chore(deps): update neuvector package dependencies by renovate[bot] · Pull Request #38 · uds-packages/neuvector

renovate · 2026-03-03T13:06:16Z

This PR contains the following updates:

Package	Update	Change
core (source)	patch	`2.8.10` → `2.8.11`
crd	patch	`2.8.10` → `2.8.11`
docker.io/neuvector/controller (source)	patch	`5.4.8` → `5.4.9`
docker.io/neuvector/enforcer (source)	patch	`5.4.8` → `5.4.9`
docker.io/neuvector/manager (source)	patch	`5.4.8` → `5.4.9`
quay.io/rfcurated/neuvector/controller	patch	`5.4.8-jammy-scratch-fips-rfcurated` → `5.4.9-jammy-scratch-fips-rfcurated`
quay.io/rfcurated/neuvector/controller	patch	`5.4.8` → `5.4.9`
quay.io/rfcurated/neuvector/enforcer	patch	`5.4.8-jammy-scratch-fips-rfcurated` → `5.4.9-jammy-scratch-fips-rfcurated`
quay.io/rfcurated/neuvector/manager	patch	`5.4.8-jammy-scratch-fips-rfcurated` → `5.4.9-jammy-scratch-fips-rfcurated`
registry1.dso.mil/ironbank/neuvector/neuvector/controller (source)	patch	`5.4.8` → `5.4.9`
registry1.dso.mil/ironbank/neuvector/neuvector/enforcer (source)	patch	`5.4.8` → `5.4.9`
registry1.dso.mil/ironbank/neuvector/neuvector/manager (source)	patch	`5.4.8` → `5.4.9`

Release Notes

neuvector/neuvector-helm (core)

`v2.8.11`: Release 2.8.11

Compare Source

What's Changed

Add FOSSA scanning workflow by @macedogm in #540
chore: bump helm chart versions for NeuVector 5.4.9 by @williamlin-suse in #545

New Contributors

@macedogm made their first contribution in #540

Full Changelog: neuvector/neuvector-helm@v2.8.10...v2.8.11

neuvector/neuvector (quay.io/rfcurated/neuvector/controller)

`v5.4.9`: Release

Compare Source

What's Changed

NVSHAS-9921: Managed cluster deployed via configmap and without persistent storage should be able to reconnect after a disconnect by @williamlin-suse in #2188

Bugs Fixed

NVSHAS-10061: Remote Repository scan reporting "RPC request fail" by @pohanhuangtw in #2129
NVSHAS-10175: Refactor the OPA generate function to avoid rego online verify by @pohanhuangtw in #2172
NVSHAS-10214: [Controller] InstallationID is used for encrypt/decrypt user token (24) by @williamlin-suse in #2201
NVSHAS-10218: [Controller] Lack of validation for RSA Keysize (23) by @williamlin-suse in #2200
NVSHAS-10221: [Controller] Export local groups(and other policies) thru redirected UI from primary cluster always fails by @williamlin-suse in #2184

Configuration

📅 Schedule: Branch creation - Between 07:00 AM and 08:59 AM, only on Tuesday ( * 7-8 * * 2 ) in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-03-03T14:03:07Z

Full scan comparison results are too large to post as a comment. Link to full results artifact: Results
Summarized results are below:

neuvector/controller

neuvector/controller `5.4.8` -> `5.4.9`

New vulnerabilities: 0
Fixed vulnerabilities: 49
Existing vulnerabilities: 14

neuvector/manager

neuvector/manager `5.4.8` -> `5.4.9`

New vulnerabilities: 0
Fixed vulnerabilities: 39
Existing vulnerabilities: 20

neuvector/updater

neuvector/updater `` -> `sha256:3741c194f074ab003b2330c0d01e47e311f60f0006cb4a02f26637d08c368322`

New vulnerabilities: 0
Fixed vulnerabilities: 31
Existing vulnerabilities: 11

neuvector/scanner

neuvector/scanner `` -> `sha256:2e5bf6b7a3e329eda73f6cf34a7eb065418cbc272bd0b94adba327b28e305d9c`

