2.73.0

2.73.0

Release Date: July 23, 2026

Go Package Updates for cert-injector

• Bumped go.mod package 'github.com/go-logr/logr' from 'v1.4.3' to 'v1.4.4'

Go Package Updates for diff-exporter

• Bumped go.mod package 'github.com/go-logr/logr' from 'v1.4.3' to 'v1.4.4'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260713224248-f5fc221cf8c4' to 'v0.0.0-20260720211330-0afa2a65878a'
• Bumped go.mod package 'google.golang.org/grpc' from 'v1.82.0' to 'v1.82.1'

Go Package Updates for groot-windows

• Bumped go.mod package 'code.cloudfoundry.org/groot' from 'v0.115.0' to 'v0.116.0'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.78.0' to 'v3.79.0'
• Bumped go.mod package 'github.com/containers/ocicrypt' from 'v1.3.1' to 'v1.3.2'
• Bumped go.mod package 'github.com/go-logr/logr' from 'v1.4.3' to 'v1.4.4'

Go Package Updates for nstar

• Bumped go.mod package 'github.com/go-logr/logr' from 'v1.4.3' to 'v1.4.4'

Go Package Updates for winc

• Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260713130104-9e27d7fd7234' to 'v0.0.0-20260720130235-c9ed4c5ab2e9'
• Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.80.0' to 'v0.81.0'
• Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.181' to 'v0.2.182'
• Bumped go.mod package 'github.com/go-logr/logr' from 'v1.4.3' to 'v1.4.4'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260713224248-f5fc221cf8c4' to 'v0.0.0-20260720211330-0afa2a65878a'
• Bumped go.mod package 'google.golang.org/grpc' from 'v1.82.0' to 'v1.82.1'

✨ Built with go 1.26.5

Full Changelog: v2.72.0...v2.73.0

Resources

• Download release 2.73.0 from bosh.io.

2.72.0

2.72.0

Release Date: July 16, 2026

Changes

• Merge pull request #52 from cloudfoundry/feature/TNZGOV-10660-nstar-path-traversal - Author: Geoff Franks - SHA: 028f777
• reject paths with '..' prefix before Join - Author: Amelia Downs - SHA: c519f03

Go Package Updates for cert-injector

• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260604005048-7023385849c0' to 'v0.0.0-20260709232956-b9395ee17fa0'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.37.0' to 'v0.38.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.56.0' to 'v0.57.0'
• Bumped go.mod package 'golang.org/x/sync' from 'v0.21.0' to 'v0.22.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.46.0' to 'v0.47.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.39.0' to 'v0.40.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.47.0' to 'v0.48.0'

Go Package Updates for diff-exporter

• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260604005048-7023385849c0' to 'v0.0.0-20260709232956-b9395ee17fa0'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.37.0' to 'v0.38.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.56.0' to 'v0.57.0'
• Bumped go.mod package 'golang.org/x/sync' from 'v0.21.0' to 'v0.22.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.46.0' to 'v0.47.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.39.0' to 'v0.40.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.47.0' to 'v0.48.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260706201446-f0a921348800' to 'v0.0.0-20260713224248-f5fc221cf8c4'

Go Package Updates for groot-windows

• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.71.0' to 'v0.73.0'
• Bumped go.mod package 'code.cloudfoundry.org/groot' from 'v0.114.0' to 'v0.115.0'
• Bumped go.mod package 'code.cloudfoundry.org/hydrator' from 'v0.96.0' to 'v0.98.0'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.77.0' to 'v3.78.0'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260604005048-7023385849c0' to 'v0.0.0-20260709232956-b9395ee17fa0'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.37.0' to 'v0.38.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.56.0' to 'v0.57.0'
• Bumped go.mod package 'golang.org/x/sync' from 'v0.21.0' to 'v0.22.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.46.0' to 'v0.47.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.39.0' to 'v0.40.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.47.0' to 'v0.48.0'

