Skip to content

Open Source Routing Machine (OSRM)

v26.7.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 25d Server & OS Management
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

c++ cpp17 isochrones map-matching openstreetmap osm
+4 more
osrm routing routing-engine traveling-salesman

Affected surfaces

deps

Summary

AI summary

Broad release touches deps, ci, util, and contractor.

Full changelog
  • 9590f39dc - chore: bump version to 26.7.0
  • b354bb772 - chore: delete .cncc.style (#7638)
  • 568e01661 - refactor(partitioner,extractor): migrate SFINAE to C++20 concepts (#7637)
  • ffe488bcf - chore(ci): upgrade pipeline to ubuntu-26.04 (minus ARM) (#7624)
  • f11f4e6ee - fix(contractor): insert self-loops for all needed cases, not just one-ways (#7442)
  • 58fb6e6b0 - chore(deps): bump actions/cache from 5 to 6 (#7636)
  • 1486e7fd4 - chore(readme): updated build instructions (#7635)
  • c8c548ee3 - feat(engine): ignore incoming hints during phantom node lookup (#7630)
  • 874ded3f7 - refactor(util): migrate util/* SFINAE patterns to C++20 concepts (#7632)
  • 3049880b4 - refactor(util): replace SFINAE with C++20 concepts in packed_vector.hpp (#7631)
  • b9d730370 - chore(deps): bump actions/checkout from 6 to 7 (#7629)
  • 6b6fd837f - fix(docs): Python build (#7628)
  • b8ebf7beb - ci: set DNS servers as first workflow step (#7626)
  • 8457c5e6a - chore(npm): upgrade dependencies to non-vulnerable versions (#7625)
  • 4d8480adf - chore(clang-tidy): remove redundant typename keyword (#7613)
  • 882d91a95 - fix(ci): remove dead scripts (#7612)
  • 1c66f8e33 - chore(deps-dev): bump @babel/core from 7.29.0 to 7.29.6 (#7621)
  • 809e208f0 - chore(deps): bump form-data from 4.0.5 to 4.0.6 (#7620)
  • 0008cce25 - chore(deps): bump tar from 7.5.11 to 7.5.16 (#7619)
  • 6806fb1e0 - chore(deps): bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#7617)
  • 6948b861d - chore(deps): bump codecov/codecov-action from 6 to 7 (#7616)
  • 24102836b - chore(ci): build on Windows 2025 with VS2026 (#7550)
  • d909906b6 - chore(dependencies): drop libfmt dependency in favor of std::format (#7611)
  • 3f3169680 - test: use fixed external seed for reproducible unit tests (#7610)
  • 42ca82719 - test: add comprehensive unit tests for turn_lane_matcher (#7607)
  • c2d35ad1c - feat(trip-demo): encode locations in URL hash for shareable links (#7609)
  • 29103a42c - fix: formatting
  • 3aab698a1 - fix(Alias.hpp): replace operator implementations with starship

Security Fixes

  • chore(npm): upgrade dependencies to non-vulnerable versions
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Open Source Routing Machine (OSRM)

Get notified when new releases ship.

Sign up free

About Open Source Routing Machine (OSRM)

High performance routing engine designed to run on OpenStreetMap data and offering an HTTP API, C++ library interface, and Nodejs wrapper.

All releases →

Related context

Beta — feedback welcome: [email protected]