Releases: upbound/function-openai
Release list
v0.3.8
Summary
This release includes critical security fixes and dependency updates to address multiple CVE vulnerabilities.
Security Fixes
-
Go Runtime Update: Updated to Go 1.25.12 to address:
- GO-2026-5856
- GO-2026-4970
-
Dependency Security Updates:
- Updated
google.golang.org/grpcto v1.82.1 (fixes GHSA-hrxh-6v49-42gf) - Updated
golang.org/x/textto v0.39.0 (fixes GO-2026-5970) - Updated
golang.org/x/netto v0.56.0 (fixes GO-2026-5942)
- Updated
Infrastructure
- Updated CI workflow to use Go 1.25.12
v0.3.7
Summary
This release includes security fixes and dependency updates.
Highlights
- Security vulnerability remediation for Go runtime and dependencies
- Updated Go version to 1.25.11 (addresses CVE-2026-42504, CVE-2026-42507, CVE-2026-27145, and related vulnerabilities)
- Updated golang.org/x/crypto to v0.52.0
- Updated golang.org/x/net to v0.55.0
- Updated golang.org/x/sys to v0.45.0
- Updated CI workflow Go version to 1.25.11
v0.3.6
Summary
This release includes security fixes for Go standard library vulnerabilities.
Highlights
- Security: Updated Go version to 1.25.10 to remediate 11 CVE vulnerabilities (6 High, 5 Medium severity)
- Fixed CVEs: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811, CVE-2026-42501, CVE-2026-39817, CVE-2026-39826, CVE-2026-39825, CVE-2026-39823, CVE-2026-39819
- Updated CI workflow to use Go 1.25.10
v0.3.5
Summary
This release includes critical security fixes for Go runtime vulnerabilities.
Highlights
- Security vulnerability remediation for Go runtime
- Updated Go version to 1.25.9 to address multiple CVEs:
v0.3.4
Summary
This release includes critical security fixes and dependency updates.
Highlights
- Security vulnerability remediation for Go runtime and dependencies:
- Updated Go version to 1.25.8 (fixes CVE-2026-25679, CVE-2026-27142, CVE-2026-27139)
- Updated google.golang.org/grpc to v1.79.3 (fixes GHSA-p77j-4mvh-x3m3)
- Updated github.com/buger/jsonparser to v1.1.2 (fixes GHSA-6g7g-w4f8-9c9x)
- CI/CD improvements:
- Migrated .golangci.yml to v2 syntax for golangci-lint compatibility
- Updated golangci-lint to v2.11.4 for Go 1.25.8 support
- Upgraded golangci-lint-action to v7
v0.3.3
Summary
This release includes security fixes and dependency updates.
Highlights
- Security vulnerability remediation for Go runtime
- Updated Go version to 1.24.13 (fixes CVE-2025-68121, CVE-2025-61732)
- Updated CI workflow to use Go 1.24.13
v0.3.2
Summary
This release includes security fixes and dependency updates.
Highlights
- Security vulnerability remediation addressing multiple CVEs in Go runtime
- Updated Go version to 1.24.12 to fix CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, and CVE-2025-61731
v0.3.1
Summary
This release includes security fixes and dependency updates.
Highlights
- Updated Go toolchain to 1.24.11 to address multiple CVEs (CVE-2025-61723, CVE-2025-61725, CVE-2025-61729, CVE-2025-58187, CVE-2025-58188, CVE-2025-58185, CVE-2025-47912, CVE-2025-58186, CVE-2025-61724, CVE-2025-58189, CVE-2025-58183, CVE-2025-61727)
- Updated golang.org/x/crypto to v0.45.0 to address GHSA-j5w8-q4qc-rx2x and GHSA-f6x5-jh6r-wrfv
v0.2.1
Summary
This release includes security fixes and dependency updates.
Highlights
- Security vulnerability remediation addressing 14 CVEs
- Updated Go version to 1.24.11 (fixes CVE-2025-61723, CVE-2025-61725, CVE-2025-58188, CVE-2025-61729, CVE-2025-58187, CVE-2025-58185, CVE-2025-47912, CVE-2025-58186, CVE-2025-61724, CVE-2025-58189, CVE-2025-58183, CVE-2025-61727)
- Updated golang.org/x/crypto to v0.45.0 (fixes GHSA-j5w8-q4qc-rx2x, GHSA-f6x5-jh6r-wrfv)
- CI improvements for Go version and up CLI stability
v0.1.1
Summary
This release includes security fixes and dependency updates.
Highlights
- Security vulnerability remediation addressing 14 CVEs/GHSAs
- Updated Go version to 1.24.11 to address 12 stdlib vulnerabilities (including 5 High severity)
- Updated golang.org/x/crypto to v0.45.0 to address 2 security advisories
Security Fixes
| Severity | Count | Component |
|---|---|---|
| High | 5 | Go stdlib |
| Medium | 9 | Go stdlib, golang.org/x/crypto |