1.11.1 / 2025-04-09

[beorn7]

• [BUGFIX] Update dependencies to pull in possibly relevant bugfixes.

---

This discussion was created from the release 1.11.1 / 2025-04-09.

[jirizemanek]

Hello, when is the next release planned? If I build docker image from current master, Trivy image vulnerability scanner seems much happier...

v1.11.1 image findings (HIGH): CVE-2025-47907, CVE-2025-22868, CVE-2025-22874

[beorn7]

If these CVEs are affecting the PGW, I will cut a new release immediately.
But those scanners usually flag stuff that isn't ever executed.

[jirizemanek]

Hello, "If these CVEs are affecting the PGW, ..." I don't think so (I haven't found any usage of it), it would just silence the scanner 🙂 Regards J. Zemánek

…

________________________________ Od: Björn Rabenstein ***@***.***> Odesláno: úterý 14. října 2025 11:47 Komu: prometheus/pushgateway ***@***.***> Kopie: Jiří Zemánek ***@***.***>; Comment ***@***.***> Předmět: Re: [prometheus/pushgateway] 1.11.1 / 2025-04-09 (Discussion #746) If these CVEs are affecting the PGW, I will cut a new release immediately. But those scanners usually flag stuff that isn't ever executed. — Reply to this email directly, view it on GitHub<#746 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/BQ4BRKLVFEKTYEXWVK2T3X33XTBDBAVCNFSM6AAAAACJD225IWVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTINRXGQYTMNY>. You are receiving this because you commented.Message ID: ***@***.***>

[beorn7]

And it would introduce new, yet unexplored security issues…