v1.72.10

Important

Releases 1.72.5 – 1.72.9 never reached any installation. push-to-registries timed out pushing the image across the Pacific to the Aliyun registry on every one of those tags, which blocked launch-container and therefore push-happa-to-catalog. The images were fine and present in gsoci, but the chart never published, so the OCIRepository (semver: x.x.x) had nothing newer than 1.72.4 to pick up. GitHub showed green releases throughout, so this was invisible.

This release fixes that and carries the whole backlog — 66 commits since 1.72.4, including roughly ten security-only dependency updates that had been merged and released but never deployed.

Fixed

• CI: the Aliyun registry push no longer blocks the chart publish. The buildx push stays on gsoci/gsociprivate (split-china-push) and a separate sync-china-registry job mirrors to Aliyun from the in-China runner, with nothing depending on it (#4881).

Security

• The container image no longer ships webpack source maps. They were uploaded to Sentry during the build and then baked into the nginx image as well, where they were publicly downloadable at roughly four times the weight of the bundles they described. Sentry symbolication is unaffected. Reported via bug bounty; internal tracking issue giantswarm/giantswarm#37469 (#4879).
• Dependency updates previously released but never deployed, including js-yaml 4.3.1 (#4877), mermaid 10.9.8 (#4878), and the tar, brace-expansion and webpack-dev-server advisories.

Full diff: v1.72.4...v1.72.10

v1.72.9

Security

• The container image no longer ships webpack source maps. They were uploaded to Sentry during the build and then baked into the nginx image as well, where they were publicly downloadable and made up roughly four times the weight of the bundles they described. Sentry symbolication is unaffected. Reported via bug bounty; internal tracking issue giantswarm/giantswarm#37469 (#4879).

v1.72.8

• chore(deps): bump fast-uri from 3.1.4 to 3.1.5 by @dependabot[bot] in #4876
• fix(deps): update dependency mermaid to v10.9.8 [security] by @renovate[bot] in #4878
• fix(deps): update dependency js-yaml to v4.3.1 [security] by @renovate[bot] in #4877

Full Changelog: v1.72.7...v1.72.8

v1.72.7

• Dependency updates

Full Changelog: v1.72.6...v1.72.7

v1.72.6

What's Changed

Other Changes

• fix(deps): bump websocket-driver from 0.7.4 to 0.7.5 in #4863
• fix(docker): pin build tooling to stop startup crash; poll for readiness in launch-container by @marians in #4864

Full Changelog: v1.72.5...v1.72.6

v1.72.5

• fix(helm): add startupProbe and raise CPU limit to stop happa startup crashloop by @marians in #4862

Full Changelog: v1.72.4...v1.72.5

v1.72.4

What's Changed

Changes

• fix(footer): guard against undefined metadata version by @marians in #4803

Full Changelog: v1.72.3...v1.72.4

v1.72.3

What's Changed

Changes

• feat(analytics): track only authenticated pageviews via TelemetryDeck JS SDK by @marians in #4800

Other Changes

• chore(deps): replace connected-react-router with redux-first-history by @marians in #4750
• chore(ci): bump architect-orb to 8.0.2 by @marians in #4738
• chore(deps): pin patched versions of vulnerable transitive deps by @marians in #4742
• chore(deps): bump react-markdown to 9.1.0 and pin mdast-util-to-hast by @marians in #4744
• chore(deps): bump @rjsf packages to 5.24.13 by @marians in #4745
• chore(deps): remove validate.js (dead code) by @marians in #4748
• feat(ci): add workflow to audit dependencies by @marians in #4749
• fix(deps): pin form-data to ^4.0.4 via yarn resolution by @marians in #4753
• fix(deps): pin ws to ^8.17.1 via yarn resolution by @marians in #4754
• fix(renovate): remove schedule, increase concurrency by @marians in #4755
• chore: align files according to platform standards in #4799 #4770 #4714 #4722 #4802 #4724

Full Changelog: v1.72.2...v1.72.3

v1.72.2

• Dependency updates

Full Changelog: v1.72.1...v1.72.2

v1.72.1

What's Changed

• Add ephemeral-storage resource requests and limits to fe-docs deployment by @marians in #4708

Full Changelog: v1.72.0...v1.72.1