Tanzu Platform for Cloud Foundry 6.0

TAS for VMs v6.0 Release notes

Last Updated March 13, 2025

These are the release notes for VMware Tanzu Application Service for VMs (TAS for VMs) v6.0.

TAS for VMs is certified by the Cloud Foundry Foundation for 2024.

For more information about the Cloud Foundry Certified Provider Program, see How Do I Become a Certified Provider? on the Cloud Foundry website.

Because VMware uses the Percona Distribution for MySQL, expect a time lag between Oracle releasing a MySQL patch and VMware releasing TAS for VMs containing that patch.


Deprecation Notice: Cloud Foundry Command-Line Interface (cf CLI) v7 is deprecated and will lose support. For how to upgrade to cf CLI v8 see Upgrading to cf CLI v8.

Important cross-version issues:
  • v6.0.7 - v6.0.11 versions contain a bug that causes intermittent TCP connectivity issues between TAS for VMs and tiles that use routing release 0.301.0 or earlier, such as Tanzu for MySQL on Cloud Foundry v3.3.0 and earlier, and Redis for Tanzu Application Service v3.5.0 and earlier. For details, see TCP Routes from Tiles are Pruned Intermittently Resulting in connectivity issues
  • v6.0.0 - v6.0.3 versions contain an RFC protocol issue with Gorouter, CVE-2024-22279, that can lead to denial of service. The issue has been fixed. For details, see TNZ-2024-0100.

Releases

6.0.13

Release Date: 03/11/2025

  • [Feature] Operators can now “Enable comma-delimited lists of IPs for application security group (ASG) destinations” via the property in the “Networking” tab. WARNING: for foundations with the NSX-T tile installed, you MUST deploy NSX-T tile version 9.0.0 in policy mode before enabling this feature.
  • [Feature Improvement] Operators can now let Puma auto-configure the number of workers based on the number of available cores.
  • [Feature Improvement] Remove the need to track mapfs-release
  • [Feature Improvement]: Backport GA OpenTelemetry Collector
  • [Bug Fix] SMB Broker now supports all the mount parameters that the SMB Driver does (‘sec’, ‘dir_mode’, ‘file_mode’ were missing)
  • Bump backup-and-restore-sdk to version 1.19.45
  • Bump binary-offline-buildpack to version 1.1.32
  • Bump bpm to version 1.4.16
  • Bump capi to version 1.203.0
  • Bump cf-autoscaling to version 250.4.1
  • Bump cf-networking to version 3.66.0
  • Bump cflinuxfs3 to version 0.618.0
  • Bump cflinuxfs4 to version 1.288.0
  • Bump credhub to version 2.12.105
  • Bump dotnet-core-offline-buildpack to version 2.4.51
  • Bump garden-runc to version 1.70.0
  • Bump go-offline-buildpack to version 1.10.43
  • Bump java-offline-buildpack to version 4.80.0
  • Bump log-cache to version 3.1.9
  • Bump loggregator to version 107.0.20
  • Bump loggregator-agent to version 8.3.5
  • Bump mysql-monitoring to version 10.22.0
  • Bump nats to version 56.41.0
  • Bump nfs-volume to version 7.23.0
  • Bump nginx-offline-buildpack to version 1.2.37
  • Bump nodejs-offline-buildpack to version 1.8.49
  • Bump php-offline-buildpack to version 4.6.40
  • Bump push-apps-manager-release to version 677.0.67
  • Bump push-usage-service-release to version 674.0.156
  • Bump pxc to version 1.0.37
  • Bump python-offline-buildpack to version 1.8.44
  • Bump r-offline-buildpack to version 1.2.32
  • Bump routing to version 0.331.0
  • Bump ruby-offline-buildpack to version 1.10.36
  • Bump silk to version 3.66.0
  • Bump smb-volume to version 3.22.0
  • Bump staticfile-offline-buildpack to version 1.8.26
  • Bump statsd-injector to version 1.11.47
  • Bump syslog to version 12.3.7
  • Bump system-metrics-scraper to version 4.0.17
  • Bump uaa to version 77.20.3

Security Fixes

The following table lists CVEs that were fixed in each TAS for VMs component since the previous patch version of TAS for VMs:

ComponentVulnerabilities Resolved
credhub
cflinuxfs4
nats
capi
push-apps-manager-release
cf-networking
smb-volume
system-metrics-scraper
nfs-volume
loggregator-agent
pxc
statsd-injector
log-cache
mysql-monitoring
syslog
garden-runc
cf-autoscaling
uaa
bpm
backup-and-restore-sdk
silk
loggregator
mapfs

Component Release Notes

Component Version Release Notes
ubuntu-jammy stemcell1.775
backup-and-restore-sdk1.19.45 v1.19.45
  ### Package Updates:
  * Updates golang-1-linux from 1.24.0 to 1.24.1
  **Full Changelog**: https://github.com/cloudfoundry/backup-and-restore-sdk-release/compare/v1.19.44...v1.19.45
          
v1.19.44
  ### Updates:
  * Updates postgresql-13 from 13.19 to 13.20
  **Full Changelog**: https://github.com/cloudfoundry/backup-and-restore-sdk-release/compare/v1.19.43...v1.19.44
          
v1.19.43
  ### Updates:
  * Updates postgresql-13 from 13.18 to 13.19
  **Full Changelog**: https://github.com/cloudfoundry/backup-and-restore-sdk-release/compare/v1.19.42...v1.19.43
          
v1.19.42
  ### Package Updates:
  * Updates golang-1-linux from 1.23.6 to 1.24.0
  **Full Changelog**: https://github.com/cloudfoundry/backup-and-restore-sdk-release/compare/v1.19.41...v1.19.42
          
v1.19.41
  ### Updates:
  * Updates pcre2 from 10.44 to 10.45
  **Full Changelog**: https://github.com/cloudfoundry/backup-and-restore-sdk-release/compare/v1.19.40...v1.19.41
          
v1.19.40
  ### Updates:
  * Updates mariadb from 10.6.20 to 10.6.21
  **Full Changelog**: https://github.com/cloudfoundry/backup-and-restore-sdk-release/compare/v1.19.39...v1.19.40
          
binary-offline-buildpack1.1.32
bosh-dns-aliases0.0.4
bpm1.4.16
capi1.203.0
cf-autoscaling250.4.1 v250.4.1
  ## What's Changed
  * Project Golang version bumped to 1.23
  * Golang dependencies updated
  * Java dependencies updated
          
cf-cli1.68.0
cf-networking3.66.0 v3.66.0
  ##  3.66.0
  **Release Date**: February 18, 2025
  ## Changes
  - bump dependancies
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.65.0...v3.66.0
  ## Resources
  - [Download release 3.66.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.66.0).
          
v3.65.0
  ##  3.65.0
  **Release Date**: January 31, 2025
  ## Changes
  - Bump dependancies
  - Update iptables-writter to work with multi-cidr overlay networks, which are now available in silk-release 3.65.0. [See here for more info on this effort. ](https://github.com/cloudfoundry/silk-release/pull/148)
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.64.0...v3.65.0
  ## Resources
  - [Download release 3.65.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.65.0).
          
v3.64.0
  ##  3.64.0
  **Release Date**: January 21, 2025
  ## Changes
  - Bump to go 1.23.5
  - Bump dependancies
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.63.0...v3.64.0
  ## Resources
  - [Download release 3.64.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.64.0).
          
cflinuxfs30.618.0
cflinuxfs41.288.0
count-cores-indicator2.0.0
credhub2.12.105 2.12.105
  ## What's Changed
  * Various dependency bumps
  **Full Changelog**: https://github.com/pivotal/credhub-release/compare/2.12.104...2.12.105
          
2.12.104
  ## What's Changed
  * Resolved issue https://github.com/pivotal/credhub-release/issues/291.
  * Various dependency bumps
  **Full Changelog**: https://github.com/pivotal/credhub-release/compare/2.12.103...2.12.104
          
2.12.103
  ## What's Changed
  * Various dependency bumps
  **Full Changelog**: https://github.com/pivotal/credhub-release/compare/2.12.102...2.12.103
          
diego2.105.0
dotnet-core-offline-buildpack2.4.51
garden-runc1.70.0 v1.70.0
  ##  1.70.0
  **Release Date**: February 05, 2025
  ## Changes
  - Upgrade containerd to V2 (https://github.com/cloudfoundry/garden-runc-release/pull/368, https://github.com/cloudfoundry/guardian/pull/466, https://github.com/cloudfoundry/wg-app-platform-runtime-ci/pull/61)
  - Various dependency bumps
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.69.0...v1.70.0
  ## Resources
  - [Download release 1.70.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.70.0).
          
v1.69.0
  ##  1.69.0
  **Release Date**: February 03, 2025
  ## Changes
  - bump dependancies
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.68.0...v1.69.0
  ## Resources
  - [Download release 1.69.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.69.0).
          
v1.68.0
  ##  1.68.0
  **Release Date**: January 22, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.67.0...v1.68.0
  ## Resources
  - [Download release 1.68.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.68.0).
          
go-offline-buildpack1.10.43
java-offline-buildpack4.80.0
java-native-image-cnb-buildpack0.11.22
log-cache3.1.9 v3.1.9
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.23.6
  * Use CAPI v3 instead of v2 by @chombium in https://github.com/cloudfoundry/log-cache-release/pull/597
  **Full Changelog**: https://github.com/cloudfoundry/log-cache-release/compare/v3.1.8...v3.1.9
          
loggregator107.0.20 v107.0.20
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.23.6
  * Use CAPI v3 instead of v2 by @chombium in https://github.com/cloudfoundry/loggregator-release/pull/816
  ## New Contributors
  * @chombium made their first contribution in https://github.com/cloudfoundry/loggregator-release/pull/816
  **Full Changelog**: https://github.com/cloudfoundry/loggregator-release/compare/v107.0.19...v107.0.20
          
loggregator-agent8.3.5 v8.3.5
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.3.4...v8.3.5
          
v8.3.4
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.3.3...v8.3.4
          
metric-registrar4.0.6
mysql-monitoring10.22.0 v10.22.0
  Dependency bumps
  * Bump Go to v1.23.6
          
nats56.41.0 v56.41.0
  ##  56.41.0
  **Release Date**: March 03, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.40.0...v56.41.0
  ## Resources
  - [Download release 56.41.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.41.0).
          
v56.40.0
  ##  56.40.0
  **Release Date**: February 28, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.39.0...v56.40.0
  ## Resources
  - [Download release 56.40.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.40.0).
          
v56.39.0
  ##  56.39.0
  **Release Date**: February 18, 2025
  ## Changes
  - bump dependancies
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.38.0...v56.39.0
  ## Resources
  - [Download release 56.39.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.39.0).
          
v56.38.0
  ##  56.38.0
  **Release Date**: February 03, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.37.0...v56.38.0
  ## Resources
  - [Download release 56.38.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.38.0).
          
v56.37.0
  ##  56.37.0
  **Release Date**: January 22, 2025
  ## Changes
  - Bump to go 1.23.5
  - Bump dependancies
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.36.0...v56.37.0
  ## Resources
  - [Download release 56.37.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.37.0).
          
nfs-volume7.23.0 v7.23.0
  ##  7.23.0
  **Release Date**: March 03, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.22.0...v7.23.0
  ## Resources
  - [Download release 7.23.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.23.0).
          
v7.22.0
  ##  7.22.0
  **Release Date**: February 28, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.21.0...v7.22.0
  ## Resources
  - [Download release 7.22.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.22.0).
          
v7.21.0
  ##  7.21.0
  **Release Date**: February 18, 2025
  ## Changes
  - bump dependancies
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.20.0...v7.21.0
  ## Resources
  - [Download release 7.21.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.21.0).
          
v7.20.0
  ##  7.20.0
  **Release Date**: February 03, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.19.0...v7.20.0
  ## Resources
  - [Download release 7.20.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.20.0).
          
v7.19.0
  ##  7.19.0
  **Release Date**: January 31, 2025
  ## Changes
  - Fix map-fs-fuse packaging script to avoid collision with binaries installed on compilation-vms in case of re-using compilation vms.
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.18.0...v7.19.0
  ## Resources
  - [Download release 7.19.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.19.0).
          
