chore(release): publish Munitor 0.3.8 #43

2026-10-19T14:22:05Z

KofTwentyTwo commented

2026-10-19 14:22:05 +00:00

(Migrated from github.com)

Release Munitor 0.3.8 to fix supplemental images reusing stale package-upgrade layers. The supplemental builder passes --pull --no-cache for both repository-owned and generated Dockerfiles, while preserving enforced HIGH/CRITICAL Trivy scans before publication.

The fix addresses the backend db-backup scan finding for libexpat CVE-2026-77214. Consumer scans must confirm the rebuilt backup, migration and geoip images are clean; publication alone is not proof of remediation.

Validation: full make all (lint, orb validation, scripts and templates), all seven BATS tests and twelve focused image-scan checks passed. All PR42 CI checks passed before merge. This release adds only README/session metadata to that verified source; release CI must pass before main merge/tagging.

AI assistance: prepared and reviewed with Codex.

Release Munitor 0.3.8 to fix supplemental images reusing stale package-upgrade layers. The supplemental builder passes --pull --no-cache for both repository-owned and generated Dockerfiles, while preserving enforced HIGH/CRITICAL Trivy scans before publication. The fix addresses the backend db-backup scan finding for libexpat CVE-2026-77214. Consumer scans must confirm the rebuilt backup, migration and geoip images are clean; publication alone is not proof of remediation. Validation: full make all (lint, orb validation, scripts and templates), all seven BATS tests and twelve focused image-scan checks passed. All PR42 CI checks passed before merge. This release adds only README/session metadata to that verified source; release CI must pass before main merge/tagging. AI assistance: prepared and reviewed with Codex.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/Munitor#43