v2.6.3-alauda-17

Changelog

• 0e91dfa chore(go): rebuild with Go 1.26.4 to fix stdlib CVEs (#44)

---

This release is intended for use only as part of the Alauda product suite. It is not recommended for use by individuals or teams outside of Alauda. Any consequences arising from its use are the sole responsibility of the user.

v2.5.4-alauda-19

Changelog

• 5e41970 chore(deps): update module golang.org/x/net to v0.53.0 [security] (alauda-v2.5.3) (#40)

---

This release is intended for use only as part of the Alauda product suite. It is not recommended for use by individuals or teams outside of Alauda. Any consequences arising from its use are the sole responsibility of the user.

v2.5.4-alauda-18

Changelog

• e1e1d30 chore(deps): update module github.com/jackc/pgx/v5 to v5.9.2 [security]
• 29d48f3 ci(e2e-kms): set SKIP_SETCAP=true for vault service

---

This release is intended for use only as part of the Alauda product suite. It is not recommended for use by individuals or teams outside of Alauda. Any consequences arising from its use are the sole responsibility of the user.

v2.6.3-alauda-16

Changelog

• 9ff1c8c fix(vuln): bump in-toto-golang to v0.11.0 (fix GHSA-pmwq-pjrm-6p5r) (#38)

---

This release is intended for use only as part of the Alauda product suite. It is not recommended for use by individuals or teams outside of Alauda. Any consequences arising from its use are the sole responsibility of the user.

v2.6.3-alauda-15

Changelog

• be6a698 chore: update Go toolchain and pgx dependency

---

This release is intended for use only as part of the Alauda product suite. It is not recommended for use by individuals or teams outside of Alauda. Any consequences arising from its use are the sole responsibility of the user.

v2.6.3-alauda-14

Changelog

• f96c190 chore: bump pgx/v5 dependency

---

This release is intended for use only as part of the Alauda product suite. It is not recommended for use by individuals or teams outside of Alauda. Any consequences arising from its use are the sole responsibility of the user.

v2.6.3-alauda-13

Changelog

• 175fb65 chore(deps): bump timestamp-authority/v2 to v2.0.6 (#37)

---

This release is intended for use only as part of the Alauda product suite. It is not recommended for use by individuals or teams outside of Alauda. Any consequences arising from its use are the sole responsibility of the user.

v2.6.3-alauda-12

Changelog

• 01ef3b2 chore(deps): bump indirect Go dependencies

---

This release is intended for use only as part of the Alauda product suite. It is not recommended for use by individuals or teams outside of Alauda. Any consequences arising from its use are the sole responsibility of the user.

v2.5.4-alauda-17

Changelog

• f7ec299 fix(deps): fix Go dependency vulnerabilities on alauda-v2.5.3

---

This release is intended for use only as part of the Alauda product suite. It is not recommended for use by individuals or teams outside of Alauda. Any consequences arising from its use are the sole responsibility of the user.

v2.6.3-alauda-11

Changelog

• 53c8a2b chore(ci): set GOTOOLCHAIN=auto in validate-release-job to support Go 1.26.2
• d149fcb chore(ci): update actions/setup-go to v6.4.0 and golang-cross digest for Go 1.26.2 support
• ae68602 chore(deps): bump Go version from 1.26.1 to 1.26.2
• e931328 chore(test): set GOTOOLCHAIN=auto in pkcs11 e2e test script

---

This release is intended for use only as part of the Alauda product suite. It is not recommended for use by individuals or teams outside of Alauda. Any consequences arising from its use are the sole responsibility of the user.