  - CVE-2024-25178: luajit
+  - CVE-2025-27817: kafka
+  - CVE-2025-27818: kafka