MikeM

Exp/upgrade manylinux

1

Upgrade major vrsionas this deprecate older pip versions as deprecates manlinux1 in favour of manylinux2010 which means pip >= 19.0 which means minimum python of 3.7.3+, 3.8.0+ See https://github.com/pypa/manylinux for...

Severity schema should it be a map rather than an array?

3

I noted in latest version of schema the addition of severity but seems to allow for multiple score of the same type without a means to distinguish so if you...

multistage build enabling and using busybox to enable RUN fails in multi stage build works with docker

1

**Actual behavior** When building a multistage image and using busybox as a shell in secondary stage works when using docker but fails when using kaniko. ``` Preparing to unpack .../busybox_1%3a1.30.1-4ubuntu6.4_amd64.deb...

I have read issue #700 and read the argument the ucrrent implementation is "more flexible". Having been burnt with this just recently I would argue the inconsistency is worse. If...

See issue #968 See my comment at the end of linked issue because you still filter host names to require "." in front the library still remains inconsistent with standard...

[GHSA-925w-6v3x-g4j4] Source Code Exposure Vulnerability in React Server Components

2

**Updates** - Affected products **Comments** The packages match what is in GHSA-9qr9-h5gf-34mp advisory GHSA-9qr9-h5gf-34mp lacks alias to CVE-2025-55812 but suggestions for improvements lack the ability to suggest additional aliases. Given...