Skip to content

docker-registry-browser

v1.10.0 Security

This release includes 7 security fixes for security teams reviewing exposed deployments.

Published 6d Containers & Orchestration
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 7 known CVEs

Topics

docker docker-registry rails ruby user-interface web

Affected surfaces

deps

Summary

AI summary

Updates patch, minor, and major across a mixed release.

Full changelog

What's Changed

  • drop placeholder for SECRET_KEY_BASE env by @klausmeyer in https://github.com/klausmeyer/docker-registry-browser/pull/859
  • 🚨 [security] Update rack-session 2.1.1 → 2.1.2 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/861
  • 🚨 [security] Update addressable 2.8.9 → 2.9.0 (minor) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/860
  • Update puma 7.2.0 → 8.0.0 (major) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/862
  • Update selenium-webdriver 4.41.0 → 4.43.0 (minor) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/863
  • Update propshaft 1.3.1 → 1.3.2 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/864
  • 🚨 [security] Update erb 6.0.2 → 6.0.4 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/865
  • Update bootsnap 1.23.0 → 1.24.0 (minor) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/866
  • Update puma 8.0.0 → 8.0.1 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/867
  • Update Ruby 4.0.2 → 4.0.3 by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/868
  • Update bootsnap 1.24.0 → 1.24.1 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/869
  • 🚨 [security] Update net-imap 0.6.3 → 0.6.4 (minor) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/870
  • Update bootsnap 1.24.1 → 1.24.3 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/871
  • 🚨 [security] Update nokogiri 1.19.2 → 1.19.3 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/872
  • Update selenium-webdriver 4.43.0 → 4.44.0 (minor) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/873
  • Update bootsnap 1.24.3 → 1.24.4 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/874
  • Update faraday 2.14.1 → 2.14.2 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/875
  • Update Ruby 4.0.3 → 4.0.4 by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/876
  • Update bootsnap 1.24.4 → 1.24.5 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/877
  • Update puma 8.0.1 → 8.0.2 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/880
  • Update Ruby 4.0.4 → 4.0.5 by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/879
  • Use native arm64 runner for docker build by @klausmeyer in https://github.com/klausmeyer/docker-registry-browser/pull/881
  • Standardize setup by @klausmeyer in https://github.com/klausmeyer/docker-registry-browser/pull/878
  • Remove debugging leftover from entrypoint by @klausmeyer in https://github.com/klausmeyer/docker-registry-browser/pull/882
  • Deprecate helm-chart by @klausmeyer in https://github.com/klausmeyer/docker-registry-browser/pull/883
  • Update bootsnap 1.24.5 → 1.24.6 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/884
  • 🚨 [security] Update net-imap 0.6.4 → 0.6.4.1 (minor) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/885
  • Update selenium-webdriver 4.44.0 → 4.45.0 (minor) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/886
  • Update faraday 2.14.2 → 2.14.3 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/887
  • 🚨 [security] Update nokogiri 1.19.3 → 1.19.4 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/888
  • 🚨 [security] Update concurrent-ruby 1.3.6 → 1.3.7 (patch) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/889
  • Update selenium-webdriver 4.45.0 → 4.46.0 (minor) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/890
  • 🚨 [security] Update websocket-driver 0.8.0 → 0.8.2 (minor) by @depfu[bot] in https://github.com/klausmeyer/docker-registry-browser/pull/891

Full Changelog: https://github.com/klausmeyer/docker-registry-browser/compare/v1.9.2...v1.10.0

Breaking Changes

  • Removed placeholder for SECRET_KEY_BASE env variable

Security Fixes

  • CVE‑unspecified — Updated rack-session 2.1.1 → 2.1.2 (patch)
  • CVE‑unspecified — Updated addressable 2.8.9 → 2.9.0 (minor)
  • CVE‑unspecified — Updated erb 6.0.2 → 6.0.4 (patch)
  • CVE‑unspecified — Updated net-imap 0.6.3 → 0.6.4 (minor) and later to 0.6.4.1 (minor)
  • CVE‑unspecified — Updated nokogiri 1.19.2 → 1.19.3 (patch) then 1.19.4 (patch)
  • CVE‑unspecified — Updated concurrent-ruby 1.3.6 → 1.3.7 (patch)
  • CVE‑unspecified — Updated websocket-driver 0.8.0 → 0.8.2 (minor)
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track docker-registry-browser

Get notified when new releases ship.

Sign up free

About docker-registry-browser

Web Interface for the Docker Registry HTTP API V2 written in Ruby on Rails.

All releases →

Related context

Beta — feedback welcome: [email protected]