New vulnerabilities: 0
Fixed vulnerabilities: 36
Existing vulnerabilities: 1

neuvector/enforcer

neuvector/enforcer `5.4.8` -> `5.4.9`

New vulnerabilities: 0
Fixed vulnerabilities: 88
Existing vulnerabilities: 22

registry1.dso.mil/ironbank/neuvector/neuvector/manager

registry1.dso.mil/ironbank/neuvector/neuvector/manager `5.4.8` -> `5.4.9`

New vulnerabilities: 0
Fixed vulnerabilities: 63
Existing vulnerabilities: 153

registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal

registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal `9.7` -> `9.7`

New vulnerabilities: 0
Fixed vulnerabilities: 45
Existing vulnerabilities: 109

registry1.dso.mil/ironbank/neuvector/neuvector/scanner

registry1.dso.mil/ironbank/neuvector/neuvector/scanner `6` -> `6`

New vulnerabilities: 0
Fixed vulnerabilities: 52
Existing vulnerabilities: 109

registry1.dso.mil/ironbank/neuvector/neuvector/enforcer

registry1.dso.mil/ironbank/neuvector/neuvector/enforcer `5.4.8` -> `5.4.9`

New vulnerabilities: 0
Fixed vulnerabilities: 53
Existing vulnerabilities: 118

registry1.dso.mil/ironbank/neuvector/neuvector/controller

registry1.dso.mil/ironbank/neuvector/neuvector/controller `5.4.8` -> `5.4.9`

New vulnerabilities: 0
Fixed vulnerabilities: 94
Existing vulnerabilities: 130

quay.io/rfcurated/neuvector/controller

quay.io/rfcurated/neuvector/controller `5.4.8-jammy-scratch-fips-rfcurated` -> `5.4.9-jammy-scratch-fips-rfcurated`

New vulnerabilities: 0
Fixed vulnerabilities: 9
Existing vulnerabilities: 1

quay.io/rfcurated/neuvector/manager

quay.io/rfcurated/neuvector/manager `5.4.8-jammy-scratch-fips-rfcurated` -> `5.4.9-jammy-scratch-fips-rfcurated`

New vulnerabilities: 0
Fixed vulnerabilities: 8
Existing vulnerabilities: 1

quay.io/rfcurated/neuvector/enforcer

quay.io/rfcurated/neuvector/enforcer `5.4.8-jammy-scratch-fips-rfcurated` -> `5.4.9-jammy-scratch-fips-rfcurated`

New vulnerabilities: 0
Fixed vulnerabilities: 10
Existing vulnerabilities: 1

quay.io/rfcurated/curl

quay.io/rfcurated/curl `8.17.0-jammy-scratch-fips-rfcurated` -> `8.18.0-jammy-scratch-fips-rfcurated`

New vulnerabilities: 0
Fixed vulnerabilities: 6
Existing vulnerabilities: 2

quay.io/rfcurated/neuvector/scanner

quay.io/rfcurated/neuvector/scanner `latest-jammy-scratch-fips-rfcurated` -> `latest-jammy-scratch-fips-rfcurated`

New vulnerabilities: 0
Fixed vulnerabilities: 14
Existing vulnerabilities: 2

generated with uds-pk scan compare

| datasource | package | from | to | | ---------- | --------------------------------------------------------- | ------ | ------ | | helm | core | 2.8.10 | 2.8.11 | | helm | crd | 2.8.10 | 2.8.11 | | docker | docker.io/neuvector/controller | 5.4.8 | 5.4.9 | | docker | docker.io/neuvector/enforcer | 5.4.8 | 5.4.9 | | docker | docker.io/neuvector/manager | 5.4.8 | 5.4.9 | | docker | quay.io/rfcurated/neuvector/controller | 5.4.8 | 5.4.9 | | docker | quay.io/rfcurated/neuvector/enforcer | 5.4.8 | 5.4.9 | | docker | quay.io/rfcurated/neuvector/manager | 5.4.8 | 5.4.9 | | docker | registry1.dso.mil/ironbank/neuvector/neuvector/controller | 5.4.8 | 5.4.9 | | docker | registry1.dso.mil/ironbank/neuvector/neuvector/enforcer | 5.4.8 | 5.4.9 | | docker | registry1.dso.mil/ironbank/neuvector/neuvector/manager | 5.4.8 | 5.4.9 |

renovate Bot requested a review from a team as a code owner March 3, 2026 13:06

renovate Bot added the package-deps label Mar 3, 2026

renovate Bot force-pushed the renovate/neuvector-package-dependencies branch from 5fbeebc to 0b2c502 Compare March 6, 2026 21:47

chore: add more retry/delay

ba276d4

chance-coleman approved these changes Mar 9, 2026

View reviewed changes

jasonwashburn approved these changes Mar 9, 2026

View reviewed changes

mjnagel merged commit 1bb3171 into main Mar 9, 2026
17 of 18 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update neuvector package dependencies#38

chore(deps): update neuvector package dependencies#38
mjnagel merged 2 commits intomainfrom
renovate/neuvector-package-dependencies

renovate Bot commented Mar 3, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Mar 3, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

renovate Bot commented Mar 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.8.11: Release 2.8.11

