Repository navigation
[Hotfix] Cherry-pick to release-v0.179.4 - #1199
Merged
truefoundry-saas merged 1 commit intoOct 28, 2026
Merged
truefoundry-saas merged 1 commit into
truefoundry-saas merged 1 commit into
Conversation
* INFRA-2029: trigger rebuild for updated tfy-internal/node:24 base image Co-authored-by: Cursor <cursoragent@cursor.com> * INFRA-2029: revert Dockerfile dummy change (public repo) Co-authored-by: Cursor <cursoragent@cursor.com> * INFRA-2029: trigger rebuild for updated tfy-internal/node:24 base image Dummy comment in charts/trueforge/values.yaml (no Dockerfile change). Co-authored-by: Cursor <cursoragent@cursor.com> * INFRA-2029: trigger rebuild for updated tfy-internal/node:24 base image Co-authored-by: Cursor <cursoragent@cursor.com> * INFRA-2029: add changeset for Node 24 vulnerability rebuild Patch bump so hotfixes from v0.177.x forward rebuild against remirrored tfy-internal/node:24 (v24.22.1). Co-authored-by: Cursor <cursoragent@cursor.com> * Update .changeset/infra-2029-node24-vuln-rebuild.md Co-authored-by: Chirag Jain <jain.chirag925@gmail.com> --------- Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: thesujai <sujayscience1234@gmail.com> Co-authored-by: Sujai Kumar Gupta <120925871+thesujai@users.noreply.github.com> Co-authored-by: Chirag Jain <jain.chirag925@gmail.com>
truefoundry-saas
requested a review
from debajyoti-truefoundry
as a code owner
October 28, 2026 08:37
🦋 Changeset detectedLatest commit: a502901 The changes in this PR will be included in the next version bump. This PR includes changesets to release 1 package
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
truefoundry-saas
requested review from
chiragjn,
heerambavi1998 and
thesujai
as code owners
October 28, 2026 08:37
truefoundry-saas
deleted the
cherry-pick/6bc39f74-9552-42a0-be2c-8e8076865cb0/release-v0.179.4
branch
October 28, 2026 08:50
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated cherry-pick for release request
6bc39f74-9552-42a0-be2c-8e8076865cb0.Source PRs (merged to main):
Do not merge manually — this PR is merged automatically when the release request is approved. If you do merge it yourself, use "Sync status" on the request so it stops showing as pending.
Note
Low Risk
Patch release metadata and a whitespace-only values change; risk is limited to CI publishing new images on the updated Node base, not application logic in this diff.
Overview
Cherry-picks the Node base vulnerability rebuild onto
release-v0.179.4via a new patch changeset for@truefoundry/trueforge.Published TrueForge images are expected to be rebuilt against the remirrored
tfy-internal/node:24and:24-devbases (Node v24.22.1 in ECR), so runtime and build artifacts pick up the updated platform image rather than a vulnerable layer.The only chart edit in this diff is a trailing blank line in
charts/trueforge/values.yaml; there are no new Helm tunables or deployment behavior changes here.Reviewed by Cursor Bugbot for commit a502901. Bugbot is set up for automated code reviews on this repo. Configure here.