Go Package Updates for nstar

• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260604005048-7023385849c0' to 'v0.0.0-20260709232956-b9395ee17fa0'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.37.0' to 'v0.38.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.56.0' to 'v0.57.0'
• Bumped go.mod package 'golang.org/x/sync' from 'v0.21.0' to 'v0.22.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.46.0' to 'v0.47.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.39.0' to 'v0.40.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.47.0' to 'v0.48.0'

Go Package Updates for winc

• Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260629130111-5ee9a1ab59ab' to 'v0.0.0-20260713130104-9e27d7fd7234'
• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.71.0' to 'v0.73.0'
• Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.79.0' to 'v0.80.0'
• Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.180' to 'v0.2.181'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260604005048-7023385849c0' to 'v0.0.0-20260709232956-b9395ee17fa0'
• Bumped go.mod package 'golang.org/x/crypto' from 'v0.53.0' to 'v0.54.0'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.37.0' to 'v0.38.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.56.0' to 'v0.57.0'
• Bumped go.mod package 'golang.org/x/sync' from 'v0.21.0' to 'v0.22.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.46.0' to 'v0.47.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.39.0' to 'v0.40.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.47.0' to 'v0.48.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260706201446-f0a921348800' to 'v0.0.0-20260713224248-f5fc221cf8c4'

✨ Built with go 1.26.5

Full Changelog: v2.71.0...v2.72.0

Resources

• Download release 2.72.0 from bosh.io.

2.71.0

2.71.0

Release Date: July 08, 2026

Changes

• Upgrade golang-1.26-windows (1.26.5) - Author: App Platform Runtime Working Group CI Bot - SHA: 205489c

Go Package Updates for cert-injector

• Bumped go.mod package 'golang.org/x/text' from 'v0.38.0' to 'v0.39.0'

Go Package Updates for diff-exporter

• Bumped go.mod package 'golang.org/x/text' from 'v0.38.0' to 'v0.39.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260630182238-925bb5da69e7' to 'v0.0.0-20260706201446-f0a921348800'

Go Package Updates for groot-windows

• Bumped go.mod package 'code.cloudfoundry.org/groot' from 'v0.113.0' to 'v0.114.0'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.76.0' to 'v3.77.0'
• Bumped go.mod package 'github.com/containers/ocicrypt' from 'v1.3.0' to 'v1.3.1'
• Bumped go.mod package 'golang.org/x/text' from 'v0.38.0' to 'v0.39.0'

Go Package Updates for nstar

• Bumped go.mod package 'golang.org/x/text' from 'v0.38.0' to 'v0.39.0'

Go Package Updates for winc

• Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.78.0' to 'v0.79.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.38.0' to 'v0.39.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260630182238-925bb5da69e7' to 'v0.0.0-20260706201446-f0a921348800'

✨ Built with go 1.26.5

Full Changelog: v2.70.0...v2.71.0

Resources

• Download release 2.71.0 from bosh.io.

2.70.0

2.70.0

Release Date: July 02, 2026

Go Package Updates for cert-injector

• Bumped go.mod package 'golang.org/x/tools' from 'v0.46.0' to 'v0.47.0'

Go Package Updates for diff-exporter

• Bumped go.mod package 'golang.org/x/tools' from 'v0.46.0' to 'v0.47.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260622175928-b703f567277d' to 'v0.0.0-20260630182238-925bb5da69e7'
• Bumped go.mod package 'google.golang.org/grpc' from 'v1.81.1' to 'v1.82.0'

Go Package Updates for groot-windows

• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.70.0' to 'v0.71.0'
• Bumped go.mod package 'code.cloudfoundry.org/hydrator' from 'v0.95.0' to 'v0.96.0'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.75.0' to 'v3.76.0'
• Bumped go.mod package 'github.com/moby/sys/user' from 'v0.4.0' to 'v0.4.1'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.46.0' to 'v0.47.0'

Go Package Updates for nstar

• Bumped go.mod package 'golang.org/x/tools' from 'v0.46.0' to 'v0.47.0'

