Skip to content

Add EEF Hex.pm security audit engagement June 2026 Update #616

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kj-powell merged 1 commit into from
Jul 1, 2026
+20 −0
Merged

Add EEF Hex.pm security audit engagement June 2026 Update #616

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions alpha/engagements/2026/Erlang Ecosystem Foundation, Inc. (EEF)/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,7 @@ execution in January 2026 and remediation through March 2026.
* [March 2026](update-2026-03.md)
* [April 2026](update-2026-04.md)
* [May 2026](update-2026-05.md)
* [June 2026](update-2026-06.md)

## Primary Contacts

Expand All @@ -31,3 +32,4 @@ execution in January 2026 and remediation through March 2026.
## Announcement / News

* [Hex.pm Blog: Security Audit](https://hex.pm/blog/security-audit)
* [Hex.pm Blog: HexDocs Per-Package Subdomains](https://hex.pm/blog/hexdocs-per-package-subdomains)
18 changes: 18 additions & 0 deletions alpha/engagements/2026/Erlang Ecosystem Foundation, Inc. (EEF)/update-2026-06.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
# Erlang Ecosystem Foundation Update — June 2026

## HexDocs Per-Package Subdomains Blog Post

Published a blog post about the completed HexDocs per-package origin isolation.

* [Hex.pm Blog: HexDocs Per-Package Subdomains](https://hex.pm/blog/hexdocs-per-package-subdomains)

## Rebar3 OAuth2 Support

The hex_core and hex PRs have been merged, and a new version of hex with the
shared OAuth2 code has been released. Waiting for a hex_core release to finish
up the rebar3 and rebar3_hex PRs.

* [hexpm/hex_core#178](https://github.com/hexpm/hex_core/pull/178) — merged
* [hexpm/hex#1143](https://github.com/hexpm/hex/pull/1143) — merged
* [erlang/rebar3#3008](https://github.com/erlang/rebar3/pull/3008) — pending hex_core release
* [erlef/rebar3_hex#361](https://github.com/erlef/rebar3_hex/pull/361) — pending hex_core release
Loading