Merge pull request 'advisory-scan: NVD by CPE, so mattermost and mumble stop scanning as '?'' (#11 ) from feat/nvd-cpe-source into main

2026-08-11 22:17:13 +00:00
2 changed files with 0 additions and 20 deletions
@@ -18,11 +18,6 @@
 - AUTO_MIGRATIONS=true means DB migrations run automatically on backend startup. No manual step needed.
 - Minio tag uses a date-based RELEASE.YYYY-MM-DDTHH-MM-SSZ format — abra cannot parse it for upgrades;
  check manually on https://github.com/minio/minio/releases.
 - **2026-08-14: Minio stopped publishing Docker images after RELEASE.2025-09-07T16-13-09Z.**
  GitHub has a newer release (`RELEASE.2025-10-15T17-29-55Z`, published 2025-10-16, with CVE fix
  GHSA-jjjj-jwhf-8rgr), but the Docker image was never pushed to Docker Hub (returns 404; release
  notes say "clone the source and build the latest container"). quay.io checked — only 2022-era
  tags. As of this date, `RELEASE.2025-09-07T16-13-09Z` IS the newest available Docker image.
 - v5.2.0 adds two optional new env vars: DOCUMENT_ALL_ENDPOINT_ENABLED and OIDC_OP_USER_ENDPOINT_FORMAT.
  Both are backward-compatible (no action required for existing deployments).
 - Recipe version label convention: 0.X.Y+vA.B.C where A.B.C is the impress version.
@@ -50,18 +50,3 @@
 - 2026-08-07 run: operator directed 2.33.3 -> 2.34.2 (the newest). The whole 2.34.x line is still
  marked Pre-release on GitHub (2.33.5 holds the Latest badge); flagged in the PR body. No breaking
  changes across 2.33.3 -> 2.34.2; rolling upgrade safe (TypeORM migrations auto-run on boot).
 - 2.35.0 (2026-08-11, Pre-release): major feature release — self-hosted AI Assistant onboarding,
  Simplified Custom Auth credentials, Agent Builder test runs + HITL, Discord agent chat channel,
  local agent token counting, **VM expression engine now the default** (was opt-in), MCP SDK v2
  migration + MCP 2026-07-28 discovery handshake, Kafka Node v2, Salesforce OAuth2 JWT, GitHub
  dispatch timeout, X/Twitter Node OAuth2/API migrated to x.com, Azure Key Vault configurable
  endpoints, Postgres-version startup warning, workflow review improvements (diffs, metadata, version
  descriptions), and numerous core/editor bugfixes. No breaking compose/config/migration changes.
 - 2.35.1 (2026-08-12, Pre-release): 2 core bugfixes — data-tables resume scope, TLS options per hop
  through a proxy.
 - 2.35.2 (2026-08-13, Pre-release): 1 core bugfix — report real activation mode for triggers via
  publication outbox. **Deployed on cc-ci 2026-08-15**: 2.34.4→2.35.2, TypeORM migrations clean,
  editor served HTTP 200. No breaking changes, no N8N_* env renames, no required operator action.
 - 2.35.3 (2026-08-14, Pre-release): bugfixes (Google Ads v21→v25 API migration, MS Teams OAuth scope
  restore, workflow publication outbox abort deadline) + feature (skip update approval for workflows
  from same Instance AI session). Not deployed (2.35.2 was the survey target).