Go Package Updates for winc

• Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260622130231-57c8cb0f1d6e' to 'v0.0.0-20260629130111-5ee9a1ab59ab'
• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.70.0' to 'v0.71.0'
• Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.77.0' to 'v0.78.0'
• Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.179' to 'v0.2.180'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.46.0' to 'v0.47.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260622175928-b703f567277d' to 'v0.0.0-20260630182238-925bb5da69e7'
• Bumped go.mod package 'google.golang.org/grpc' from 'v1.81.1' to 'v1.82.0'

Blob Updates

• Bumped blob '7zip/7z2601.msi' to '7zip/7z2602.msi'

✨ Built with go 1.26.4

Full Changelog: v2.69.0...v2.70.0

Resources

• Download release 2.70.0 from bosh.io.

2.69.0

2.69.0

Release Date: June 25, 2026

Go Package Updates for cert-injector

• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.31.0' to 'v2.32.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.42.0' to 'v1.42.1'

Go Package Updates for diff-exporter

• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.31.0' to 'v2.32.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.42.0' to 'v1.42.1'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260615183401-62b3387ff324' to 'v0.0.0-20260622175928-b703f567277d'

Go Package Updates for groot-windows

• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.69.0' to 'v0.70.0'
• Bumped go.mod package 'code.cloudfoundry.org/groot' from 'v0.112.0' to 'v0.113.0'
• Bumped go.mod package 'code.cloudfoundry.org/hydrator' from 'v0.94.0' to 'v0.95.0'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.74.0' to 'v3.75.0'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.31.0' to 'v2.32.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.42.0' to 'v1.42.1'

Go Package Updates for nstar

• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.31.0' to 'v2.32.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.42.0' to 'v1.42.1'

Go Package Updates for winc

• Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260615130246-5a953b5cfb54' to 'v0.0.0-20260622130231-57c8cb0f1d6e'
• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.69.0' to 'v0.70.0'
• Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.76.0' to 'v0.77.0'
• Bumped go.mod package 'cyphar.com/go-pathrs' from 'v0.2.4' to 'v0.2.5'
• Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.178' to 'v0.2.179'
• Bumped go.mod package 'github.com/cyphar/filepath-securejoin' from 'v0.6.1' to 'v0.7.0'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.31.0' to 'v2.32.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.42.0' to 'v1.42.1'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260615183401-62b3387ff324' to 'v0.0.0-20260622175928-b703f567277d'

✨ Built with go 1.26.4

Full Changelog: v2.68.0...v2.69.0

Resources

• Download release 2.69.0 from bosh.io.

2.68.0

2.68.0

Release Date: June 18, 2026

Go Package Updates for cert-injector

• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.29.0' to 'v2.31.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.41.0' to 'v1.42.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.55.0' to 'v0.56.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.45.0' to 'v0.46.0'

Go Package Updates for diff-exporter

• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.29.0' to 'v2.31.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.41.0' to 'v1.42.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.55.0' to 'v0.56.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.45.0' to 'v0.46.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260608224507-4308a22a1bab' to 'v0.0.0-20260615183401-62b3387ff324'

Go Package Updates for groot-windows

• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.67.0' to 'v0.69.0'
• Bumped go.mod package 'code.cloudfoundry.org/groot' from 'v0.109.0' to 'v0.112.0'
• Bumped go.mod package 'code.cloudfoundry.org/hydrator' from 'v0.92.0' to 'v0.94.0'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.73.0' to 'v3.74.0'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.29.0' to 'v2.31.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.41.0' to 'v1.42.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.55.0' to 'v0.56.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.45.0' to 'v0.46.0'

Go Package Updates for nstar

• Bumped go.mod package 'github.com/hectane/go-acl' from 'v0.0.0-20230122075934-ca0b05cb1adb' to 'v1.0.0'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.29.0' to 'v2.31.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.41.0' to 'v1.42.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.55.0' to 'v0.56.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.45.0' to 'v0.46.0'

