Compare commits

..

5 Commits

Author SHA1 Message Date
briquet bae6affcba 🔖(minor) bump release to 1.36.2 2026-10-21 21:59:23 +02:00
briquet 708f0d332e 🔒️(frontend) upgrade Node to 22.23.4 and 24.22.1
Pin Node images to the 2026-10-20 security releases
2026-10-21 21:58:23 +02:00
briquet bc1849cb1f 🔖(minor) bump release to 1.35.1 2026-10-21 19:13:00 +02:00
briquet ce29593929 🔒️(backend) upgrade pillow to fix CVE-2026-112403
Upgrade pillow to version 13.0.0 to fix a critical
JPEG decoder vulnerability

https://avd.aquasec.com/nvd/cve-2026-112403
2026-10-21 19:08:40 +02:00
briquet 3bedae346c 🔒️(docker) distrust compromised eMudhra emSign CA roots
Eight eMudhra intermediate CAs were compromised due to weak private
keys, and the emSign Root CA - G3 / ECC Root CA - G3 roots have been
removed from Mozilla and Chrome trust stores.

Update uv, and bump certifi to 2026.10.19 and require
ca-certificates >= 20261020-r0 in Alpine/Debian images

Node.js has not shipped a fixed bundled root store yet.
2026-10-21 19:08:40 +02:00
18 changed files with 28 additions and 22 deletions
+1 -1
View File
@@ -215,7 +215,7 @@ jobs:
- name: Install Node.js
uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
with:
node-version: "24"
node-version: "24.22.1"
- name: Install dependencies
run: cd src/frontend/ && npm ci --ignore-scripts
+7 -1
View File
@@ -8,7 +8,13 @@ and this project adheres to
## [Unreleased]
### Added
## [1.36.2] - 2026-10-21
### Fixed
- 🔒️(frontend) upgrade Node to 22.23.4 and 24.22.1 security releases
## [1.36.1] - 2026-10-21
### Changed
+1 -1
View File
@@ -39,7 +39,7 @@ RUN --mount=type=cache,target=/root/.cache/uv \
uv sync --locked --no-dev
# ---- mails ----
FROM node:22-alpine AS mail-builder
FROM node:22.23.4-alpine AS mail-builder
RUN apk upgrade --no-cache ca-certificates
+1 -1
View File
@@ -175,7 +175,7 @@ services:
working_dir: /app
node:
image: node:22-alpine
image: node:22.23.4-alpine
user: "${DOCKER_USER:-1000}"
environment:
HOME: /tmp
+1 -1
View File
@@ -1,5 +1,5 @@
# ---- Front-end image ----
FROM node:22-alpine AS frontend-deps
FROM node:22.23.4-alpine AS frontend-deps
RUN apk upgrade --no-cache ca-certificates
+1 -1
View File
@@ -1,7 +1,7 @@
[project]
name = "agents"
version = "1.35.0"
version = "1.36.2"
requires-python = ">=3.12"
dependencies = [
"livekit-agents==1.7.0",
+1 -1
View File
@@ -9,7 +9,7 @@ resolution-markers = [
[[package]]
name = "agents"
version = "1.35.0"
version = "1.36.2"
source = { virtual = "." }
dependencies = [
{ name = "boto3" },
+1 -1
View File
@@ -7,7 +7,7 @@ build-backend = "uv_build"
[project]
name = "meet"
version = "1.35.0"
version = "1.36.2"
authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
classifiers = [
"Development Status :: 5 - Production/Stable",
+1 -1
View File
@@ -1339,7 +1339,7 @@ wheels = [
[[package]]
name = "meet"
version = "1.35.0"
version = "1.36.2"
source = { editable = "." }
dependencies = [
{ name = "aiohttp" },
+1 -1
View File
@@ -1,4 +1,4 @@
FROM node:22-alpine AS frontend-deps
FROM node:22.23.4-alpine AS frontend-deps
RUN apk upgrade --no-cache ca-certificates
+2 -2
View File
@@ -1,12 +1,12 @@
{
"name": "meet",
"version": "1.35.0",
"version": "1.36.2",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "meet",
"version": "1.35.0",
"version": "1.36.2",
"dependencies": {
"@fontsource-variable/atkinson-hyperlegible-next": "5.3.0",
"@fontsource-variable/lexend": "5.3.0",
+1 -1
View File
@@ -1,7 +1,7 @@
{
"name": "meet",
"private": true,
"version": "1.35.0",
"version": "1.36.2",
"type": "module",
"scripts": {
"dev": "panda codegen && vite",
+2 -2
View File
@@ -1,12 +1,12 @@
{
"name": "mail_mjml",
"version": "1.35.0",
"version": "1.36.2",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "mail_mjml",
"version": "1.35.0",
"version": "1.36.2",
"license": "MIT",
"dependencies": {
"@html-to/text-cli": "0.6.1",
+2 -2
View File
@@ -1,6 +1,6 @@
{
"name": "mail_mjml",
"version": "1.35.0",
"version": "1.36.2",
"description": "An util to generate html and text django's templates from mjml templates",
"type": "module",
"dependencies": {
@@ -14,7 +14,7 @@
"build": "npm run build-mjml-to-html && npm run build-html-to-plain-text"
},
"volta": {
"node": "24.13.1"
"node": "24.22.1"
},
"repository": "https://github.com/suitenumerique/meet",
"author": "DINUM",
+2 -2
View File
@@ -1,12 +1,12 @@
{
"name": "sdk",
"version": "1.35.0",
"version": "1.36.2",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "sdk",
"version": "1.35.0",
"version": "1.36.2",
"license": "ISC",
"workspaces": [
"./library",
+1 -1
View File
@@ -1,6 +1,6 @@
{
"name": "sdk",
"version": "1.35.0",
"version": "1.36.2",
"author": "",
"license": "ISC",
"description": "",
+1 -1
View File
@@ -1,7 +1,7 @@
[project]
name = "summary"
version = "1.35.0"
version = "1.36.2"
requires-python = ">=3.13"
dependencies = [
"certifi>=2026.10.19",
+1 -1
View File
@@ -1484,7 +1484,7 @@ wheels = [
[[package]]
name = "summary"
version = "1.35.0"
version = "1.36.2"
source = { editable = "." }
dependencies = [
{ name = "boto3" },