v7.18.0
  ##  7.18.0
  **Release Date**: January 27, 2025
  ## Changes
  - Move code base from mapfs-release into nfs-volume-release
  -  Add map-fs-performance-acceptance-tests errand
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/dockerdriver-integration/spec b/jobs/dockerdriver-integration/spec
  index 51e78351..02a908e9 100644
  --- a/jobs/dockerdriver-integration/spec
  +++ b/jobs/dockerdriver-integration/spec
  @@ -9,6 +9,7 @@ templates:
  packages:
  - dockerdriver-integration
  - nfs-debs
  +- map-fs
  - nfsv3driver
  @@ -19,4 +20,4 @@ properties:
  mapfs_path:
  description: "Path to mapfs binary"
  -    default: /var/vcap/packages/mapfs/bin/mapfs
  +    default: /var/vcap/packages/map-fs/bin/mapfs
  diff --git a/jobs/map-fs-performance-acceptance-tests/spec b/jobs/map-fs-performance-acceptance-tests/spec
  new file mode 100644
  index 00000000..a3f30383
  --- /dev/null
  +++ b/jobs/map-fs-performance-acceptance-tests/spec
  @@ -0,0 +1,23 @@
  +---
  +name: map-fs-performance-acceptance-tests
  +
  +templates:
  +  pre-start.erb: bin/pre-start
  +  run.erb: bin/run
  +  config.json.erb: config/config.json
  +
  +packages:
  +- map-fs-performance-acceptance-tests
  +- map-fs
  +- map-fs-fuse
  +- nfs-debs
  +
  +
  +properties:
  +  nfs_remote_path:
  +    description: Address for SMB Remote Path
  +    default: nfstestserver.service.cf.internal:export
  +
  +  mapfs_path:
  +    description: "Path to mapfs binary"
  +    default: /var/vcap/packages/map-fs/bin/mapfs
  diff --git a/jobs/nfsv3driver/spec b/jobs/nfsv3driver/spec
  index fc9fe47b..7d5262d8 100644
  --- a/jobs/nfsv3driver/spec
  +++ b/jobs/nfsv3driver/spec
  @@ -17,10 +17,8 @@ templates:
  packages:
  - nfs-debs
  - nfsv3driver
  -
  -consumes:
  -- name: mapfs
  -  type: mapfs
  +- map-fs
  +- map-fs-fuse
  properties:
  nfsv3driver.statd_port:
  ```
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.17.0...v7.18.0
  ## Resources
  - [Download release 7.18.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.18.0).
          
nginx-offline-buildpack1.2.37
nodejs-offline-buildpack1.8.49
notifications77.0.0
notifications-ui51.0.0
otel-collector0.11.2
php-offline-buildpack4.6.40
push-apps-manager-release677.0.67 677.0.67
  * show is routable when available
  * fix bug with custom headers
  * fix bug where user visibility of spaces effected the ability to bind and unbind services.
  * update dependencies
          
push-offline-docs-release6.0.169
push-usage-service-release674.0.156 v674.0.156
  ## Changes
  * creating final release 674.0.155
          
v674.0.155
  ## Changes
  * Fix internal calculation error when rolling over app usages month to month.
          
v674.0.154
  ## Changes
  * chore(deps): update dependency pydriller to v2
  * creating final release 674.0.153
          
v674.0.153
  ## Changes
  * creating final release 674.0.152
          
v674.0.152
  ## Changes
  * creating final release 674.0.151
          
v674.0.151
  ## Changes
  * TNZ-31185 - Update archive table load to lookup by guid for latest_app_usage_event_guids (#26)
  * creating final release 674.0.150
          
v674.0.150
  ## Changes
  * creating final release 674.0.149
          
v674.0.149
  ## Changes
  * Add repository
  * Add submodule
  * Checkout with Renovate token
  * Merge branch 'main' into snookala/TNZ-27490
  * Merge pull request #20 from TNZ/snookala/TNZ-27490
  * Merge pull request #21 from TNZ/revert-20-snookala/TNZ-27490
  * Merge pull request #22 from TNZ/snookala/TNZ-27490-new
  * Remove broken config values, add dashboard
  * Revert "TNZ-27490 - Usage Service - Enhancement - Utilize Archive Table"
  * Set checkout version to v4
  * TNZ-27490 - Usage Service - Enhancement - Utilize Archive Table
  * TNZ-27490 - Usage Service - Enhancement - Utilize Archive Table
  * TNZ-27490 - Usage Service - Enhancement - Utilize Archive Table
  * Update checkout version
  * Update the checkout version
  * add submodules to checkout action
  * chore: add token?
  * chore: enable bundler
  * chore: revert back without submodules
  * chore: test official checkout action?
  * creating final release 674.0.147
  * only run submodules
  * set checkout to v1
  * try submodules again
  * update checkout to 4.1.0
  * update checkout version to v3
  * update token
          
pxc1.0.37 v1.0.37
  ## Release Notes
  **New Features**
  **Dependency bumps**
  - Bump Go to v1.23.6
  - Updates packages and dependencies
          
v1.0.36
  ## Release Notes
  **New Features**
  - Added support for deploying pxc-release on ubuntu-noble stemcells
          
v1.0.35
  Dependency bumps
  * Bump Go to v1.23.5
  * Bumps Percona XtraDB Cluster to v8.0.40-31
          
python-offline-buildpack1.8.44
r-offline-buildpack1.2.32
routing0.331.0 v0.331.0
  ##  0.331.0
  **Release Date**: February 28, 2025
  ## Changes
  - Bump dependancies
  - Inline multierror submodule - https://github.com/cloudfoundry/routing-release/pull/454 - Thanks @maxmoehl !
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.330.0...v0.331.0
  ## Resources
  - [Download release 0.331.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.331.0).
          
v0.330.0
  ##  0.330.0
  **Release Date**: February 07, 2025
  ## Changes
  - bump dependancies
  - add extendable bosh property to log extra access log fields - https://github.com/cloudfoundry/routing-release/pull/448 - thanks @maxmoehl !
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
  index 868629ac..9d694a02 100644
  --- a/jobs/gorouter/spec
  +++ b/jobs/gorouter/spec
  @@ -322,6 +322,14 @@ properties:
  router.logging.syslog_network:
  description: "Network protocol to use when connecting to the syslog server. Valid values are 'tcp', 'udp', . When choosing an empty string value, the local syslog daemon is used."
  default: "udp"
  +  router.logging.extra_access_log_fields:
  +    description: |
  +      An array of additional access log fields to log. Any new log fields will only be exposed via
  +      this property and operators have to explicitly enable them. This is done to prevent breaking
  +      log parsing in existing setups by the introduction of new fields. Does not affect stdout /
  +      stderr logs.
  +      Available fields are: local_address
  +    default: []
  router.logging.format.timestamp:
  description: |
  Format for timestamp in component logs. Valid values are 'rfc3339', 'deprecated', and 'unix-epoch'."
  ```
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.329.0...v0.330.0
  ## Resources
  - [Download release 0.330.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.330.0).
          
ruby-offline-buildpack1.10.36
web-servers-cnb-buildpack0.15.2
silk3.66.0 v3.66.0
  ##  3.66.0
  **Release Date**: February 18, 2025
  ## Changes
  - bump dependancies
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.65.0...v3.66.0
  ## Resources
  - [Download release 3.66.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.66.0).
          
