From 88be639a8365aef873893d8a59491a22f8a59081 Mon Sep 17 00:00:00 2001 From: phil Date: Tue, 6 Oct 2026 10:24:55 +0900 Subject: [PATCH] chore(release): bump version to 0.9.4 for CVEs Publishes the Go 1.26.8 / x/crypto v0.57.0 / distroless cc-debian13 fix (#39) as image and chart 0.9.4. release.yml keys off appVersion, so this bump is what builds, scans, signs and pushes the artifacts. 0.9.4, not 0.8.7: 0.9.0-0.9.3 are already published, and a lower version would sort below them and roll back the native collectors. artifacthub.io/changes marks the release as security so Artifact Hub surfaces it once the catalog moves off 0.8.6. Co-Authored-By: Claude Opus 5.5 Signed-off-by: phil --- deploy/chart/Chart.yaml | 11 ++++++++--- docs/COMPATIBILITY.md | 2 +- 2 files changed, 9 insertions(+), 4 deletions(-) diff --git a/deploy/chart/Chart.yaml b/deploy/chart/Chart.yaml index 4df3fb6..ad725d6 100644 --- a/deploy/chart/Chart.yaml +++ b/deploy/chart/Chart.yaml @@ -2,8 +2,8 @@ apiVersion: v2 name: nodevitals description: Unified hardware telemetry agent for Kubernetes nodes type: application -version: 0.9.3 -appVersion: "0.9.3" +version: 0.9.4 +appVersion: "0.9.4" kubeVersion: ">=1.26.0-0" home: https://github.com/keiailab/nodevitals @@ -47,4 +47,9 @@ annotations: url: https://raw.githubusercontent.com/KeiaiLab/nodevitals/main/docs/branding/symbol.png artifacthub.io/images: | - name: nodevitals - image: ghcr.io/keiailab/nodevitals:0.9.3 + image: ghcr.io/keiailab/nodevitals:0.9.4 + artifacthub.io/changes: | + - kind: security + description: Go toolchain 1.26.8, golang.org/x/crypto v0.57.0, golang.org/x/net v0.59.0 (Go stdlib and x/crypto HIGH CVEs) + - kind: security + description: Runtime base gcr.io/distroless/cc-debian13 (libssl3 HIGH CVE in cc-debian12) diff --git a/docs/COMPATIBILITY.md b/docs/COMPATIBILITY.md index 69dfe38..14792ed 100644 --- a/docs/COMPATIBILITY.md +++ b/docs/COMPATIBILITY.md @@ -1,7 +1,7 @@ # nodevitals — 서비스 전수 호환성 및 연동 명세서 (Compatibility Matrix) > 저장소: [`github.com/KeiaiLab/nodevitals`](https://github.com/KeiaiLab/nodevitals) -> 기준 버전: `v0.9.3` (Chart v0.9.3) +> 기준 버전: `v0.9.4` (Chart v0.9.4) > 최종 검증 일시: 2026년 8월 12일 본 문서는 `nodevitals`가 연동되는 주요 인프라 서비스, 관측 플랫폼, GPU 오퍼레이터, 가상머신(VM) 환경 간의 명시적 호환성 계약(Compatibility Contract)과 실측 검증 결과를 제공합니다.