chore(release): publish Munitor 0.3.7 #40

Merged

KofTwentyTwo merged 6 commits from release/0.3.7 into main 2026-10-19 13:22:16 +00:00

Conversation 0 Commits 6 Files Changed 10

+226 -19

KofTwentyTwo commented 2026-10-19 13:13:46 +00:00 (Migrated from github.com)

Copy link

Copy source

Munitor 0.3.7 combines two verified fixes:

• Java/Gradle image builds pull current bases and rerun package upgrades instead of reusing vulnerable cached layers. Both PR scans and release builds use this path.
• Filesystem Trivy findings fail the job. Semgrep uses the current pinned official image and rejects missing/empty scans or invalid rule configuration.

PR38 and PR39 passed all CircleCI gates. The runtime fix also passed full local make all, orb validation, script/template assertions and all seven BATS tests. This release branch must pass its combined CI before promotion to main and the signed v0.3.7 publication tag. Consumer real-image scans remain required; no clean-image result is inferred from stub tests.

Website-Backend adoption will update both setup and generated-pipeline orb pins with the reviewed scanner triage. No production deployment is included in this PR.

AI-assisted release preparation by Codex.

Munitor 0.3.7 combines two verified fixes: - Java/Gradle image builds pull current bases and rerun package upgrades instead of reusing vulnerable cached layers. Both PR scans and release builds use this path. - Filesystem Trivy findings fail the job. Semgrep uses the current pinned official image and rejects missing/empty scans or invalid rule configuration. PR38 and PR39 passed all CircleCI gates. The runtime fix also passed full local make all, orb validation, script/template assertions and all seven BATS tests. This release branch must pass its combined CI before promotion to main and the signed v0.3.7 publication tag. Consumer real-image scans remain required; no clean-image result is inferred from stub tests. Website-Backend adoption will update both setup and generated-pipeline orb pins with the reviewed scanner triage. No production deployment is included in this PR. AI-assisted release preparation by Codex.

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

bug

Something isn't working

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

question

Further information is requested

wontfix

This will not be worked on

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/Munitor#40