v3.65.0
  ##  3.65.0
  **Release Date**: January 31, 2025
  ## Changes
  - Bump dependancies
  - New feature: the overlay network (as defined in the silk-controller job as the "network" property) can now be an array of CIDR addresses instead of just one CIDR address. For backwards compatibility reasons providing a string of one CIDR is still an allowed format. [See here for more info on this effort. ](https://github.com/cloudfoundry/silk-release/pull/148) Thanks @ameowlia ! 🎉
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/silk-cni/spec b/jobs/silk-cni/spec
  index 670763da..75936752 100644
  --- a/jobs/silk-cni/spec
  +++ b/jobs/silk-cni/spec
  @@ -10,8 +10,6 @@ packages:
  - silk-cni
  consumes:
  -- name: cf_network
  -  type: cf_network
  - name: vpa
  type: policy-agent
  @@ -31,7 +29,10 @@ provides:
  properties:
  no_masquerade_cidr_range:
  -    description: "CIDR address block that should not be masqueraded.  Fallsback to cf_network.network link property if property is not provided."
  +    description: |
  +        When set, app traffic sent to this CIDR will not be masqueraded. If this
  +        property is not set, then silk-cni will not masquerade traffic sent to the
  +        overlay network, which allows container-to-container networking to work.
  default: ""
  mtu:
  diff --git a/jobs/silk-controller/spec b/jobs/silk-controller/spec
  index cc7529a8..cb66a1e8 100644
  --- a/jobs/silk-controller/spec
  +++ b/jobs/silk-controller/spec
  @@ -29,8 +29,12 @@ provides:
  properties:
  network:
  -    description: "CIDR address block for overlay network.  Subnets for each diego cell are allocated out of this network."
  -    default: "10.255.0.0/16"
  +    description: |
  +      A single CIDR address block as a string, or an array of CIDR address
  +      blocks for overlay network as an array of strings. Subnets for each diego
  +      cell are allocated out of this network. The "subnet_prefix_length"
  +      property must be smaller than the smallest CIDR address block.
  +    default: ["10.255.0.0/16"]
  subnet_prefix_length:
  description: "Length, in bits, of the prefix for subnets allocated per Diego cell, e.g. '24' for a '/24' subnet."
  diff --git a/jobs/silk-daemon/spec b/jobs/silk-daemon/spec
  index e3786357..572b08c9 100644
  --- a/jobs/silk-daemon/spec
  +++ b/jobs/silk-daemon/spec
  @@ -88,7 +88,13 @@ properties:
  default: false
  single_ip_only:
  -    description: "When true, this VM will get assigned exactly one IP address on the Silk network.  Use this to connect this VM to the Silk network without acquiring a whole block of addresses (as would be required for a Diego Cell)."
  +    description: |
  +        When true, this VM will get assigned exactly one IP address on the Silk
  +        network.  Use this to connect this VM to the Silk network without
  +        acquiring a whole block of addresses (as would be required for a Diego
  +        Cell). WARNING: Do not use single_ip_only mode when the overylay network has
  +        more than one CIDR. The overlay network is set on the silk-controller
  +        job via the "network" bosh property.
  default: false
  policy_server_url:
  ```
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.64.0...v3.65.0
  ## Resources
  - [Download release 3.65.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.65.0).
          
v3.64.0
  ##  3.64.0
  **Release Date**: January 21, 2025
  ## Changes
  - Bump to go 1.23.5
  - Bump dependancies
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.63.0...v3.64.0
  ## Resources
  - [Download release 3.64.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.64.0).
          
smb-volume3.22.0 v3.22.0
  ##  3.22.0
  **Release Date**: March 03, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/smb-volume-release/compare/v3.21.0...v3.22.0
  ## Resources
  - [Download release 3.22.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.22.0).
          
v3.21.0
  ##  3.21.0
  **Release Date**: February 28, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/smb-volume-release/compare/v3.20.0...v3.21.0
  ## Resources
  - [Download release 3.21.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.21.0).
          
v3.20.0
  ##  3.20.0
  **Release Date**: February 18, 2025
  ## Changes
  - bump dependancies
  ## ✨  Built with go 1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/smb-volume-release/compare/v3.19.0...v3.20.0
  ## Resources
  - [Download release 3.20.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.20.0).
          
v3.19.0
  ##  3.19.0
  **Release Date**: February 03, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/smb-volume-release/compare/v3.18.0...v3.19.0
  ## Resources
  - [Download release 3.19.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.19.0).
          
v3.18.0
  ##  3.18.0
  **Release Date**: January 30, 2025
  ## Changes
  - 🐛Fixes a bug where smb broker didn't allow the same mount options that smb driver allowed (was missing `sec`, `dir_mode`, and `file_mode`)
  - Dependency bumps
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/smb-volume-release/compare/v3.17.0...v3.18.0
  ## Resources
  - [Download release 3.18.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.18.0).
          
v3.17.0
  ##  3.17.0
  **Release Date**: January 22, 2025
  ## Changes
  - Bump to go 1.23.5
  - Bump dependancies
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/smb-volume-release/compare/v3.16.0...v3.17.0
  ## Resources
  - [Download release 3.17.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.17.0).
          
smoke-tests4.10.0
staticfile-offline-buildpack1.8.26
statsd-injector1.11.47 v1.11.47
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/statsd-injector-release/compare/v1.11.46...v1.11.47
          
syslog12.3.7 v12.3.7
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.3.6...v12.3.7
          
system-metrics-scraper4.0.17 v4.0.17
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.23.6
  **Full Changelog**: https://github.com/cloudfoundry/system-metrics-scraper-release/compare/v4.0.16...v4.0.17
          
v4.0.16
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/system-metrics-scraper-release/compare/v4.0.15...v4.0.16
          
uaa77.20.3 v77.20.3
  ### New UAA
  * Bump to [UAA v77.20.3](https://github.com/cloudfoundry/uaa/releases/tag/v77.20.3)
  ### Fixes
  * [Upgrade Tomcat to version 9.0.100](https://github.com/cloudfoundry/uaa-release/commit/7c07585cfc2a1d30df940a3df08739698140488f)
  * [Upgrade Bellsoft JDK to version 17.0.14+10](https://github.com/cloudfoundry/uaa-release/commit/181355610834c8c74caee6a9751e55261b763ac0)
  ### Dependency bumps
  * [Bump nokogiri from 1.18.1 to 1.18.2](https://github.com/cloudfoundry/uaa-release/commit/ba59cf9f8d0f10c85344d0e0c0bc3e93fc7eca70)
  * [Bump i18n from 1.14.6 to 1.14.7](https://github.com/cloudfoundry/uaa-release/commit/56ca6196882e0e2abc15841b8b22c533489413ad)
  * [Bump rspec-core from 3.13.2 to 3.13.3](https://github.com/cloudfoundry/uaa-release/commit/0cf8e7936417bd0d3a759bfb4f67cf082a52bbf6)
  * [Bump logger from 1.6.5 to 1.6.6](https://github.com/cloudfoundry/uaa-release/commit/8a3c86b93fad5888eb6e85a2107562b6738c63df)
  * [Bump diff-lcs from 1.5.1 to 1.6.0](https://github.com/cloudfoundry/uaa-release/commit/d571eb77fbbfddeca3736c8ba86a61a412b1a992)
  * [Bump github.com/cloudfoundry/bosh-utils in /src/acceptance_tests](https://github.com/cloudfoundry/uaa-release/commit/f7ec7975db8c48e485f03fb13164947e6007f0d2)
  **Full Changelog**: https://github.com/cloudfoundry/uaa-release/compare/v77.20.2...v77.20.3
          
tanzu-jammy-stack1.0.1

6.0.12

Release Date: 02/03/2025

  • [Bug Fix] Fix intermittent connectivity issue for TCP routes from external tiles with old routing-release versions
  • [Feature Improvement] Apps Manager only lists the name of a space that hosts shared services if you have access to that space; otherwise it lists the space’s GUID.
  • [Feature Improvement] Add optional, experimental pprof extension to OTel Collector
  • [Feature Improvement] Enable Space Auditors to view app autoscaling rules
  • [Feature Improvement] Explicitly set the allowed ciphers for Diego ssh proxy. Previously these were set in the code.
  • [Feature Improvement] Puma web server is no longer beta
  • Bump backup-and-restore-sdk to version 1.19.39
  • Bump binary-offline-buildpack to version 1.1.28
  • Bump bpm to version 1.4.11
  • Bump capi to version 1.200.0
  • Bump cf-autoscaling to version 250.4.0
  • Bump cf-networking to version 3.63.0
  • Bump cflinuxfs3 to version 0.592.0
  • Bump cflinuxfs4 to version 1.274.0
  • Bump credhub to version 2.12.102
  • Bump dotnet-core-offline-buildpack to version 2.4.47
  • Bump garden-runc to version 1.67.0
  • Bump go-offline-buildpack to version 1.10.37
  • Bump java-offline-buildpack to version 4.77.0
  • Bump log-cache to version 3.1.8
  • Bump loggregator to version 107.0.19
  • Bump loggregator-agent to version 8.3.3
  • Bump mapfs to version 1.17.0
  • Bump metric-registrar to version 4.0.6
  • Bump mysql-monitoring to version 10.21.0
  • Bump nats to version 56.36.0
  • Bump nfs-volume to version 7.17.0
  • Bump nginx-offline-buildpack to version 1.2.33
  • Bump nodejs-offline-buildpack to version 1.8.44
  • Bump notifications to version 77.0.0
  • Bump otel-collector to version 0.11.2
  • Bump php-offline-buildpack to version 4.6.36
  • Bump push-apps-manager-release to version 677.0.66
  • Bump push-usage-service-release to version 674.0.147
  • Bump pxc to version 1.0.34
  • Bump python-offline-buildpack to version 1.8.40
  • Bump r-offline-buildpack to version 1.2.28
  • Bump routing to version 0.329.0
  • Bump ruby-offline-buildpack to version 1.10.32
  • Bump silk to version 3.63.0
  • Bump smb-volume to version 3.16.0
  • Bump staticfile-offline-buildpack to version 1.8.21
  • Bump statsd-injector to version 1.11.46
  • Bump syslog to version 12.3.6
  • Bump system-metrics-scraper to version 4.0.15
  • Bump uaa to version 77.20.2

Security Fixes

The following table lists CVEs that were fixed in each TAS for VMs component since the previous patch version of TAS for VMs:

ComponentVulnerabilities Resolved
system-metrics-scraper
push-apps-manager-release
credhub
loggregator
otel-collector
garden-runc
uaa
bpm
notifications
syslog
capi
log-cache
backup-and-restore-sdk
metric-registrar
statsd-injector
mysql-monitoring
loggregator-agent

Component Release Notes

Component Version Release Notes
ubuntu-jammy stemcell1.719
backup-and-restore-sdk1.19.39 v1.19.39
  ### Updates:
  * Updates mysql-8 from 8.0.40 to 8.0.41
  **Full Changelog**: https://github.com/cloudfoundry/backup-and-restore-sdk-release/compare/v1.19.38...v1.19.39
          
v1.19.38
  ### Package Updates:
  * Updates golang-1-linux from 1.23.4 to 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/backup-and-restore-sdk-release/compare/v1.19.37...v1.19.38
          
v1.19.37
  ### Fixed CVEs:
  * CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto
  * CVE-2024-45338: golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html
  ### Package Updates:
  * Updates golang-1-linux to 1.23.4
  ### Updates:
  * Updates mariadb from 10.6.19 to 10.6.20
  * Updates mysql-8 from 8.0.39 to 8.0.40
  * Updates postgresql-13 from 13.16 to 13.18
  * Updates postgresql-15 from 15.8 to 15.9
  ## What's Changed
  * Remove unused OpenSSL 1.1 blob by @ystros in https://github.com/cloudfoundry/backup-and-restore-sdk-release/pull/1846
  * Remove support for Postgres 11 by @ystros in https://github.com/cloudfoundry/backup-and-restore-sdk-release/pull/1845
  ## New Contributors
  * @ystros made their first contribution in https://github.com/cloudfoundry/backup-and-restore-sdk-release/pull/1846
  **Full Changelog**: https://github.com/cloudfoundry/backup-and-restore-sdk-release/compare/v1.19.36...v1.19.37
          
binary-offline-buildpack1.1.28
bosh-dns-aliases0.0.4
bpm1.4.11
capi1.200.0
cf-autoscaling250.4.0 v250.4.0
  ## What's Changed
  * Feature enhancement: space auditors can view autoscaling rules.
  * Permissions endpoints now distinguish between GET requests and actual resource management requests using the 'readOnly' query param
          
cf-cli1.68.0
cf-networking3.63.0 v3.63.0
  ##  3.63.0
  **Release Date**: January 06, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.62.0...v3.63.0
  ## Resources
  - [Download release 3.63.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.63.0).
          
