Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Project: BuildpacksClear ×

Buildpacksv0.40.9CI/CD & App DeliveryAug 9, 2026

ACTION 3OTHER 1View full analysis

This release updates dependencies associated with published security advisories. Builders created with the pack CLI from this release contain lifecycle v0.21.0 by default.

Action needed (3)

securityhighThe github.com/go-git/go-git/v5 dependency update
github.com/go-git/go-git/v5 updates from v5.19.1 to v5.19.2 in buildpacks v0.40.9. The release note cites GHSA-hc8v-wwc9-vgxm.
securitymediumThe go.opentelemetry.io/otel dependency update
go.opentelemetry.io/otel updates from v1.43.0 to v1.44.0 in buildpacks v0.40.9. The release note cites GO-2026-5158 and CVE-2026-41178 for a baggage header that was not length-capped.
securityThe github.com/klauspost/compress dependency update
github.com/klauspost/compress updates from v1.18.6 to v1.18.7 in buildpacks v0.40.9. The release note cites GO-2026-5841 and GHSA-259r-337f-4rfw for an out-of-bounds read in s2.

Source ↗

Buildpacksv0.40.8CI/CD & App DeliveryJul 13, 2026

CHECK 1OTHER 3View full analysis

A maintenance release rebuilds the pack on Go 1.25.12 to address two disclosed standard library security issues. It also updates several dependencies and includes a newer default lifecycle version.

Check if affected (1)

securityhighGo 1.25.12 standard library rebuild for GO-2026-4970 and GO-2026-5856
Applies if you use 1.25.11 -> 1.25.12.
Moving the directive from 1.25.11 to 1.25.12 is sufficient to rebuild the image with a patched Go standard library. This release addresses GO-2026-4970 and GO-2026-5856.

Source ↗

Buildpacksv0.40.7CI/CD & App DeliveryJun 23, 2026

OTHER 3View full analysis

This release focuses on builder configuration and registry issue documentation. It changes the lifecycle version included in builders, corrects the yank registry issue body, and updates the suggested Heroku builder image.

Source ↗

Buildpacksv0.40.6CI/CD & App DeliveryMay 16, 2026

OTHER 3View full analysis

This release updates the lifecycle bundled into newly created builders and corrects trusted-builder inspection. It also adds a trusted Heroku builder, with a future recommendation change announced.

Source ↗

Buildpacksv0.40.5CI/CD & App DeliveryMay 15, 2026

OTHER 3View full analysis

This release includes a bundled lifecycle version change and updates to Go and other Go dependencies. The remaining release-note entries are headings or upgrade prerequisites.

Source ↗

Buildpacksv0.40.4CI/CD & App DeliveryMay 2, 2026

OTHER 2View full analysis

This release updates the lifecycle bundled into builders and corrects platform-specific builder image fetching for containerd-backed Docker daemons. The remaining release-note material describes headings or duplicate details of the same fix.

Source ↗

Buildpacksv0.40.3CI/CD & App DeliveryApr 22, 2026

OTHER 1View full analysis

This release contains a change to the lifecycle version used by builders created with the pack CLI. The recorded change is not included in the item list because no change entry was provided.

Source ↗

Buildpacksv0.40.2CI/CD & App DeliveryMar 13, 2026

OTHER 3View full analysis

This release updates builder-related behavior in the pack CLI, including the lifecycle version packaged by builders, lifecycle binary selection on amd64, and suggested builder options. It also adds ubi9, ubi10, and noble to the suggested builders.

Source ↗

Browse by month