➔ Kubernetes Java Client Fixes Path Traversal in Copy Utility
| 5 minute read
The kubernetes-client/java project recently shipped a critical security fix to prevent path traversal when copying files from pods using a non-tar fallback mechanism. This update also brings better build consistency through Bazel dependency synchronization and several mandatory library bumps for security auditing.
➔ Terragrunt This Week: Dependency Cleanup, CAS Expansion, and Panic Fixes
| 4 minute read
Terragrunt landed 29 commits this past week. The bulk of the work falls into two buckets: a systematic purge of third party Go dependencies in favor of the standard library, and a significant expansion of the content addressable storage (CAS) layer to support non git sources. Several panic fixes also shipped that affect real user workflows.