v3.62.0
  ##  3.62.0
  **Release Date**: December 21, 2024
  ## Changes
  - Bump go mod dependencies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.61.0...v3.62.0
  ## Resources
  - [Download release 3.62.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.62.0).
          
v3.61.0
  ##  3.61.0
  **Release Date**: December 16, 2024
  ## Changes
  - Bump dependencies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.60.0...v3.61.0
  ## Resources
  - [Download release 3.61.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.61.0).
          
cflinuxfs30.592.0
cflinuxfs41.274.0 v1.131.0
  This release ships with cflinuxfs4 version 1.131.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.131.0)
          
count-cores-indicator2.0.0
credhub2.12.102 2.12.102
  ## What's Changed
  * Various dependency bumps
  **Full Changelog**: https://github.com/pivotal/credhub-release/compare/2.12.101...2.12.102
          
2.12.101
  ## What's Changed
  * Various dependency bumps
  **Full Changelog**: https://github.com/pivotal/credhub-release/compare/2.12.100...2.12.101
          
2.12.100
  ## What's Changed
  * Various dependency bumps
  **Full Changelog**: https://github.com/pivotal/credhub-release/compare/2.12.99...2.12.100
          
2.12.99
  ## What's Changed
  * Various dependency bumps
  **Full Changelog**: https://github.com/pivotal/credhub-release/compare/2.12.98...2.12.99
          
diego2.105.0
dotnet-core-offline-buildpack2.4.47
garden-runc1.67.0 v1.67.0
  ##  1.67.0
  **Release Date**: January 17, 2025
  ## Changes
  - Add support for cgroups v2 https://github.com/cloudfoundry/guardian/pull/465
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.66.0...v1.67.0
  ## Resources
  - [Download release 1.67.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.67.0).
          
v1.66.0
  ##  1.66.0
  **Release Date**: January 03, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.65.0...v1.66.0
  ## Resources
  - [Download release 1.66.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.66.0).
          
v1.65.0
  ##  1.65.0
  **Release Date**: December 20, 2024
  ## Changes
  - Fix path for functions #367
  - Various dependency bumps
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.64.0...v1.65.0
  ## Resources
  - [Download release 1.65.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.65.0).
          
go-offline-buildpack1.10.37
java-offline-buildpack4.77.0
java-native-image-cnb-buildpack0.11.22
log-cache3.1.8 v3.1.8
  ## What's Changed
  * Bump dependencies
  * Bump packaged Go to go1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/log-cache-release/compare/v3.1.7...v3.1.8
          
loggregator107.0.19 v107.0.19
  ## What's Changed
  * Bump dependencies
  * Bump packaged Go to go1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/loggregator-release/compare/v107.0.18...v107.0.19
          
loggregator-agent8.3.3 v8.3.3
  ## What's Changed
  * Bump dependencies
  * Bump packaged Go to go1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.3.2...v8.3.3
          
mapfs1.17.0 v1.17.0
  ##  1.17.0
  **Release Date**: January 06, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/mapfs-release/compare/v1.16.0...v1.17.0
  ## Resources
  - [Download release 1.17.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.17.0).
          
v1.16.0
  ##  1.16.0
  **Release Date**: January 03, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/mapfs-release/compare/v1.15.0...v1.16.0
  ## Resources
  - [Download release 1.16.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.16.0).
          
v1.15.0
  ##  1.15.0
  **Release Date**: December 20, 2024
  ## Changes
  - Minor dependency bumps
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/mapfs-release/compare/v1.14.0...v1.15.0
  ## Resources
  - [Download release 1.15.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.15.0).
          
v1.14.0
  ##  1.14.0
  **Release Date**: December 17, 2024
  ## Changes
  * [Bump](https://github.com/cloudfoundry/mapfs-release/commit/782c0f7f2e877f175d5796708af02ecd67bc7065) https://github.com/mesonbuild/meson/releases/tag/1.6.1
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/mapfs-release/compare/v1.13.0...v1.14.0
  ## Resources
  - [Download release 1.14.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.14.0).
          
v1.13.0
  ##  1.13.0
  **Release Date**: December 16, 2024
  ## Changes
  - Update dependencies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/mapfs-release/compare/v1.12.0...v1.13.0
  ## Resources
  - [Download release 1.13.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.13.0).
          
metric-registrar4.0.6 v4.0.6
  ## What's Changed
  * Bump dependencies
  * Update packaged Go to go1.23.4
          
mysql-monitoring10.21.0 v10.21.0
  Dependency bumps
  * Bump to golang.org/x/net@v0.33.0 to address CVE-2024-45338 / GHSA-w32m-9786-jp63
          
v10.20.0
  Dependency bumps
  * Bump to golang.org/x/crypto@v0.31.0 to address CVE-2024-45337 / GHSA-v778-237x-gjrc
          
v10.19.0
  Dependency bumps
  * Bump Go to v1.23.4
          
v10.17.0
  ### Release Notes
  - removes replication-canary and associated jobs
  - dependency bumps
  - update to golang 1.23.1
          
nats56.36.0 v56.36.0
  ##  56.36.0
  **Release Date**: January 06, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.35.0...v56.36.0
  ## Resources
  - [Download release 56.36.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.36.0).
          
v56.35.0
  ##  56.35.0
  **Release Date**: January 03, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.34.0...v56.35.0
  ## Resources
  - [Download release 56.35.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.35.0).
          
v56.34.0
  ##  56.34.0
  **Release Date**: December 20, 2024
  ## Changes
  - Bump go mod dependencies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.33.0...v56.34.0
  ## Resources
  - [Download release 56.34.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.34.0).
          
v56.33.0
  ##  56.33.0
  **Release Date**: December 16, 2024
  ## Changes
  - Bump dependencies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.32.0...v56.33.0
  ## Resources
  - [Download release 56.33.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.33.0).
          
nfs-volume7.17.0 v7.17.0
  ##  7.17.0
  **Release Date**: January 06, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.16.0...v7.17.0
  ## Resources
  - [Download release 7.17.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.17.0).
          
v7.16.0
  ##  7.16.0
  **Release Date**: January 03, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.15.0...v7.16.0
  ## Resources
  - [Download release 7.16.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.16.0).
          
v7.15.0
  ##  7.15.0
  **Release Date**: December 20, 2024
  ## Changes
  - Minor dependency bumps
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.14.0...v7.15.0
  ## Resources
  - [Download release 7.15.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.15.0).
          
v7.14.0
  ##  7.14.0
  **Release Date**: December 16, 2024
  ## Changes
  - Bump dependencies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.13.0...v7.14.0
  ## Resources
  - [Download release 7.14.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.14.0).
          
nginx-offline-buildpack1.2.33
nodejs-offline-buildpack1.8.44
notifications77.0.0 v77.0.0
  * update golang
          
v76.0.0
  * update jq
          
v75.0.0
  * update dependencies
  * update golang
          
notifications-ui51.0.0
otel-collector0.11.2 v0.11.2
  ## What's Changed
  * Bump packaged Go to go1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/otel-collector-release/compare/v0.11.1...v0.11.2
          
v0.11.1
  ## What's Changed
  * Correctly interpolate `secret` properties when the `name` includes a hyphen by @acosta11 in https://github.com/cloudfoundry/otel-collector-release/pull/58
  * Load string values in `allow_list` properties by @ctlong in https://github.com/cloudfoundry/otel-collector-release/pull/59
  **Full Changelog**: https://github.com/cloudfoundry/otel-collector-release/compare/v0.11.0...v0.11.1
          
v0.11.0
  ## What's Changed
  * Bump packaged Golang to go1.22.8
  * Bump OTel Collector components to v0.111.0 by @mkocher in https://github.com/cloudfoundry/otel-collector-release/pull/56
  * `otlp` exporter now has batching built in
  * Internal metrics are now emitted with names prefixed with `otelcol_`
  * Change `allow_list` properties by @acosta11 in https://github.com/cloudfoundry/otel-collector-release/pull/57
  * Unspecified or `nil` still equates to "allow all"
  * An empty array now equates to "allow nothing" instead of "allow all"
  * Add `pprof` extension by @acosta11 in https://github.com/cloudfoundry/otel-collector-release/pull/57
  **Full Changelog**: https://github.com/cloudfoundry/otel-collector-release/compare/v0.10.1...v0.11.0
          
php-offline-buildpack4.6.36
push-apps-manager-release677.0.66 677.0.66
  * update dependencies
          
677.0.65
  * Set content transfer encoding http headers for search server
  * update dependencies
          
push-offline-docs-release6.0.169
push-usage-service-release674.0.147 v674.0.147
  ## Changes
  * TNZ-24336 - Usage Service - Enhancement - Archive Table (#16)
  * creating final release 674.0.146
          
v674.0.146
  ## Changes
  * Merge pull request #11 from TNZ/snookala/TNZ-24336
  * Merge pull request #12 from TNZ/revert-11-snookala/TNZ-24336
  * Revert "TNZ-24336 - Usage Service - Enhancement - Archive Table"
  * TNZ-24336 - Usage Service - Enhancement - Archive Table
  * creating final release 674.0.145
          
v674.0.145
  ## Changes
  * creating final release 674.0.144
          
v674.0.144
  ## Changes
  * creating final release 674.0.143
          
v674.0.143
  ## Changes
  * chore: attempt to fix pip3 install within make
  * chore: fix path for the release notes source
  * chore: fix path of the task.sh file
  * chore: update bosh CLI with correct version for new releases
  * chore: update to the 0.1.142 essentials image
  * creating final release 674.0.138
  * fix: move release note task to usage-service-release repo due to new python version
          
v674.0.138
  ## Changes
  * creating final release 674.0.137
          
pxc1.0.34 v1.0.34
  Dependency bumps
  * Bump to golang.org/x/net@v0.33.0 to address CVE-2024-45338 / GHSA-w32m-9786-jp63
  * Bump to golang.org/x/crypto@v0.31.0 to address CVE-2024-45337 / GHSA-v778-237x-gjrc
          
python-offline-buildpack1.8.40
r-offline-buildpack1.2.28
routing0.329.0 v0.329.0
  ##  0.329.0
  **Release Date**: January 21, 2025
  ## Changes
  - **BREAKING CHANGE**: The `lb_algo` load balancing option key name has been renamed to `loadbalancing`. This standardizes the name across components. Read more about this change [here](https://github.com/cloudfoundry/community/pull/1039).
  - Bump to go 1.23.5.
  - Bump dependancies.
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec
  index b9afabbe..c39eac91 100644
  --- a/jobs/route_registrar/spec
  +++ b/jobs/route_registrar/spec
  @@ -144,7 +144,7 @@ properties:
  writable (optional, boolean): sets the writable flag. defaults to false
  options object
  -        lb_algo (optional, string): Load balancing algorithm for routing incoming requests to the backend: 'round-robin' or 'least-connection'. In cases where this option is not specified, the algorithm defined in gorouter spec is applied.
  +        loadbalancing (optional, string): Load balancing algorithm for routing incoming requests to the backend: 'round-robin' or 'least-connection'. In cases where this option is not specified, the algorithm defined in gorouter spec is applied.
  example: |
  - name: my-service
  @@ -162,7 +162,7 @@ properties:
  timeout: 5s
  route_service_url: https://my-oauth-proxy-route-service.example.com
  options:
  -          lb_algo: least-connection
  +          loadbalancing: least-connection
  - name: my-tls-endpoint
  tls_port: 12346
  server_cert_domain_san: "my-tls-endpoint.internal.com"
  ```
  ## ✨  Built with go 1.23.5
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.328.0...v0.329.0
  ## Resources
  - [Download release 0.329.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.329.0).
          
