What's Changed
This release is in response to the compromised eMudhra CA certs. All container images for the bundled resource-types have been updated with the latest OS packages. All Go binaries we ship have been compiled with Go 1.27.3. As far as we can currently tell, all compromised CA certs have been removed from our published artifacts. If you find we have missed something please post in the Discussion Forum or email security@concourse-ci.org.
This release contains no code changes to the concourse or fly binaries.
📦 Bundled Resource Types
- bosh-io-release: [v1.3.6](https://github.com/concourse/bosh-io-release-resource/releases/tag/v1.3.6)
- bosh-io-stemcell: [v1.7.1](https://github.com/concourse/bosh-io-stemcell-resource/releases/tag/v1.7.1)
- docker-image: [v1.13.3](https://github.com/concourse/docker-image-resource/releases/tag/v1.13.3)
- git: [v1.24.1](https://github.com/concourse/git-resource/releases/tag/v1.24.1)
- github-release: [v1.14.2](https://github.com/concourse/github-release-resource/releases/tag/v1.14.2)
- hg: [v1.5.6](https://github.com/concourse/hg-resource/releases/tag/v1.5.6)
- mock: [v0.14.7](https://github.com/concourse/mock-resource/releases/tag/v0.14.7)
- pool: [v1.8.3](https://github.com/concourse/pool-resource/releases/tag/v1.8.3)
- registry-image: [v1.19.0](https://github.com/concourse/registry-image-resource/releases/tag/v1.19.0)
- s3: [v2.5.6](https://github.com/concourse/s3-resource/releases/tag/v2.5.6)
- semver: [v2.0.4](https://github.com/concourse/semver-resource/releases/tag/v2.0.4)
- time: [v1.11.5](https://github.com/concourse/time-resource/releases/tag/v1.11.5)
