This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Affected surfaces
ReleasePort's take
Light signalThis release fixes several bugs in clouddriver/eureka API handling, echo webhook URLs, GitHub status conversion, YAML parsing safety, and adds test coverage for retrofit call issues.
Why it matters: Bugfixes address leading‑slash stripping in eureka APIs, duplicate Teams webhook URLs, GitHub status exceptions, missing safe YAML constructors, and improve retrofit test coverage; severity scores range from 20 to 40 across impacted components.
Summary
AI summaryConfiguration updates, breaking changes in clouddriver/eureka API interfaces, and multiple fixes across echo, yaml, tests, and other components.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
clouddriver/eureka removes leading slashes from retrofit2 API interfaces clouddriver/eureka removes leading slashes from retrofit2 API interfaces Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
echo fixes doubling of Microsoft Teams webhook URL in Retrofit2 migration echo fixes doubling of Microsoft Teams webhook URL in Retrofit2 migration Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
echo resolves GitHub status conversion exception echo resolves GitHub status conversion exception Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Low |
yaml adds safe constructors to classes lacking them yaml adds safe constructors to classes lacking them Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Low |
tests add coverage for retrofit incorrect call handling tests add coverage for retrofit incorrect call handling Source: llm_adapter@2026-06-12 Confidence: high |
— |
Full changelog
Breaking Changes
Features
Configuration
Fixes
- clouddriver/eureka: remove leading slashes from all the retrofit2 api interfaces (#7652) (#7660) (5900380b)
- echo: Fix Microsoft Teams webhook URL doubling in Retrofit2 migration (#7718) (#7720) (5aec138d)
- echo: GitHub status conversion exception (#7701) (#7707) (5c41f281)
- tests: Add tests around retrofit incorrect call handling from previous PR (#7710) (#7723) (7770adf6)
- yaml: A few classes were not using safe constructors. Fix these (#7669) (backport to 2026.0.x) (#7690) (4cbe1d5f)
Other
- change: Merge commit from fork (#7712) (bbc30c9b)
Breaking Changes
- remove leading slashes from all retrofit2 API interfaces in clouddriver/eureka
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About spinnaker
Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.
Beta — feedback welcome: [email protected]