Go Package Updates for winc

• Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260608130158-4f39f88ded1d' to 'v0.0.0-20260615130246-5a953b5cfb54'
• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.67.0' to 'v0.69.0'
• Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.75.0' to 'v0.76.0'
• Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.177' to 'v0.2.178'
• Bumped go.mod package 'github.com/hectane/go-acl' from 'v0.0.0-20230122075934-ca0b05cb1adb' to 'v1.0.0'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.29.0' to 'v2.31.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.41.0' to 'v1.42.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.55.0' to 'v0.56.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.45.0' to 'v0.46.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260608224507-4308a22a1bab' to 'v0.0.0-20260615183401-62b3387ff324'

✨ Built with go 1.26.4

Full Changelog: v2.67.0...v2.68.0

Resources

• Download release 2.68.0 from bosh.io.

2.67.0

2.67.0

Release Date: June 16, 2026

Changes

• Upgrade golang-1.26-windows (1.26.4) - Author: App Platform Runtime Working Group CI Bot - SHA: 5c8c39b

Go Package Updates for cert-injector

• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260507013755-92041b743c96' to 'v0.0.0-20260604005048-7023385849c0'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.28.3' to 'v2.29.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.40.0' to 'v1.41.0'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.36.0' to 'v0.37.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.54.0' to 'v0.55.0'
• Bumped go.mod package 'golang.org/x/sync' from 'v0.20.0' to 'v0.21.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.44.0' to 'v0.46.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.37.0' to 'v0.38.0'

Go Package Updates for diff-exporter

• Bumped go.mod package 'github.com/containerd/typeurl/v2' from 'v2.2.3' to 'v2.3.0'
• Removed go.mod package 'github.com/gogo/protobuf' version 'v1.3.2'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260507013755-92041b743c96' to 'v0.0.0-20260604005048-7023385849c0'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.28.3' to 'v2.29.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.40.0' to 'v1.41.0'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.36.0' to 'v0.37.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.54.0' to 'v0.55.0'
• Bumped go.mod package 'golang.org/x/sync' from 'v0.20.0' to 'v0.21.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.44.0' to 'v0.46.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.37.0' to 'v0.38.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260511170946-3700d4141b60' to 'v0.0.0-20260608224507-4308a22a1bab'
• Bumped go.mod package 'google.golang.org/grpc' from 'v1.81.0' to 'v1.81.1'

Go Package Updates for groot-windows

• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.66.0' to 'v0.67.0'
• Bumped go.mod package 'code.cloudfoundry.org/groot' from 'v0.107.0' to 'v0.109.0'
• Bumped go.mod package 'code.cloudfoundry.org/hydrator' from 'v0.91.0' to 'v0.92.0'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.69.0' to 'v3.73.0'
• Bumped go.mod package 'github.com/docker/docker-credential-helpers' from 'v0.9.7' to 'v0.9.8'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260507013755-92041b743c96' to 'v0.0.0-20260604005048-7023385849c0'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.28.3' to 'v2.29.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.40.0' to 'v1.41.0'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.36.0' to 'v0.37.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.54.0' to 'v0.55.0'
• Bumped go.mod package 'golang.org/x/sync' from 'v0.20.0' to 'v0.21.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.44.0' to 'v0.46.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.37.0' to 'v0.38.0'

Go Package Updates for nstar

• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260507013755-92041b743c96' to 'v0.0.0-20260604005048-7023385849c0'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.28.3' to 'v2.29.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.40.0' to 'v1.41.0'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.36.0' to 'v0.37.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.54.0' to 'v0.55.0'
• Bumped go.mod package 'golang.org/x/sync' from 'v0.20.0' to 'v0.21.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.44.0' to 'v0.46.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.37.0' to 'v0.38.0'