v0.328.0
  ##  0.328.0
  **Release Date**: January 06, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.327.0...v0.328.0
  ## Resources
  - [Download release 0.328.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.328.0).
          
v0.327.0
  ##  0.327.0
  **Release Date**: December 20, 2024
  ## Changes
  - Bug fix: update the tcp_routes table to have host_tls_port default to 0 instead of NULL. Before this fix, tcp routes registered via external-to-cf route registrars running routing-release 0.301.0 or lower will have intermittent connectivity issues. - https://github.com/cloudfoundry/routing-api/pull/67 - Thanks @ameowlia!
  - Bump dependancies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.326.0...v0.327.0
  ## Resources
  - [Download release 0.327.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.327.0).
          
v0.326.0
  ##  0.326.0
  **Release Date**: December 16, 2024
  ## Changes
  - ❗ **Breaking Change:** Gorouter will now properly emit [RFC5424](https://datatracker.ietf.org/doc/html/rfc5424) syslog messages instead of broken BSD-style syslog messages. It now only supports syslog over UDP and TCP like it is documented for some time now - [gorouter #459](https://github.com/cloudfoundry/gorouter/pull/459) & [gorouter #411](https://github.com/cloudfoundry/gorouter/pull/411) - Thanks @maxmoehl  and @peanball !
  - Gorouter now supports configurable syslog message truncation via gorouter's new router.logging.syslog_message_limit bosh property [gorouter #447](https://github.com/cloudfoundry/routing-release/pull/447) - Thanks @maxmoehl !
  - Bump tcp-router's haproxy to 2.8.13
  - Bump dependencies
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
  index cdebbd5a..868629ac 100644
  --- a/jobs/gorouter/spec
  +++ b/jobs/gorouter/spec
  @@ -313,6 +313,9 @@ properties:
  router.logging.syslog_tag:
  description: "Tag to use when writing syslog messages"
  default: "vcap.gorouter"
  +  router.logging.syslog_message_limit:
  +    description: "Limit the number of bytes per access log written to syslog. A value of zero disables the limit."
  +    default: 0
  router.logging.syslog_addr:
  description: "Address of a syslog server to send access logs"
  default: "localhost:514"
  ```
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.325.0...v0.326.0
  ## Resources
  - [Download release 0.326.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.326.0).
          
ruby-offline-buildpack1.10.32
web-servers-cnb-buildpack0.15.2
silk3.63.0 v3.63.0
  ##  3.63.0
  **Release Date**: January 06, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.62.0...v3.63.0
  ## Resources
  - [Download release 3.63.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.63.0).
          
v3.62.0
  ##  3.62.0
  **Release Date**: December 21, 2024
  ## Changes
  - Bump go mod dependencies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.61.0...v3.62.0
  ## Resources
  - [Download release 3.62.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.62.0).
          
v3.61.0
  ##  3.61.0
  **Release Date**: December 16, 2024
  ## Changes
  - Bump dependencies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.60.0...v3.61.0
  ## Resources
  - [Download release 3.61.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.61.0).
          
smb-volume3.16.0 v3.16.0
  ##  3.16.0
  **Release Date**: January 03, 2025
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/smb-volume-release/compare/v3.15.0...v3.16.0
  ## Resources
  - [Download release 3.16.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.16.0).
          
v3.15.0
  ##  3.15.0
  **Release Date**: December 20, 2024
  ## Changes
  - Minor dependency bumps
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/smb-volume-release/compare/v3.14.0...v3.15.0
  ## Resources
  - [Download release 3.15.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.15.0).
          
v3.14.0
  ##  3.14.0
  **Release Date**: December 16, 2024
  ## Changes
  - Bump dependencies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/smb-volume-release/compare/v3.13.0...v3.14.0
  ## Resources
  - [Download release 3.14.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.14.0).
          
smoke-tests4.10.0
staticfile-offline-buildpack1.8.21
statsd-injector1.11.46 v1.11.46
  ## What's Changed
  * Bump dependencies
  * Bump packaged Go to go1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/statsd-injector-release/compare/v1.11.45...v1.11.46
          
syslog12.3.6 v12.3.6
  ## What's Changed
  * Bump blackbox dependencies
  * Bump packaged Go to go1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.3.5...v12.3.6
          
system-metrics-scraper4.0.15 v4.0.15
  ## What's Changed
  * Bump dependencies
  * Bump packaged Go to go1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/system-metrics-scraper-release/compare/v4.0.14...v4.0.15
          
v4.0.14
  ## What's Changed
  * Bump dependencies
  **Full Changelog**: https://github.com/cloudfoundry/system-metrics-scraper-release/compare/v4.0.13...v4.0.14
          
uaa77.20.2
tanzu-jammy-stack1.0.1

6.0.11

Release Date: 01/09/2025

  • [Bug Fix] Stop Autoscaler panic when RabbitMQ password includes reserved characters
  • Bump backup-and-restore-sdk to version 1.19.36
  • Bump binary-offline-buildpack to version 1.1.15
  • Bump bpm to version 1.4.6
  • Bump capi to version 1.197.0
  • Bump cf-autoscaling to version 250.3.6
  • Bump cf-cli to version 1.68.0
  • Bump cf-networking to version 3.60.0
  • Bump credhub to version 2.12.98
  • Bump dotnet-core-offline-buildpack to version 2.4.36
  • Bump garden-runc to version 1.64.0
  • Bump go-offline-buildpack to version 1.10.24
  • Bump log-cache to version 3.1.7
  • Bump loggregator to version 107.0.18
  • Bump loggregator-agent to version 8.3.2
  • Bump mapfs to version 1.12.0
  • Bump metric-registrar to version 4.0.5
  • Bump nats to version 56.32.0
  • Bump nfs-volume to version 7.13.0
  • Bump nginx-offline-buildpack to version 1.2.20
  • Bump nodejs-offline-buildpack to version 1.8.30
  • Bump notifications to version 74.0.0
  • Bump notifications-ui to version 51.0.0
  • Bump php-offline-buildpack to version 4.6.25
  • Bump push-apps-manager-release to version 677.0.64
  • Bump push-usage-service-release to version 674.0.137
  • Bump pxc to version 1.0.33
  • Bump python-offline-buildpack to version 1.8.30
  • Bump r-offline-buildpack to version 1.2.16
  • Bump routing to version 0.325.0
  • Bump ruby-offline-buildpack to version 1.10.19
  • Bump silk to version 3.60.0
  • Bump smb-volume to version 3.13.0
  • Bump staticfile-offline-buildpack to version 1.6.18
  • Bump statsd-injector to version 1.11.45
  • Bump syslog to version 12.3.5
  • Bump system-metrics-scraper to version 4.0.13
  • Bump uaa to version 77.20.0

Security Fixes

The following table lists CVEs that were fixed in each TAS for VMs component since the previous patch version of TAS for VMs:

ComponentVulnerabilities Resolved
binary-offline-buildpack
push-offline-docs-release
push-apps-manager-release
log-cache
cflinuxfs3
metric-registrar
notifications
bpm
java-native-image-cnb-buildpack
nginx-offline-buildpack
java-offline-buildpack
notifications-ui
garden-runc
loggregator
diego
system-metrics-scraper
cflinuxfs4
tanzu-jammy-stack
nodejs-offline-buildpack
go-offline-buildpack
silk
loggregator-agent
ruby-offline-buildpack
mysql-monitoring
mapfs
smoke-tests
nfs-volume
syslog
push-usage-service-release
capi
cf-networking
pxc
nats
dotnet-core-offline-buildpack
smb-volume
backup-and-restore-sdk
cf-autoscaling
credhub
uaa
otel-collector
statsd-injector
php-offline-buildpack
routing
python-offline-buildpack
web-servers-cnb-buildpack

Component Release Notes

Component Version Release Notes
ubuntu-jammy stemcell1.651
backup-and-restore-sdk1.19.36 v1.19.36
  ## Changes
  * Add final release 1.19.35 [ci skip]
          
binary-offline-buildpack1.1.15 1.1.15
  * go.mod: update go version
  * Uncached buildpack SHA256: 3f49e2f1794e56e5d0f2c95e627382a2fc23c060cd905e17c61470ae622edf83
  * Uncached buildpack SHA256: 743c3fc88e6198ea7949abf64fdaa4875d3fae10e09051cc51630e3c38f61ac0
  * Uncached buildpack SHA256: 93731fa6e62e5ce94f9ebfdc3ccddef0db950375e5dbd69cc08ee655547dbea8
  * go.mod: update go version
  * Uncached buildpack SHA256: f3d4551e3ee531c6e51cb5cc68a0ff3968398a56bf2315bca763e6388c2f9b1d
  * Uncached buildpack SHA256: 53f2668a9d71a272d59927a4278609d16463fa5c38e2ae8606d73a4cd73e0954
  * Uncached buildpack SHA256: 430ab5b4f9baba759df0f9cbfb8855deb4f193678e029e1c4cf3c681540756ab
          
bosh-dns-aliases0.0.4
bpm1.4.6
capi1.197.0
cf-autoscaling250.3.6 v250.3.6
  ### What's Changed
  * Bump to latest GA of openjdk: 17.0.13
  * Manually package openjdk instead of consuming bosh release
  * Bump go.mod dependencies
          
cf-cli1.68.0 v1.68.0
  ### Included CF CLI versions:
  7.7.15
  8.8.3
          
cf-networking3.60.0 v3.60.0
  ##  3.60.0
  **Release Date**: December 09, 2024
  ## Changes
  - Dependency Bumps
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.59.0...v3.60.0
  ## Resources
  - [Download release 3.60.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.60.0).
          
v3.59.0
  ##  3.59.0
  **Release Date**: December 04, 2024
  ## Changes
  - Upgrade cf-networking-healthchecker
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.58.0...v3.59.0
  ## Resources
  - [Download release 3.59.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.59.0).
          
v3.58.0
  ##  3.58.0
  **Release Date**: December 04, 2024
  ## Changes
  - Bump go to 1.23.4
  - Bump healthchecker
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.57.0...v3.58.0
  ## Resources
  - [Download release 3.58.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.58.0).
          
v3.57.0
  ##  3.57.0
  **Release Date**: December 02, 2024
  ## Changes
  - Dependency Bumps
  - Updated unit/integration/cf-networking-acceptance testing output to be less verbose on happy paths. Thanks @davewalter!
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.56.0...v3.57.0
  ## Resources
  - [Download release 3.57.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.57.0).
          
v3.56.0
  ##  3.56.0
  **Release Date**: November 18, 2024
  ## Changes
  - Upgrade cf-networking-healthchecker
  - Bump Go
  - Add Extra Response Headers handler to proxy example app - https://github.com/cloudfoundry/cf-networking-release/pull/310 - Thanks @ameowlia !
  - Bump dependancies
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.55.0...v3.56.0
  ## Resources
  - [Download release 3.56.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.56.0).
          
v3.55.0
  ##  3.55.0
  **Release Date**: November 14, 2024
  ## Changes
  - Dependency bumps
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.54.0...v3.55.0
  ## Resources
  - [Download release 3.55.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.55.0).
          
v3.54.0
  ##  3.54.0
  **Release Date**: November 05, 2024
  ## Changes
  - [Convert PortAllocator's ints to uint32 to avoid int overflows when picking ports](https://github.com/cloudfoundry/cf-networking-release/commit/7d4c9490695f1cab72341d13300b15c0b35707bf)
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.53.0...v3.54.0
  ## Resources
  - [Download release 3.54.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.54.0).
          
v3.53.0
  ##  3.53.0
  **Release Date**: October 22, 2024
  ## Changes
  - Bump dependancies
  - Use Server struct to address gosec G114 - https://github.com/cloudfoundry/cf-networking-release/pull/305 Thanks @andy-a-d-nguyen!
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/cf-networking-release/compare/v3.52.0...v3.53.0
  ## Resources
  - [Download release 3.53.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.53.0).
          
cflinuxfs30.417.0
cflinuxfs41.130.0
count-cores-indicator2.0.0
credhub2.12.98 2.12.98
  ## What's Changed
  * Various dependency bumps
  **Full Changelog**: https://github.com/pivotal/credhub-release/compare/2.12.97...2.12.98
          
2.12.97
  ## What's Changed
  * Various dependency bumps
  **Full Changelog**: https://github.com/pivotal/credhub-release/compare/2.12.96...2.12.97
          
2.12.96
  ## What's Changed
  * Features
  ** [feat: add back index on credential lowercase name](https://github.com/cloudfoundry/credhub/commit/b7b4814a29ce1ff6a0bbde3ec52a7aa04812a0ef)
  ** [by removing problematic mysql migration](https://github.com/cloudfoundry/credhub/commit/34815e39b3deac933eb1f0ebea1d4c38304178a5)
  * Various dependency bumps
  ## Known issue
  If you have successfully installed v2.12.94 (which is now retracted) and you are using MySQL as CredHub's database, to prevent potential performance issues, please run the following query against your MySQL database for CredHub:
  ```
  DROP INDEX credential_name_lowercase ON credential;
  ```
  This current CredHub release properly sets up similar indexes, and this old `credential_name_lowercase` index (added only by v2.12.94) has now become extraneous and wasteful.
  **Full Changelog**: https://github.com/pivotal/credhub-release/compare/2.12.95...2.12.96
          
2.12.95
