This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+2 more
Summary
AI summaryUpdates 📦 Dependencies, 🌟 Improvements, and 🐛 Bug Fixes across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Post commit status back to source Git/SCM provider after each deployment. Post commit status back to source Git/SCM provider after each deployment. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Dependency | Low |
Update github/codeql-action digest to 7188fc3. Update github/codeql-action digest to 7188fc3. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Dependency | Low |
Update dependency zensical to v0.0.51. Update dependency zensical to v0.0.51. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Dependency | Low |
Update github.com/docker/cli module to v29.6.2+incompatible. Update github.com/docker/cli module to v29.6.2+incompatible. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Dependency | Low |
Update github.com/sigstore/cosign/v3 module to v3.1.2. Update github.com/sigstore/cosign/v3 module to v3.1.2. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Preserve destination inode during OCI artifact sync. Preserve destination inode during OCI artifact sync. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Ensure parent directory is created before OCI artifact extraction. Ensure parent directory is created before OCI artifact extraction. Source: llm_adapter@2026-07-18 Confidence: high |
— |
Full changelog
What's Changed
-
Bind mounts on containers deployed from OCI artifacts should no longer lose their destination inode at OCI artifact sync.
-
Doco-CD can now post a commit status back to the source Git/SCM provider after each deployment, making the result visible directly on the commit or pull request in their web UI. See the wiki for information on how to enable Commit Status Reporting.
✨ Features
- feat: add commit status reporting for deployments by @kimdre in https://github.com/kimdre/doco-cd/pull/1514
🌟 Improvements
- fix: modernize Go code by @kimdre in https://github.com/kimdre/doco-cd/pull/1509
- fix(oci): improve OCI artifact verification and rejection for untrusted sources by @kimdre in https://github.com/kimdre/doco-cd/pull/1510
- fix: minor improvements by @kimdre in https://github.com/kimdre/doco-cd/pull/1513
🐛 Bug Fixes
- fix(oci): preserve destination inode during artifact sync by @kimdre in https://github.com/kimdre/doco-cd/pull/1507
- fix(oci): ensure parent directory is created before extraction by @kimdre in https://github.com/kimdre/doco-cd/pull/1508
- fix(docker): initialize noSuchImageCount within ErrorReader function by @kimdre in https://github.com/kimdre/doco-cd/pull/1512
📦 Dependencies
- chore(deps): update github/codeql-action digest to 7188fc3 by @renovate[bot] in https://github.com/kimdre/doco-cd/pull/1515
- chore(deps): update dependency zensical to v0.0.51 by @renovate[bot] in https://github.com/kimdre/doco-cd/pull/1516
- fix(deps): update module github.com/docker/cli to v29.6.2+incompatible by @renovate[bot] in https://github.com/kimdre/doco-cd/pull/1517
- fix(deps): update module github.com/sigstore/cosign/v3 to v3.1.2 by @renovate[bot] in https://github.com/kimdre/doco-cd/pull/1518
Full Changelog: https://github.com/kimdre/doco-cd/compare/v0.95.0...v0.96.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]