Go Package Updates for winc

• Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260511130211-a3ce9828f30e' to 'v0.0.0-20260608130158-4f39f88ded1d'
• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.66.0' to 'v0.67.0'
• Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.71.0' to 'v0.75.0'
• Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.175' to 'v0.2.177'
• Bumped go.mod package 'github.com/containerd/typeurl/v2' from 'v2.2.3' to 'v2.3.0'
• Removed go.mod package 'github.com/gogo/protobuf' version 'v1.3.2'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260507013755-92041b743c96' to 'v0.0.0-20260604005048-7023385849c0'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.28.3' to 'v2.29.0'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.40.0' to 'v1.41.0'
• Bumped go.mod package 'github.com/opencontainers/selinux' from 'v1.14.1' to 'v1.15.1'
• Bumped go.mod package 'golang.org/x/crypto' from 'v0.51.0' to 'v0.53.0'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.36.0' to 'v0.37.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.54.0' to 'v0.55.0'
• Bumped go.mod package 'golang.org/x/sync' from 'v0.20.0' to 'v0.21.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.44.0' to 'v0.46.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.37.0' to 'v0.38.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260511170946-3700d4141b60' to 'v0.0.0-20260608224507-4308a22a1bab'
• Bumped go.mod package 'google.golang.org/grpc' from 'v1.81.0' to 'v1.81.1'

Blob Updates

• Bumped blob 'mingw/x86_64-15.2.0-release-posix-seh-ucrt-rt_v13-rev1.7z' to 'mingw/x86_64-16.1.0-release-posix-seh-ucrt-rt_v14-rev1.7z'

✨ Built with go 1.26.4

Full Changelog: v2.66.0...v2.67.0

Resources

• Download release 2.67.0 from bosh.io.

2.66.0

2.66.0

Release Date: May 21, 2026

Changes

• Upgrade golang-1.26-windows (1.26.3) - Author: App Platform Runtime Working Group CI Bot - SHA: e567b98

Go Package Updates for cert-injector

• Bumped go.mod package 'github.com/Masterminds/semver/v3' from 'v3.4.0' to 'v3.5.0'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260402051712-545e8a4df936' to 'v0.0.0-20260507013755-92041b743c96'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.35.0' to 'v0.36.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.53.0' to 'v0.54.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.43.0' to 'v0.44.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.36.0' to 'v0.37.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.44.0' to 'v0.45.0'

Go Package Updates for diff-exporter

• Bumped go.mod package 'github.com/Masterminds/semver/v3' from 'v3.4.0' to 'v3.5.0'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260402051712-545e8a4df936' to 'v0.0.0-20260507013755-92041b743c96'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.35.0' to 'v0.36.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.53.0' to 'v0.54.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.43.0' to 'v0.44.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.36.0' to 'v0.37.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.44.0' to 'v0.45.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260427160629-7cedc36a6bc4' to 'v0.0.0-20260511170946-3700d4141b60'
• Bumped go.mod package 'google.golang.org/grpc' from 'v1.80.0' to 'v1.81.0'

Go Package Updates for groot-windows

• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.64.0' to 'v0.66.0'
• Bumped go.mod package 'code.cloudfoundry.org/groot' from 'v0.105.0' to 'v0.107.0'
• Bumped go.mod package 'code.cloudfoundry.org/hydrator' from 'v0.89.0' to 'v0.91.0'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.67.0' to 'v3.69.0'
• Bumped go.mod package 'github.com/Masterminds/semver/v3' from 'v3.4.0' to 'v3.5.0'
• Bumped go.mod package 'github.com/docker/docker-credential-helpers' from 'v0.9.6' to 'v0.9.7'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260402051712-545e8a4df936' to 'v0.0.0-20260507013755-92041b743c96'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.35.0' to 'v0.36.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.53.0' to 'v0.54.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.43.0' to 'v0.44.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.36.0' to 'v0.37.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.44.0' to 'v0.45.0'