  ## What's Changed
  * Fixes an issue in v2.12.94 (which is now retracted) where CredHub might fail to start due to MySQL migration error (see [details](https://github.com/cloudfoundry/credhub/pull/815))
  * As part of this fix, the MySQL [query performance improvement released in v2.12.94](https://github.com/cloudfoundry/credhub/pull/803) has been rolled back (to be added back at a later release), but Postgres improvement stays.
  * Various dependency bumps
          
diego2.105.0
dotnet-core-offline-buildpack2.4.36 2.4.36
  * Remove .NET 6.x that reached End of Support
  * Add .NET 9.0.0
  | name | version | cf_stacks |
  |-|-|-|
  | bower | 1.8.14 | cflinuxfs3, cflinuxfs4 |
  | dotnet-aspnetcore | 8.0.11 | cflinuxfs3, cflinuxfs4 |
  | dotnet-aspnetcore | 9.0.0 | cflinuxfs3, cflinuxfs4 |
  | dotnet-runtime | 8.0.11 | cflinuxfs3, cflinuxfs4 |
  | dotnet-runtime | 9.0.0 | cflinuxfs3, cflinuxfs4 |
  | dotnet-sdk | 8.0.404 | cflinuxfs3, cflinuxfs4 |
  | dotnet-sdk | 9.0.100 | cflinuxfs3, cflinuxfs4 |
  | libgdiplus | 6.1 | cflinuxfs3 |
  | libgdiplus | 6.1 | cflinuxfs4 |
  | libunwind | 1.8.1 | cflinuxfs3 |
  | libunwind | 1.8.1 | cflinuxfs4 |
  | node | 20.16.0 | cflinuxfs3 |
  | node | 20.16.0 | cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | dotnet-runtime | 8.0.x |
  | dotnet-aspnetcore | 8.0.x |
  | dotnet-sdk | 8.0.x |
  | bower | 1.8.x |
  * Uncached buildpack SHA256: 64e0fcf8e25bc7336b5850808096a85db6693a009e5c1130ce455f00f1ad4ad0
  * Uncached buildpack SHA256: 764600d5d03354b66adee9896f692883e45fb80ccb97800d977d9446e4f9f709
          
2.4.35
  * Add dotnet-runtime 8.0.11, remove dotnet-runtime 8.0.10
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add dotnet-runtime 6.0.36, remove dotnet-runtime 6.0.35
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add dotnet-aspnetcore 8.0.11, remove dotnet-aspnetcore 8.0.10
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add dotnet-aspnetcore 6.0.36, remove dotnet-aspnetcore 6.0.35
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add dotnet-sdk 8.0.404, remove dotnet-sdk 8.0.403
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add dotnet-sdk 6.0.428, remove dotnet-sdk 6.0.427
  for stack(s) cflinuxfs4, cflinuxfs3
  * This is planned to be the last buildpack release with .NET 6
  | name | version | cf_stacks |
  |-|-|-|
  | bower | 1.8.14 | cflinuxfs3, cflinuxfs4 |
  | dotnet-aspnetcore | 6.0.36 | cflinuxfs3, cflinuxfs4 |
  | dotnet-aspnetcore | 8.0.11 | cflinuxfs3, cflinuxfs4 |
  | dotnet-runtime | 6.0.36 | cflinuxfs3, cflinuxfs4 |
  | dotnet-runtime | 8.0.11 | cflinuxfs3, cflinuxfs4 |
  | dotnet-sdk | 6.0.428 | cflinuxfs3, cflinuxfs4 |
  | dotnet-sdk | 8.0.404 | cflinuxfs3, cflinuxfs4 |
  | libgdiplus | 6.1 | cflinuxfs3 |
  | libgdiplus | 6.1 | cflinuxfs4 |
  | libunwind | 1.8.1 | cflinuxfs3 |
  | libunwind | 1.8.1 | cflinuxfs4 |
  | node | 20.16.0 | cflinuxfs3 |
  | node | 20.16.0 | cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | dotnet-runtime | 8.0.x |
  | dotnet-aspnetcore | 8.0.x |
  | dotnet-sdk | 8.0.x |
  | bower | 1.8.x |
  * Uncached buildpack SHA256: 7a9b6c24fd6d838afa8d7695494d8b957ca96dc0ef7079032c207631145ee0d1
  * Uncached buildpack SHA256: fe68523aefce0a80493051acf902b8cb0782eaa941b02466c6d318e6d2d85053
          
2.4.34
  * Upgrade Sealights version to 1.5.0
  * Add dotnet-sdk 6.0.427, remove dotnet-sdk 6.0.425
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add dotnet-sdk 8.0.403, remove dotnet-sdk 8.0.401
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add dotnet-aspnetcore 8.0.10, remove dotnet-aspnetcore 8.0.8
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add dotnet-aspnetcore 6.0.35, remove dotnet-aspnetcore 6.0.33
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add dotnet-runtime 6.0.35, remove dotnet-runtime 6.0.33
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add dotnet-runtime 8.0.10, remove dotnet-runtime 8.0.8
  for stack(s) cflinuxfs4, cflinuxfs3
  | name | version | cf_stacks |
  |-|-|-|
  | bower | 1.8.14 | cflinuxfs3, cflinuxfs4 |
  | dotnet-aspnetcore | 6.0.35 | cflinuxfs3, cflinuxfs4 |
  | dotnet-aspnetcore | 8.0.10 | cflinuxfs3, cflinuxfs4 |
  | dotnet-runtime | 6.0.35 | cflinuxfs3, cflinuxfs4 |
  | dotnet-runtime | 8.0.10 | cflinuxfs3, cflinuxfs4 |
  | dotnet-sdk | 6.0.427 | cflinuxfs3, cflinuxfs4 |
  | dotnet-sdk | 8.0.403 | cflinuxfs3, cflinuxfs4 |
  | libgdiplus | 6.1 | cflinuxfs3 |
  | libgdiplus | 6.1 | cflinuxfs4 |
  | libunwind | 1.8.1 | cflinuxfs3 |
  | libunwind | 1.8.1 | cflinuxfs4 |
  | node | 20.16.0 | cflinuxfs3 |
  | node | 20.16.0 | cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | dotnet-runtime | 8.0.x |
  | dotnet-aspnetcore | 8.0.x |
  | dotnet-sdk | 8.0.x |
  | bower | 1.8.x |
  * Uncached buildpack SHA256: 7323fc3434729529257d258365f6de8e38945127a6c2f5f74e3326576a8cc133
  * Uncached buildpack SHA256: 7ab7e182fe0ac2a6d7fd36eb88eafa247ffad75bb750c6264e067127561aeeea
          
garden-runc1.64.0 v1.64.0
  ##  1.64.0
  **Release Date**: December 04, 2024
  ## Changes
  - Bump go to 1.23.4
  - Bump dependancies
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.63.0...v1.64.0
  ## Resources
  - [Download release 1.64.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.64.0).
          
v1.63.0
  ##  1.63.0
  **Release Date**: December 02, 2024
  ## Changes
  - Dependency Bumps
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.62.0...v1.63.0
  ## Resources
  - [Download release 1.63.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.63.0).
          
v1.62.0
  ##  1.62.0
  **Release Date**: November 18, 2024
  ## Changes
  - Bump golang
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.61.0...v1.62.0
  ## Resources
  - [Download release 1.62.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.62.0).
          
v1.61.0
  ##  1.61.0
  **Release Date**: November 14, 2024
  ## Changes
  - Bump iptables to 1.8.11
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.60.0...v1.61.0
  ## Resources
  - [Download release 1.61.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.61.0).
          
v1.60.0
  ##  1.60.0
  **Release Date**: November 07, 2024
  ## Changes
  - G115 fixes
  - Pin runc to 1.1.14
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.59.0...v1.60.0
  ## Resources
  - [Download release 1.60.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.60.0).
          
v1.59.0
  ##  1.59.0
  **Release Date**: October 30, 2024
  ## Changes
  - Update dependencies
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.58.0...v1.59.0
  ## Resources
  - [Download release 1.59.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.59.0).
          
v1.58.0
  ##  1.58.0
  **Release Date**: October 24, 2024
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/garden-runc-release/compare/v1.57.0...v1.58.0
  ## Resources
  - [Download release 1.58.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.58.0).
          
go-offline-buildpack1.10.24 1.10.24
  * Add go 1.22.9, remove go 1.22.7
  for stack(s) cflinuxfs3, cflinuxfs4
  * Add go 1.23.3, remove go 1.23.1
  for stack(s) cflinuxfs4, cflinuxfs3
  | name | version | cf_stacks |
  |-|-|-|
  | dep | 0.5.4 | cflinuxfs3 |
  | dep | 0.5.4 | cflinuxfs4 |
  | glide | 0.13.3 | cflinuxfs3 |
  | glide | 0.13.3 | cflinuxfs4 |
  | go | 1.22.9 | cflinuxfs3 |
  | go | 1.22.9 | cflinuxfs4 |
  | go | 1.23.3 | cflinuxfs3 |
  | go | 1.23.3 | cflinuxfs4 |
  | godep | 80 | cflinuxfs3 |
  | godep | 80 | cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | go | 1.22.x |
  * Uncached buildpack SHA256: 92024d548e7d209d8917e5aa61715bf8d4c3824e1851b25176cc44b118d9ac32
  * Uncached buildpack SHA256: 60287b87753edcbc00ad3fad59c2cf9cafb8e4307bc0471ac6c59017632d4cd1
          
java-offline-buildpack4.73.0
java-native-image-cnb-buildpack0.11.22
log-cache3.1.7 v3.1.7
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.22.10
  * Bump ruby to ~3.1 in template tests by @ctlong in https://github.com/cloudfoundry/log-cache-release/pull/569
  * Using xxhash v2 by @Jobsby in https://github.com/cloudfoundry/log-cache-release/pull/577
  ## New Contributors
  * @Jobsby made their first contribution in https://github.com/cloudfoundry/log-cache-release/pull/577
  **Full Changelog**: https://github.com/cloudfoundry/log-cache-release/compare/v3.1.6...v3.1.7
          
v3.1.6
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.22.8
  * Modernize packaging scripts by @ctlong in https://github.com/cloudfoundry/log-cache-release/pull/468
  * Update README to include descending parameter for /api/v1/read/ endpoint by @anetaivanova-pesheva in https://github.com/cloudfoundry/log-cache-release/pull/554
  * Use Succeed() instead of BeNil() in tests by @acosta11 in https://github.com/cloudfoundry/log-cache-release/pull/568
  ## New Contributors
  * @anetaivanova-pesheva made their first contribution in https://github.com/cloudfoundry/log-cache-release/pull/554
  **Full Changelog**: https://github.com/cloudfoundry/log-cache-release/compare/v3.1.5...v3.1.6
          
loggregator107.0.18 v107.0.18
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.22.8
  **Full Changelog**: https://github.com/cloudfoundry/loggregator-release/compare/v107.0.17...v107.0.18
          
loggregator-agent8.3.2 v8.3.2
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.22.10
  **Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.3.1...v8.3.2
          
v8.3.1
  ## What's Changed
  * Bump dependencies
  **Full Changelog**: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.3.0...v8.3.1
          
mapfs1.12.0 v1.12.0
  ##  1.12.0
  **Release Date**: December 09, 2024
  ## Changes
  - Dependency updates
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/mapfs-release/compare/v1.11.0...v1.12.0
  ## Resources
  - [Download release 1.12.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.12.0).
          
v1.11.0
  ##  1.11.0
  **Release Date**: December 04, 2024
  ## Changes
  - Bump go to 1.23.4
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/mapfs-release/compare/v1.10.0...v1.11.0
  ## Resources
  - [Download release 1.11.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.11.0).
          
v1.10.0
  ##  1.10.0
  **Release Date**: December 02, 2024
  ## Changes
  - Dependency bumps
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/mapfs-release/compare/v1.9.0...v1.10.0
  ## Resources
  - [Download release 1.10.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.10.0).
          
v1.9.0
  ##  1.9.0
  **Release Date**: November 27, 2024
  ## Changes
  - Minor dependency bumps
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/mapfs-release/compare/v1.8.0...v1.9.0
  ## Resources
  - [Download release 1.9.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.9.0).
          
v1.8.0
  ##  1.8.0
  **Release Date**: November 14, 2024
  ## Changes
  - Dependency bumps
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/mapfs-release/compare/v1.7.0...v1.8.0
  ## Resources
  - [Download release 1.8.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.8.0).
          
v1.7.0
  ##  1.7.0
  **Release Date**: November 08, 2024
  ## Changes
  - Bump dependancies.
  - Validate against integer overflows in mapfs's Chown() call - https://github.com/cloudfoundry/mapfs-release/pull/283 - Thanks @geofffranks !
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/mapfs-release/compare/v1.6.0...v1.7.0
  ## Resources
  - [Download release 1.7.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.7.0).
          
v1.6.0
  ##  1.6.0
  **Release Date**: October 31, 2024
  ## Changes
  - Bump dependancies.
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/mapfs-release/compare/v1.5.0...v1.6.0
  ## Resources
  - [Download release 1.6.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.6.0).
          
v1.5.0
  ##  1.5.0
  **Release Date**: October 24, 2024
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/mapfs-release/compare/v1.4.0...v1.5.0
  ## Resources
  - [Download release 1.5.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.5.0).
          
metric-registrar4.0.5 v4.0.5
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.22.10
          
v4.0.4
  ## What's Changed
  * Bump dependencies
  * Bump packaged golang to go1.22.8
          
mysql-monitoring10.16.0
nats56.32.0 v56.32.0
  ##  56.32.0
  **Release Date**: December 09, 2024
  ## Changes
  - Dependency Bumps
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.31.0...v56.32.0
  ## Resources
  - [Download release 56.32.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.32.0).
          
v56.31.0
  ##  56.31.0
  **Release Date**: December 04, 2024
  ## Changes
  - Bump go to 1.23.4
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.30.0...v56.31.0
  ## Resources
  - [Download release 56.31.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.31.0).
          
v56.30.0
  ##  56.30.0
  **Release Date**: December 02, 2024
  ## Changes
  - dependency bumps
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.29.0...v56.30.0
  ## Resources
  - [Download release 56.30.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.30.0).
          
v56.29.0
  ##  56.29.0
  **Release Date**: November 26, 2024
  ## Changes
  - Dependency Bumps
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.28.0...v56.29.0
  ## Resources
  - [Download release 56.29.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.29.0).
          
