Commits

Commits on Oct 2, 2026

UID2-8003: preventive upgrade for CVE-2026-102276: brace-expansion 5.0.9 -> 5.0.10 (#227)
swibi-ttd
authored
d740a8c
UID2-8009: preventive upgrade for CVE-2026-101898: axios 1.18.1 -> 1.20.0 (#228)
swibi-ttd
authored
bfcaba9

Commits on Sep 25, 2026

UID2-7962: suppress CVE-2026-93990 in .trivyignore (#226)
swibi-ttd
authored
68d848b

Commits on Sep 23, 2026

UID2-7877: Scan all sample Docker images for vulnerabilities (#216)
swibi-ttd
authored
dcdc9fa

Commits on Sep 21, 2026

[CI Pipeline] Released Minor version: 0.9.0 [no-jira - reason: automated release v0.9.0]
github-actions[bot]
authored
6321b4c
UID2-7920: resolve sample image vulnerabilities (#219)
swibi-ttd
authored
2e5ed51

Commits on Sep 18, 2026

UID2-7874: separate React build and runtime dependencies (#214)

swibi-ttd
and
github-actions[bot]
authored
a777b8a

Commits on Sep 17, 2026

UID2-7873: suppress CVE-2026-1615 in .trivyignore (#213)
swibi-ttd
authored
fdadbd3

Commits on Sep 11, 2026

UID2-7851/UID2-7852: Suppress js-yaml and svgo CVEs, not reachable at runtime (#212)

mcollins-ttd
and
claude
authored
18b335c

Commits on Sep 3, 2026

UID2-7812, UID2-7813, UID2-7814, UID2-7815: suppress 4 CVEs in .trivyignore (exp 2026-12-03) (#211)
swibi-ttd
authored
d167996

Commits on Sep 2, 2026

UID2-7802, UID2-7803: suppress 2 CVEs in .trivyignore (exp 2026-12-02) (#210)
swibi-ttd
authored
1ff08c1

Commits on Aug 18, 2026

UID2-7707: suppress CVE-2026-73650 in .trivyignore (exp 2026-11-18) (#209)
swibi-ttd
authored
4fa7aed

Commits on Aug 11, 2026

UID2-7658, UID2-7659: suppress 2 CVEs in .trivyignore (exp 2026-11-11) (#208)
swibi-ttd
authored
904a1d2

Commits on Aug 6, 2026

UID2-7633, UID2-7619: suppress 2 CVEs in .trivyignore (#206)
swibi-ttd
authored
f5994b6

Commits on Jul 27, 2026

[Security] Upgrade brace-expansion to 5.0.8 and postcss to 8.5.18 (#203)

cYKatherine
and
claude
authored
d21d8c4

Commits on Jul 23, 2026

UID2-7554/7555: bump fast-uri npm override to ^3.1.4; suppress svgo GHSA-2p49 (#202)

mcollins-ttd
and
claude
authored
1b60421

Commits on Jul 22, 2026

UID2-7538/7539/7540/7541: bump axios, brace-expansion, js-yaml, shell-quote across web-integrations examples (#201)

mcollins-ttd
and
claude
authored
a08b24c

Commits on Jul 17, 2026

UID2-7491: bump websocket-driver to 0.7.5 (CVE-2026-54466) (#200)
sunnywu
authored
731bb79

Commits on Jul 7, 2026

UID2-7426: add check_jira_key required-status-check caller (#199)
jon8787
authored
ac5666f

Commits on Jul 6, 2026

Merge pull request #198 from IABTechLab/swi-UID2-7011-zizmor-scan
swibi-ttd
authored
da027d9

Commits on Jul 3, 2026

UID2-7011: add zizmor workflow-security scan (report-only)

swibi-ttd
and
claude
committed
57a2402

Commits on Jul 2, 2026

Merge pull request #197 from IABTechLab/bmz-UID2-7411-reverse-proxy-apk-upgrade
BehnamMozafari
authored
0f8897c

Commits on Jul 1, 2026

UID2-7411: upgrade Alpine packages in reverse-proxy image to remediate HIGH/CRITICAL vulns

BehnamMozafari
and
claude
committed
dcb5604

Commits on Jun 23, 2026

[CI Pipeline] Released Patch version: 0.8.21

Release Workflow
authored and
UID2SourceAdmin
committed
7c439be

Commits on Jun 16, 2026

Commits on Jun 12, 2026

UID2-7289: upgrade shell-quote to 1.8.4 via npm overrides (CVE-2026-9277) (#194)

cYKatherine
and
claude
authored
0d33b6c

Commits on Jun 9, 2026

Commits on May 12, 2026

UID2-7059: fix CVE-2026-44728 (@babel), CVE-2026-6321 & CVE-2026-6322 (fast-uri) (#192)
jon8787
authored
62ac0f2