Go Package Updates for nstar

• Bumped go.mod package 'github.com/Masterminds/semver/v3' from 'v3.4.0' to 'v3.5.0'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260402051712-545e8a4df936' to 'v0.0.0-20260507013755-92041b743c96'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.35.0' to 'v0.36.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.53.0' to 'v0.54.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.43.0' to 'v0.44.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.36.0' to 'v0.37.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.44.0' to 'v0.45.0'

Go Package Updates for winc

• Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260427130137-96647328890b' to 'v0.0.0-20260511130211-a3ce9828f30e'
• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.64.0' to 'v0.66.0'
• Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.69.0' to 'v0.71.0'
• Bumped go.mod package 'github.com/Masterminds/semver/v3' from 'v3.4.0' to 'v3.5.0'
• Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.173' to 'v0.2.175'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260402051712-545e8a4df936' to 'v0.0.0-20260507013755-92041b743c96'
• Bumped go.mod package 'github.com/opencontainers/selinux' from 'v1.13.1' to 'v1.14.1'
• Bumped go.mod package 'golang.org/x/crypto' from 'v0.50.0' to 'v0.51.0'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.35.0' to 'v0.36.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.53.0' to 'v0.54.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.43.0' to 'v0.44.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.36.0' to 'v0.37.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.44.0' to 'v0.45.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260427160629-7cedc36a6bc4' to 'v0.0.0-20260511170946-3700d4141b60'
• Bumped go.mod package 'google.golang.org/grpc' from 'v1.80.0' to 'v1.81.0'

✨ Built with go 1.26.3

Full Changelog: v2.65.0...v2.66.0

Resources

• Download release 2.66.0 from bosh.io.

2.65.0

2.65.0

Release Date: May 04, 2026

Changes

• Merge pull request #51 from cloudfoundry/tnz-97051-patch-1 - Author: Amin Jamali - SHA: 93f8f32
• Fix container gMSA creation by authorizing CCG Virtual Accounts - Author: Amin Jamali - SHA: abd5565
• Merge pull request #50 from cloudfoundry/TNZ-97051 - Author: Geoff Franks - SHA: 4b6cfdd
• Scope CCG-Plugin DLL to just LocalService - Author: Amin Jamali - SHA: 41ab4c9

✨ Built with go 1.26.2

Full Changelog: v2.64.0...v2.65.0

Resources

• Download release 2.65.0 from bosh.io.

2.64.0

2.64.0

Release Date: April 30, 2026

Go Package Updates for cert-injector

• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.28.1' to 'v2.28.3'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.39.1' to 'v1.40.0'

Go Package Updates for diff-exporter

• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.28.1' to 'v2.28.3'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.39.1' to 'v1.40.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260420184626-e10c466a9529' to 'v0.0.0-20260427160629-7cedc36a6bc4'

Go Package Updates for groot-windows

• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.63.0' to 'v0.64.0'
• Bumped go.mod package 'code.cloudfoundry.org/groot' from 'v0.103.0' to 'v0.105.0'
• Bumped go.mod package 'code.cloudfoundry.org/hydrator' from 'v0.88.0' to 'v0.89.0'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.66.0' to 'v3.67.0'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.28.1' to 'v2.28.3'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.39.1' to 'v1.40.0'

Go Package Updates for nstar

• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.28.1' to 'v2.28.3'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.39.1' to 'v1.40.0'

Go Package Updates for winc

• Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260420130056-7d96fd093179' to 'v0.0.0-20260427130137-96647328890b'
• Bumped go.mod package 'code.cloudfoundry.org/filelock' from 'v0.63.0' to 'v0.64.0'
• Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.68.0' to 'v0.69.0'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.28.1' to 'v2.28.3'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.39.1' to 'v1.40.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260420184626-e10c466a9529' to 'v0.0.0-20260427160629-7cedc36a6bc4'

Blob Updates

• Bumped blob '7zip/7z2600.msi' to '7zip/7z2601.msi'

✨ Built with go 1.26.2

Full Changelog: v2.63.0...v2.64.0

Resources

• Download release 2.64.0 from bosh.io.