v56.28.0
  ##  56.28.0
  **Release Date**: November 14, 2024
  ## Changes
  - Dependency Bumps
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.27.0...v56.28.0
  ## Resources
  - [Download release 56.28.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.28.0).
          
v56.27.0
  ##  56.27.0
  **Release Date**: November 08, 2024
  ## Changes
  - Bump dependancies.
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.26.0...v56.27.0
  ## Resources
  - [Download release 56.27.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.27.0).
          
v56.26.0
  ##  56.26.0
  **Release Date**: October 24, 2024
  ## Changes
  - Bump dependancies.
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/nats-release/compare/v56.25.0...v56.26.0
  ## Resources
  - [Download release 56.26.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nats-release?version=56.26.0).
          
nfs-volume7.13.0 v7.13.0
  ##  7.13.0
  **Release Date**: December 09, 2024
  ## Changes
  - Dependency Bumps
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.12.0...v7.13.0
  ## Resources
  - [Download release 7.13.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.13.0).
          
v7.12.0
  ##  7.12.0
  **Release Date**: December 04, 2024
  ## Changes
  - Bump go to 1.23.4.
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.11.0...v7.12.0
  ## Resources
  - [Download release 7.12.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.12.0).
          
v7.11.0
  ##  7.11.0
  **Release Date**: December 02, 2024
  ## Changes
  - Dependency Bumps
  - OpenLDAP bumped to 2.6.9
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.10.0...v7.11.0
  ## Resources
  - [Download release 7.11.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.11.0).
          
v7.10.0
  ##  7.10.0
  **Release Date**: November 27, 2024
  ## Changes
  - Minor dependency bumps
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.9.0...v7.10.0
  ## Resources
  - [Download release 7.10.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.10.0).
          
v7.9.0
  ##  7.9.0
  **Release Date**: November 18, 2024
  ## Changes
  - Restart rpc group as asked by in man pages - https://github.com/cloudfoundry/nfs-volume-release/pull/1044 - Thank you @krsna-m !
  - Bump go
  - Bump dependancies
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.8.0...v7.9.0
  ## Resources
  - [Download release 7.9.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.9.0).
          
nginx-offline-buildpack1.2.20 1.2.20
  * Add nginx 1.26.2, remove nginx 1.26.1
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add nginx 1.27.2, remove nginx 1.27.1
  for stack(s) cflinuxfs4, cflinuxfs3
  | name | version | cf_stacks |
  |-|-|-|
  | nginx | 1.26.2 | cflinuxfs3 |
  | nginx | 1.26.2 | cflinuxfs4 |
  | nginx | 1.27.2 | cflinuxfs3 |
  | nginx | 1.27.2 | cflinuxfs4 |
  | openresty | 1.21.4.3 | cflinuxfs3 |
  | openresty | 1.21.4.3 | cflinuxfs4 |
  | openresty | 1.25.3.2 | cflinuxfs3 |
  | openresty | 1.25.3.2 | cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | nginx | 1.27.x |
  * Uncached buildpack SHA256: 6c94c1e25fb799a3c484ec8e7a977d1e93bfb06d00faf7b2b2397e147b4ba52d
  * Uncached buildpack SHA256: 40f18e495af26c02ea1ea02f1a5070af711f8dabbb35e64521d0abdb5100dd32
          
nodejs-offline-buildpack1.8.30 1.8.30
  * Add node 22.11.0, remove node 22.7.0
  for stack(s) cflinuxfs4
  * Add node 20.18.0, remove node 20.15.1
  for stack(s) cflinuxfs3, cflinuxfs4
  | name | version | cf_stacks |
  |-|-|-|
  | node | 18.20.3 | cflinuxfs3 |
  | node | 18.20.3 | cflinuxfs4 |
  | node | 18.20.4 | cflinuxfs3 |
  | node | 18.20.4 | cflinuxfs4 |
  | node | 20.16.0 | cflinuxfs3 |
  | node | 20.16.0 | cflinuxfs4 |
  | node | 20.18.0 | cflinuxfs3 |
  | node | 20.18.0 | cflinuxfs4 |
  | node | 22.8.0 | cflinuxfs4 |
  | node | 22.11.0 | cflinuxfs4 |
  | python | 3.11.10 | cflinuxfs3 |
  | python | 3.11.10 | cflinuxfs4 |
  | yarn | 1.22.19 | cflinuxfs3, cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | node | 18.x |
  | python | 3.11.x |
  * Uncached buildpack SHA256: e6e042aae675046afab18f70c2b07d769ca9105da91aa6831caffc5731f0954e
  * Uncached buildpack SHA256: 07a76c3b804f3ed81208a2a7d3acf323756f093c60b1b3d753c6eaa399680e01
          
notifications74.0.0 v74.0.0
  commit 682ca7f9aa4f51fdbb2a470b5508f8ee9201af20
  Author: PCF Toronto Concourse CI Bot 
  Date:   Wed Nov 27 20:10:02 2024 +0000
  Cuts final release 74.0.0
  [ci skip]
  commit 37aa672afcf55a7f3e22b2cf469a31f2c876bd0e
  Merge: 8bf5ae9 ed4cfac
  Author: Benjamin Fuller 
  Date:   Wed Nov 27 11:31:01 2024 -0700
  Merge pull request #70 from cloudfoundry/dependabot/go_modules/src/acceptance/github.com/onsi/gomega-1.36.0
  Bump github.com/onsi/gomega from 1.34.2 to 1.36.0 in /src/acceptance
  commit 8bf5ae9a8a6bc3eac21ed915896f66f040b6e99f
  Merge: e28c5dc e934c50
  Author: Benjamin Fuller 
  Date:   Wed Nov 27 11:30:41 2024 -0700
  Merge pull request #72 from cloudfoundry/dependabot/go_modules/src/notifications/github.com/onsi/gomega-1.36.0
  Bump github.com/onsi/gomega from 1.34.2 to 1.36.0 in /src/notifications
  commit ed4cfacc7f278ecaa1452d5b145fb58bde1de8b6
  Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Date:   Wed Nov 27 18:29:01 2024 +0000
  Bump github.com/onsi/gomega from 1.34.2 to 1.36.0 in /src/acceptance
  Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.34.2 to 1.36.0.
  - [Release notes](https://github.com/onsi/gomega/releases)
  - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
  - [Commits](https://github.com/onsi/gomega/compare/v1.34.2...v1.36.0)
  ---
  updated-dependencies:
  - dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
  ...
  Signed-off-by: dependabot[bot] 
  commit e934c50b4565b1099a49b7c6c493933f3dff510d
  Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Date:   Wed Nov 27 18:28:37 2024 +0000
  Bump github.com/onsi/gomega from 1.34.2 to 1.36.0 in /src/notifications
  Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.34.2 to 1.36.0.
  - [Release notes](https://github.com/onsi/gomega/releases)
  - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
  - [Commits](https://github.com/onsi/gomega/compare/v1.34.2...v1.36.0)
  ---
  updated-dependencies:
  - dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
  ...
  Signed-off-by: dependabot[bot] 
  commit e28c5dce83ebe7682b6eeaed070a500a3e412ae6
  Merge: b71adb7 d38aaae
  Author: Benjamin Fuller 
  Date:   Wed Nov 27 11:27:52 2024 -0700
  Merge pull request #71 from cloudfoundry/dependabot/go_modules/src/acceptance/github.com/onsi/ginkgo/v2-2.22.0
  Bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.22.0 in /src/acceptance
  commit b71adb7dc27d18a9cca110c7dc33968b630c8f82
  Merge: 9e11702 a68798c
  Author: Benjamin Fuller 
  Date:   Wed Nov 27 11:27:23 2024 -0700
  Merge pull request #73 from cloudfoundry/dependabot/go_modules/src/notifications/github.com/onsi/ginkgo/v2-2.22.0
  Bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.22.0 in /src/notifications
  commit 9e11702132ec1b2d1acb8b54d0bc7df0ae45b354
  Merge: f9b9cab 3b5a802
  Author: Evan Farrar 
  Date:   Wed Nov 27 10:02:53 2024 -0800
  Merge pull request #75 from cloudfoundry/move-blobstore
  move blobstore to gcs
  commit 3b5a802530296a3d46ca6d7dffde88c092456008
  Author: Ben Fuller 
  Date:   Wed Nov 27 10:58:30 2024 -0700
  move blobstore to gcs
  commit a68798cce1b5326f83f9795eb8c0f8f0db0ca1d0
  Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Date:   Mon Nov 25 23:11:03 2024 +0000
  Bump github.com/onsi/ginkgo/v2 in /src/notifications
  Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.20.2 to 2.22.0.
  - [Release notes](https://github.com/onsi/ginkgo/releases)
  - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
  - [Commits](https://github.com/onsi/ginkgo/compare/v2.20.2...v2.22.0)
  ---
  updated-dependencies:
  - dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  ...
  Signed-off-by: dependabot[bot] 
  commit f9b9cabe11654627b897beec31bae137962106e4
  Merge: 122b2dc a83b5a6
  Author: Evan Farrar 
  Date:   Mon Nov 25 15:09:57 2024 -0800
  Merge pull request #69 from cloudfoundry/integrate-submodule
  integrate submodule
  commit d38aaaef6293d4358a280690e8907f41bfd3bf91
  Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Date:   Mon Nov 25 22:30:52 2024 +0000
  Bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.22.0 in /src/acceptance
  Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.20.2 to 2.22.0.
  - [Release notes](https://github.com/onsi/ginkgo/releases)
  - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
  - [Commits](https://github.com/onsi/ginkgo/compare/v2.20.2...v2.22.0)
  ---
  updated-dependencies:
  - dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  ...
  Signed-off-by: dependabot[bot] 
  commit a83b5a6fde9afc5930eadd75df9a2825fe0ddb92
  Author: Ben Fuller 
  Date:   Mon Nov 25 13:08:14 2024 -0700
  integrate submodule
  commit 122b2dcf62d4fc1acebd7354226f4ebc8cca1b5d
  Author: PCF Event Alerts Team CI 
  Date:   Fri Nov 15 20:12:14 2024 +0000
  bump-golang to v0.159.0
  commit a98da85050ccc15867eb461d6362196d1a647972
  Author: Benjamin Fuller 
  Date:   Mon Oct 7 11:48:38 2024 -0600
  paramaterize vm type (#66)
  commit 4fa39a24439a2914528bb3d52b62908daa6024d4
  Author: PCF Event Alerts Team CI 
  Date:   Tue Oct 1 18:02:27 2024 +0000
  bump-golang to v0.158.0
          
notifications-ui51.0.0 v51.0.0
  commit 5bb855e8a92447fe11d4519f98bac77fceca82b6
  Author: PCF Event Alerts Team CI 
  Date:   Wed Nov 27 20:22:32 2024 +0000
  Cuts final release 51.0.0
  [ci skip]
  commit f4b426534c2f8fcbc91bec2e8c60a162e5fb8e2a
  Merge: c0f0142 4a64ab0
  Author: Ben Fuller 
  Date:   Wed Nov 27 11:47:32 2024 -0700
  Merge pull request #5 from TNZ/renovate/github.com-puerkitobio-goquery-1.x
  Update module github.com/PuerkitoBio/goquery to v1.10.0
  commit 4a64ab09bff1d65a9cedec394c290c04a6705a6a
  Author: Renovate Bot 
  Date:   Wed Nov 27 18:34:48 2024 +0000
  Update module github.com/PuerkitoBio/goquery to v1.10.0
  commit c0f0142c60b54ea42b88533cf524c6956fe99137
  Author: Ben Fuller 
  Date:   Wed Nov 27 11:20:05 2024 -0700
  update renovate
  commit 52fa309f02a52f46cb037f6e47dc0bb99c743534
  Author: Ben Fuller 
  Date:   Wed Nov 27 10:44:38 2024 -0700
  move to gcs
  commit 0b58b7e382d4539c8de90b6295dd6d7de778d0dd
  Author: Ben Fuller 
  Date:   Mon Nov 25 10:40:03 2024 -0700
  remove github actions from submodule
  - will need to change these to mainline
  commit a3bbe801183345dca1e61ea1362055eba4e1cdc8
  Author: Ben Fuller 
  Date:   Mon Nov 25 10:39:26 2024 -0700
  remove incorperate code submodule
  commit 57b5276f05e52144ad1d48602d5586fcbe611440
  Author: PCF Event Alerts Team CI 
  Date:   Fri Nov 15 20:12:02 2024 +0000
  bump-golang to v0.159.0
  commit 908c7f607dbbfd83e4cdb0aca1d075989fbfeb6e
  Author: Ben Fuller 
  Date:   Mon Oct 7 11:42:51 2024 -0600
  parameterize vm_type
  commit f7fe4fa62db352a25f7c6c4b31853a67276c500b
  Author: PCF Event Alerts Team CI 
  Date:   Tue Oct 1 18:02:26 2024 +0000
  bump-golang to v0.158.0
          
otel-collector0.10.1
php-offline-buildpack4.6.25 4.6.25
  * Add composer 2.8.2, remove composer 2.7.8
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add nginx 1.27.2, remove nginx 1.27.1
  for stack(s) cflinuxfs3, cflinuxfs4
  * Add php 8.1.29, remove php 8.1.27
  for stack(s) cflinuxfs3, cflinuxfs4
  * Add php 8.3.11, remove php 8.3.9
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add php 8.2.24, remove php 8.2.21
  for stack(s) cflinuxfs4, cflinuxfs3
  | name | version | cf_stacks | modules |
  |-|-|-|-|
  | appdynamics | 23.11.0-839 | cflinuxfs3, cflinuxfs4 |  |
  | composer | 2.8.2 | cflinuxfs3, cflinuxfs4 |  |
  | httpd | 2.4.62 | cflinuxfs3 |  |
  | httpd | 2.4.62 | cflinuxfs4 |  |
  | newrelic | 10.21.0.11 | cflinuxfs3, cflinuxfs4 |  |
  | nginx | 1.26.2 | cflinuxfs3 |  |
  | nginx | 1.26.2 | cflinuxfs4 |  |
  | nginx | 1.27.2 | cflinuxfs3 |  |
  | nginx | 1.27.2 | cflinuxfs4 |  |
  | php | 8.1.29 | cflinuxfs3 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaf, yaml, zip, zlib |
  | php | 8.1.29 | cflinuxfs4 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaf, yaml, zip, zlib |
  | php | 8.1.30 | cflinuxfs3 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaf, yaml, zip, zlib |
  | php | 8.1.30 | cflinuxfs4 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaf, yaml, zip, zlib |
  | php | 8.2.23 | cflinuxfs3 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaml, zip, zlib |
  | php | 8.2.23 | cflinuxfs4 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaml, zip, zlib |
  | php | 8.2.24 | cflinuxfs3 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaml, zip, zlib |
  | php | 8.2.24 | cflinuxfs4 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaml, zip, zlib |
  | php | 8.3.10 | cflinuxfs3 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaml, zip, zlib |
  | php | 8.3.10 | cflinuxfs4 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaml, zip, zlib |
  | php | 8.3.11 | cflinuxfs3 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaml, zip, zlib |
  | php | 8.3.11 | cflinuxfs4 | amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaml, zip, zlib |
