v0.4.7

ACP-20140 - Update alpine image from 3.19 to 3.20 (#82)

* Update alpine image from 3.19 to 3.20

* update the alpine image to 3.20.2

* add line to Dockerfile RUN apk update && apk upgrade --no-cache for Clamav

* add Vulnerability to .trivyignore

* change SUPERCRONIC_URL ENV

* add CVE-2024-24791 to .trivyignore

* add empty line to .trivyignore file

---------

Co-authored-by: humayun-alam <[email protected]>

v0.4.6

This is security patch which fixes several vulnerabilities in container images.

Changes

ClamAV-HTTP:

• Upgrade Golang from v1.17 to v1.21.
• Upgrade Alpine from 3.18 to 3.19.
• Upgrade python:3.9.16-alpine3.18 to python:3.9.18-alpine3.19.

ClamAV-Mirror:

• Upgrade ClamAV version from 1.1.2-r0 to 1.2.2-r0.

ClamAV:

• Upgrade ClamAV version from 1.1.2-r0 to 1.2.2-r0.
• Upgrade Alpine base image from 3.18 to 3.19.

0.4.0 - Optional k8s Ingress

An optional Ingress Kubernetes resource has been added.

0.3.8

This is a routine release to remove security CVE's from the container images

Changes:

1. ClamAV upgrade to 0.104.3
2. Alpine base image 3.15/3.16
3. nginx-proxy image upgraded to v4.2.0

0.3.7

Updated packages for security vulnerabilities and including the 0.3.6-helmreload-fix patch changes in this release.

0.3.6

Use v1 API version for cert-manager.io resources

0.3.5

Fix versions in Chart

0.3.4

• nginx reload certificats every 12 hours in case they have been updated by cert-manager
• version patching

0.3.3

Merge pull request #26 from UKHomeOffice/acp-8284

Update packages to patch CVE-2021-33503

Fixed security Vulnerabilities

Merge pull request #25 from UKHomeOffice/acp-8138

Updating image dependencies and migrated pipeline to Drone v1