What's Changed

New Contributors

v5.4.9: Release

What's Changed

Bugs Fixed

Configuration

Uh oh!

github-actions Bot commented Mar 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

neuvector/controller 5.4.8 -> 5.4.9

neuvector/manager 5.4.8 -> 5.4.9

neuvector/updater `` -> sha256:3741c194f074ab003b2330c0d01e47e311f60f0006cb4a02f26637d08c368322

neuvector/scanner `` -> sha256:2e5bf6b7a3e329eda73f6cf34a7eb065418cbc272bd0b94adba327b28e305d9c

neuvector/enforcer 5.4.8 -> 5.4.9

registry1.dso.mil/ironbank/neuvector/neuvector/manager 5.4.8 -> 5.4.9

registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal 9.7 -> 9.7

registry1.dso.mil/ironbank/neuvector/neuvector/scanner 6 -> 6

registry1.dso.mil/ironbank/neuvector/neuvector/enforcer 5.4.8 -> 5.4.9

registry1.dso.mil/ironbank/neuvector/neuvector/controller 5.4.8 -> 5.4.9

quay.io/rfcurated/neuvector/controller 5.4.8-jammy-scratch-fips-rfcurated -> 5.4.9-jammy-scratch-fips-rfcurated

quay.io/rfcurated/neuvector/manager 5.4.8-jammy-scratch-fips-rfcurated -> 5.4.9-jammy-scratch-fips-rfcurated

quay.io/rfcurated/neuvector/enforcer 5.4.8-jammy-scratch-fips-rfcurated -> 5.4.9-jammy-scratch-fips-rfcurated

quay.io/rfcurated/curl 8.17.0-jammy-scratch-fips-rfcurated -> 8.18.0-jammy-scratch-fips-rfcurated

quay.io/rfcurated/neuvector/scanner latest-jammy-scratch-fips-rfcurated -> latest-jammy-scratch-fips-rfcurated

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate Bot commented Mar 3, 2026 •

edited

Loading

`v2.8.11`: Release 2.8.11

`v5.4.9`: Release

github-actions Bot commented Mar 3, 2026 •

edited

Loading

neuvector/controller `5.4.8` -> `5.4.9`

neuvector/manager `5.4.8` -> `5.4.9`

neuvector/updater `` -> `sha256:3741c194f074ab003b2330c0d01e47e311f60f0006cb4a02f26637d08c368322`

neuvector/scanner `` -> `sha256:2e5bf6b7a3e329eda73f6cf34a7eb065418cbc272bd0b94adba327b28e305d9c`

neuvector/enforcer `5.4.8` -> `5.4.9`

registry1.dso.mil/ironbank/neuvector/neuvector/manager `5.4.8` -> `5.4.9`

registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal `9.7` -> `9.7`

registry1.dso.mil/ironbank/neuvector/neuvector/scanner `6` -> `6`

registry1.dso.mil/ironbank/neuvector/neuvector/enforcer `5.4.8` -> `5.4.9`

registry1.dso.mil/ironbank/neuvector/neuvector/controller `5.4.8` -> `5.4.9`

quay.io/rfcurated/neuvector/controller `5.4.8-jammy-scratch-fips-rfcurated` -> `5.4.9-jammy-scratch-fips-rfcurated`

quay.io/rfcurated/neuvector/manager `5.4.8-jammy-scratch-fips-rfcurated` -> `5.4.9-jammy-scratch-fips-rfcurated`

quay.io/rfcurated/neuvector/enforcer `5.4.8-jammy-scratch-fips-rfcurated` -> `5.4.9-jammy-scratch-fips-rfcurated`

quay.io/rfcurated/curl `8.17.0-jammy-scratch-fips-rfcurated` -> `8.18.0-jammy-scratch-fips-rfcurated`

quay.io/rfcurated/neuvector/scanner `latest-jammy-scratch-fips-rfcurated` -> `latest-jammy-scratch-fips-rfcurated`