Skip to content

Commit 981ca1f

Browse files
Update changelogs from fern repo (#5458)
Co-authored-by: dsinghvi <10870189+dsinghvi@users.noreply.github.com>
1 parent f0a082b commit 981ca1f

8 files changed

Lines changed: 80 additions & 0 deletions

File tree

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
## 2.66.1
2+
**`(chore):`** Bump the C# SDK and C# model generator containers' Node base image from
3+
`node:22.22-alpine3.23` to `node:24.15-alpine3.23`. Aligns the generators
4+
with the rest of the Fern generator containers on a single Node major
5+
version (Node 24) and picks up Node 24's CVE patches. The bundled npm
6+
11.12.1 in `node:24.15` already ships patched `brace-expansion@5.0.4`, so
7+
the C# SDK's `brace-expansion 2.0.3` replacement step is removed. The
8+
`ip-address` and `picomatch` patches are retained because the bundled
9+
versions in `node:24.15` (10.1.0 and 4.0.3 respectively) are still
10+
vulnerable.
11+
12+
Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
## 1.40.4
2+
**`(chore):`** Bump the Go SDK and Go model generator containers' Node base image from
3+
`node:22.22-alpine3.23` to `node:24.15-alpine3.23`. Aligns the generators
4+
with the rest of the Fern generator containers on a single Node major
5+
version (Node 24) and picks up Node 24's CVE patches. The existing
6+
`npm pack <pkg>@latest` loop that swaps in patched `ip-address`,
7+
`brace-expansion`, and `picomatch` is retained because `npm pack @latest`
8+
continues to resolve the same fixed releases on Node 24.
9+
10+
Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
## 4.8.5
2+
**`(chore):`** Bump the Java SDK generator container's Node base image from
3+
`node:24.14.1-bookworm` to `node:24.15-trixie`. Aligns the generator
4+
with the rest of the Fern generator containers on a single Node patch
5+
minor (floating `24.15`) and a single Debian release (trixie). Trixie ships
6+
patched versions of glibc, dpkg, nghttp2, libcap2, systemd, libgcrypt20,
7+
krb5, curl, and expat that are not available on bookworm, clearing the
8+
AWS Inspector findings that dist-upgrade alone could not. The non-slim
9+
variant is intentional because the Node-stage patch steps shell out to
10+
`curl` and `tar`. The bundled npm 11.12.1 in `node:24.15` already ships
11+
patched `glob@13.0.6`, `minimatch@10.2.4`, `tar@7.5.11`, and
12+
`brace-expansion@5.0.4`, so those tarball-replacement patch steps are
13+
removed. The `ip-address` and `picomatch` patches are retained because the
14+
bundled versions (10.1.0 and 4.0.3 respectively) are still vulnerable.
15+
16+
Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
## 2.9.4
2+
**`(chore):`** Bump the PHP SDK and PHP model generator containers' Node base image from
3+
`node:22.22-alpine3.23` to `node:24.15-alpine3.23`. Aligns the generators
4+
with the rest of the Fern generator containers on a single Node major
5+
version (Node 24) and picks up Node 24's CVE patches.
6+
7+
Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
## 5.12.4
2+
**`(chore):`** Bump the Python SDK generator container's Node base image from
3+
`node:22.22-bookworm-slim` to `node:24.15-trixie-slim`. Aligns the
4+
generator with the rest of the Fern generator containers on a single
5+
Node major version (Node 24) and Debian release (trixie). Trixie ships
6+
patched versions of glibc, dpkg, nghttp2, libcap2, systemd, libgcrypt20,
7+
krb5, curl, and expat that are not available on bookworm, clearing the
8+
AWS Inspector findings that dist-upgrade alone could not.
9+
10+

fern/products/sdks/generators/rust/changelog/2026-05-11.mdx

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,13 @@
1+
## 0.36.5
2+
**`(chore):`** Bump the Rust SDK and Rust model generator containers' Node base image from
3+
`node:22.22-alpine3.23` to `node:24.15-alpine3.23`. Aligns the generators
4+
with the rest of the Fern generator containers on a single Node major
5+
version (Node 24) and picks up Node 24's CVE patches. The Rust SDK's
6+
in-place `npm@11.13.0` self-upgrade and the bundled `ip-address` patch are
7+
retained because the Node 24 `npm` ship (`11.12.1`) still vendors
8+
`ip-address@10.1.0`, which is vulnerable to GHSA-v2v4-37r5-5v8g.
9+
10+
111
## 0.36.4
212
**`(chore):`** Bump the rust toolchain stage in the rust-sdk and rust-model generator
313
containers from `rust:1.82-alpine3.20` to `rust:1.91-alpine3.23`. Alpine
Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
## 0.35.5
2+
**`(chore):`** Bump the Swift SDK and Swift model generator containers' Node base image
3+
from `node:22.22-alpine3.23` to `node:24.15-alpine3.23`. Aligns the
4+
generators with the rest of the Fern generator containers on a single Node
5+
major version (Node 24) and picks up Node 24's CVE patches.
6+
7+

fern/products/sdks/generators/typescript/changelog/2026-05-11.mdx

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,11 @@
1+
## 3.70.5
2+
**`(chore):`** Bump the TypeScript SDK validator container's Node base image to
3+
`node:24.15-trixie-slim`. Aligns the validator with the rest of the
4+
Fern generator containers on a single Node major version (Node 24) on
5+
top of the trixie-slim base introduced for `typescript-sdk-cli` and
6+
`typescript-sdk-validator` by PR #15779.
7+
8+
19
## 3.70.4
210
**`(chore):`** Bump the typescript-sdk-cli and typescript-sdk-validator container base
311
images from `node:*-bookworm-slim` to `node:*-trixie-slim`. Trixie ships

0 commit comments

Comments
 (0)