This release includes 1 security fix for security teams reviewing exposed deployments.
Published 1mo
API Development
✓ No known CVEs patched
This release patches 1 known CVE
Topics
api
docker
static-maps
Affected surfaces
deps
Summary
AI summaryRemove bundled npm to clear an undici CVE and reduce Docker image size.
Full changelog
What's Changed
This is a maintenance release: a security-related fix to the image, a smaller image, and routine dependency upkeep.
Bug fixes
- Remove bundled npm to clear an undici CVE; gate the vulnerability scan to run before push (#152)
Maintenance
- Reduce Docker image size (#153)
- Bump sharp to 0.35.2 and adapt to its new type export (#154)
- Harden CI with Dependabot and security scans (#110)
App & build
- Bump @types/node to v26 (#149)
- Bump @types/node to v25.9.4 (#148)
- Bump @types/node to v25.9.1 (#123)
- Bump webpack to v5.107.2 (#128)
- Bump webpack to v5.107.0 (#126)
- Bump ts-loader to 9.6.1 (#145)
- Bump ts-loader to v9.6.0 (#132)
- Bump ts-jest to v29.4.10 (#122)
- Bump webpack-cli to 7.0.3 (#131)
- Bump qs to 6.15.2 (#129)
- Bump fast-uri to 3.1.2 (#116)
- Bump ip-address to 10.2.0 (#109)
- Bump node Docker tag to v26 (#124)
- Bump actions/checkout to v7 (#143)
- Bump actions/deploy-pages to v5 (#112)
- Bump actions/upload-pages-artifact to v5 (#111)
- Bump actions/labeler to v6 (#114)
- Bump release-drafter/release-drafter to v7 (#113)
- Bump the minor-and-patch group, 4 updates (#141)
- Bump the minor-and-patch group, 3 updates (#121)
- Bump the minor-and-patch group, 2 updates (#115)
Docs site
- Bump webpack-dev-server to 5.2.5 (#151)
- Bump webpack-dev-server to 5.2.4 (#125)
- Bump ws to 7.5.11 (#146)
- Bump launch-editor to 2.14.1 (#147)
- Bump shell-quote to 1.8.4 (#139)
- Bump @babel/plugin-transform-modules-systemjs to 7.29.4 (#120)
- Bump fast-uri to 3.1.2 (#119)
- Bump the minor-and-patch group, 7 updates (#117)
- Bump the minor-and-patch group, 2 updates (#135)
Docker image
docker pull mxdcodes/docker-staticmaps:v0.10.1
Full Changelog: https://github.com/dietrichmax/docker-staticmaps/compare/v0.10.0...v0.10.1
Security Fixes
- Remove bundled npm; clears an undici CVE and gates vulnerability scan before push
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]