getplumber/plumber

v0.3.54 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 1mo Pipelines

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ci-cd compliance pipeline security

Summary

AI summary

Fixed control to recognize safe dangerous triggers via push events and author association lists.

Type	Severity	Summary	CVE
Bugfix	Medium	Fixes recognition of safe dangerous triggers via protective mechanisms. Fixes recognition of safe dangerous triggers via protective mechanisms. Source: llm_adapter@2026-06-10 Confidence: low	—
Bugfix	Low	Recognizes safe dangerous triggers using protective mechanisms like push events and author association list. Recognizes safe dangerous triggers using protective mechanisms like push events and author association list. Source: granite4.1:30b@2026-06-10-audit Confidence: low	—

Full changelog

control: Recognize safe dangerous triggers through protective mechanis such as psuh events and author association list. Issue #235 (7aea20e)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track getplumber/plumber

Get notified when new releases ship.

About getplumber/plumber

v0.4.0 Runs with nothing scoreable now fail closed (exit 1)
v0.4.0 Default artifact name changed to plumber-report
v0.4.0 gate no longer exposes 'compliance'; redefines 'passed' as 'score gate met'