  | python | 3.12.4 | cflinuxfs3 |  |
  | python | 3.12.4 | cflinuxfs4 |  |
  | ruby | 3.0.5 | cflinuxfs4 |  |
  Default binary versions:
  | name | version |
  |-|-|
  | php | 8.1.30 |
  | httpd | 2.4.62 |
  | newrelic | 10.21.0.11 |
  | nginx | 1.27.2 |
  | composer | 2.8.2 |
  * Uncached buildpack SHA256: 775175df334c3ed8044db41d002150208d905cb0ad8e13ff5397dc0ca86ae294
  * Uncached buildpack SHA256: 5baaddeef0f430927f2a14c257ec3703a17e521195c04c8fa4797792d3ff3a7b
          
push-apps-manager-release677.0.64 677.0.64
  * create new release to handle bosh compilation errors caused by previous version of bosh
          
677.0.63
  ## What's Changed
  * update dependencies
  * separation of api per page configuration between apps manager and search server
          
677.0.62
  * add new forms of validation for creating service instances
  * raise async queue limit, allowing apps-manager to make more requests to backend quicker
          
677.0.61
  * fix padding of spring logging modal
  * fix spring logging modal for to respect the levels that are presented by the spring application. For example, if only "OFF" and "DEBUG" are available, it won't present a button to attempt to set the logging level to "ERROR".
          
push-offline-docs-release6.0.169
push-usage-service-release674.0.137 v674.0.137
  ## Changes
  * chore: no longer do all on version pushes
  * creating final release 674.0.136
  * move to shared vault location
          
v674.0.136
  ## Changes
  * creating final release 674.0.135
          
v674.0.135
  ## Changes
  * Add renovate bot
  * Merge pull request #10 from TNZ/renovate-bot
  * add submodule support to renovate
  * creating final release 674.0.134
  * fix: echo out env
  * fix: hopefully fix renovate endpoint cert error
  * fix: remove dashboard approval
  * fix: remove dryrun
  * fix: remove github proxy
  * fix: remove package rules
  * fix: still hitting github.com
  * fix: submodule clone and secret
  * fix: try only git submodules
          
v674.0.134
  ## Changes
  * creating final release 674.0.133
          
v674.0.132
  ## Changes
  * Fix constraint issue for USAGE-83 (#8)
  * creating final release 674.0.131
          
v674.0.131
  ## Changes
  * Bump usage service (#7)
  * creating final release 674.0.130
          
v674.0.130
  ## Changes
  * Merge pull request #6 from TNZ/usage-83
  * bump app usage service
  * creating final release 674.0.129
          
v674.0.129
  ## Changes
  * Merge branch 'main' into snookala/TPCF-27343
  * Merge branch 'main' into snookala/TPCF-27343
  * Merge branch 'snookala/TPCF-27343' of https://github.gwd.broadcom.net/TNZ/usage-service-release into snookala/TPCF-27343
  * Merge pull request #5 from TNZ/snookala/TPCF-27343
  * TPCF-27343 - Switch Usage-service to tas-lite
  * TPCF-27343 - Switch Usage-service to tas-lite
  * TPCF-27343 - Switch Usage-service to tas-lite
  * TPCF-27343 - Switch Usage-service to tas-lite
  * TPCF-27343 - Switch Usage-service to tas-lite
  * Update app-usage-service
  * creating final release 674.0.128
          
v674.0.128
  ## Changes
  * creating final release 674.0.127
          
v674.0.127
  ## Changes
  * creating final release 674.0.126
          
v674.0.126
  ## Changes
  * Update the URL for OCI images
  * creating final release 674.0.125
          
v674.0.125
  ## Changes
  * Revert "fix: fix submodule for pipelines"
  * add ability to configure memory for services (#1)
  * creating final release 674.0.124
  * fix: fix submodule for pipelines
  * fix: fix submodule url for pipelines
  * remove username from pr resource, not needed. Add description to shepherd claims
          
v674.0.124
  ## Changes
  * Change URLs to point to the new github on-prem instance
  * Merge pull request #601 from pivotal-cf/dependabot/submodules/main/src/app-usage-service-827883c
  * Merge pull request #602 from pivotal-cf/migration-on-prem
  * creating final release 674.0.123
  ## Dependencies
  * **app-usage-service:** Updated to v`827883c`.
For more information, see [app-usage-service](https://github.com/pivotal-cf/app-usage-service).
pxc1.0.33 v1.0.33
  Dependency bumps
  * Bump Go to v1.23.4
  * Bumps Percona XtraDB Cluster to v8.0.39-30
  Note: This version of Percona XtraDB Cluster addresses a serious issue with data loss when using inplace ALTER TABLE.
  See: [PS-9214](https://perconadev.atlassian.net/browse/PS-9214) and [this blog post](https://www.percona.com/blog/who-ate-my-mysql-table-rows/)
          
v1.0.32
  ## Release Notes
  **Bugs Fixed**
  - Fix a memory leak bug in the Percona audit log plugin when  `engine_config.audit_logs.enabled` is configured
  Previously, when the audit log feature was enabled and long-lived connections that heavily used prepared statement were used, memory could grow linearly over time and lead to the Linux OOM killer terminating MySQL.
  This backports a fix from [PS-9369](https://perconadev.atlassian.net/browse/PS-9369) to address a memory leak for workloads that heavily use long-lived connections and prepared statements with audit logs enabled.
  **Dependency bumps**
  - Bump Go to v1.23.3
  - Updates packages and dependencies
          
python-offline-buildpack1.8.30 1.8.30
  * Add python 3.13.0, remove python 3.8
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add pip 24.3.1, remove pip 24.2
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add setuptools 75.3.0, remove setuptools 75.1.0
  for stack(s) cflinuxfs4, cflinuxfs3
  * Update pipenv to 2024.4.0
  for stack(s) cflinuxfs3, cflinuxfs4
  * Add python 3.12.7, remove python 3.12.6
  for stack(s) cflinuxfs4, cflinuxfs3
  * Updated setuptools to 75.1.0
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add python 3.10.15, remove python 3.10.14
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add python 3.9.20, remove python 3.9.19
  for stack(s) cflinuxfs3, cflinuxfs4
  * Add python 3.8.20, remove python 3.8.19
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add python 3.12.6, remove python 3.12.5
  for stack(s) cflinuxfs3, cflinuxfs4
  * Add python 3.11.10, remove python 3.11.9
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add support for the SL_VERSION env var in the Sealights configuration.
  | name | version | cf_stacks |
  |-|-|-|
  | libffi | 3.2.1 | cflinuxfs3, cflinuxfs4 |
  | libmemcache | 1.0.18 | cflinuxfs3, cflinuxfs4 |
  | miniforge | 24.7.1 | cflinuxfs3, cflinuxfs4 |
  | pip | 24.3.1 | cflinuxfs3, cflinuxfs4 |
  | pipenv | 2024.4.0 | cflinuxfs3 |
  | pipenv | 2024.4.0 | cflinuxfs4 |
  | python | 3.9.20 | cflinuxfs3 |
  | python | 3.9.20 | cflinuxfs4 |
  | python | 3.10.15 | cflinuxfs3 |
  | python | 3.10.15 | cflinuxfs4 |
  | python | 3.11.10 | cflinuxfs3 |
  | python | 3.11.10 | cflinuxfs4 |
  | python | 3.12.7 | cflinuxfs3 |
  | python | 3.12.7 | cflinuxfs4 |
  | python | 3.13.0 | cflinuxfs3 |
  | python | 3.13.0 | cflinuxfs4 |
  | setuptools | 75.3.0 | cflinuxfs3, cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | python | 3.10.x |
  * Uncached buildpack SHA256: bd620a637291acb19d0535fd69126bf3054b564e431634ff959e0e90c1667b6e
  * Uncached buildpack SHA256: a9dc0d6f92bc051d611a48edb4ef438dd0b6709b8bd4a75df34a69ec173ecaff
          
r-offline-buildpack1.2.16 1.2.16
  * go.mod: update go version
  | name | version | cf_stacks | modules |
  |-|-|-|-|
  | r | 4.2.3 | cflinuxfs3 | forecast, plumber, rserve, shiny |
  | r | 4.2.3 | cflinuxfs4 | forecast, plumber, rserve, shiny |
  | r | 4.3.3 | cflinuxfs3 | forecast, plumber, rserve, shiny |
  | r | 4.3.3 | cflinuxfs4 | forecast, plumber, rserve, shiny |
  | r | 4.4.1 | cflinuxfs3 | forecast, plumber, rserve, shiny |
  | r | 4.4.1 | cflinuxfs4 | forecast, plumber, rserve, shiny |
  * Uncached buildpack SHA256: d5698a7eeee8b81a27f25708d523b69b42cc3578cfa962eb27838bdc56d73d14
  * Uncached buildpack SHA256: 243b87da596e742c8c9438877d4229cd44f7ec3470933f0d4ff692e10bd535bf
          
routing0.325.0 v0.325.0
  ##  0.325.0
  **Release Date**: December 09, 2024
  ## Changes
  - Dependency Bumps
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.324.0...v0.325.0
  ## Resources
  - [Download release 0.325.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.325.0).
          
v0.324.0
  ##  0.324.0
  **Release Date**: December 05, 2024
  ## Changes
  - [Upgrade routing-healthchecker](https://github.com/cloudfoundry/routing-release/commit/d429341973f55be5f69e57176ee9c971fb2cf375)
  - [Upgrade golang-1.23-linux (1.23.4)](https://github.com/cloudfoundry/routing-release/commit/8fb1521593bb8aa9881aa3206c42a5a1bfefbfd1)
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.323.0...v0.324.0
  ## Resources
  - [Download release 0.324.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.324.0).
          
v0.323.0
  ##  0.323.0
  **Release Date**: December 02, 2024
  ## Changes
  - Dependency bumps
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.322.0...v0.323.0
  ## Resources
  - [Download release 0.323.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.323.0).
          
v0.322.0
  ##  0.322.0
  **Release Date**: November 27, 2024
  ## Changes
  - Various minor dependency bumps
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.321.0...v0.322.0
  ## Resources
  - [Download release 0.322.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.322.0).
          
v0.321.0
  ##  0.321.0
  **Release Date**: November 18, 2024
  ## Changes
  - Add bosh properties for additional header (request and response) limits - https://github.com/cloudfoundry/routing-release/issues/309, https://github.com/cloudfoundry/routing-release/pull/443, https://github.com/cloudfoundry/gorouter/pull/453 - Thanks @maxmoehl !
  - Bump Go
  - Bump dependancies
  ## Bosh Job Spec changes:
  ```diff
  diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec
  index c7896a27..cdebbd5a 100644
  --- a/jobs/gorouter/spec
  +++ b/jobs/gorouter/spec
  @@ -266,12 +266,41 @@ properties:
  description: "Enforce strict validation of a route service signature"
  default: false
  router.max_header_kb:
  +    description: |
  +        Deprecated, use router.max_request_header_kb instead which is equivalent to this option.
  +    default: 1024 # 1Mb
  +  router.max_request_header_kb:
  description: |
  This value controls the maximum number of bytes (in KB) the gorouter will read
  parsing the request header's keys and values, including the request
  line. It does not limit the size of the request body. Requests with
  larger headers will result in a 431 status code. Must be between 1 and 1024kb.
  -    default: 1024 # 1Mb
  +        Note: This value takes precedence over router.max_header_kb but has no default to not break
  +        existing setups. If you previously configured router.max_header_kb it is recommended to
  +        switch to this property instead.
  +    example: 1024 # 1Mb
  +  router.max_response_header_kb:
  +    description: |
  +        This value controls the maximum number of bytes (in KB) the gorouter will read
  +        parsing the response header's keys and values, including the request
  +        line. It does not limit the size of the response body. Responses with
  +        larger headers will result in a 502 status code. A limit of zero or less will
  +        result in the default GoLang limit being used.
  +    default: 0
  +  router.max_request_headers:
  +    description: |
  +        This value controls the maximum number of headers gorouter will accept in a
  +        single request. Only the header keys are counted and values separated by commas
  +        are not considered additional headers. Setting this to zero or less disables the
  +        limit. Must be at least 30 for CF to function properly (enforced).
  +    default: 0
  +  router.max_response_headers:
  +    description: |
  +        This value controls the maximum number of headers gorouter will accept in a
  +        single response. Only the header keys are counted and values separated by commas
  +        are not considered additional headers. Setting this to zero or less disables the
  +        limit. Must be at least 30 for CF to function properly (enforced).
  +    default: 0
  router.extra_headers_to_log:
  description: "An array of headers that access log events will be annotated with. This only applies to headers on requests."
  default: []
  ```
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.320.0...v0.321.0
  ## Resources
  - [Download release 0.321.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.321.0).
          
v0.320.0
  ##  0.320.0
  **Release Date**: November 15, 2024
  ## Changes
  - Upgrade routing-healthchecker
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/routing-release/compare/v0.319.0...v0.320.0
  ## Resources
  - [Download release 0.320.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.320.0).
          
ruby-offline-buildpack1.10.19 1.10.19
  * Add bundler 2.5.20, remove bundler 2.5.18
  for stack(s) cflinuxfs4, cflinuxfs3
  * Add rubygems 3.5.21, remove rubygems 3.5.18
  for stack(s) cflinuxfs4, cflinuxfs3
  | name | version | cf_stacks |
  |-|-|-|
  | bundler | 2.5.20 | cflinuxfs3, cflinuxfs4 |
  | jruby | 9.4.8.0 | cflinuxfs3 |
  | jruby | 9.4.8.0 | cflinuxfs4 |
  | node | 20.16.0 | cflinuxfs3 |
  | node | 20.16.0 | cflinuxfs4 |
  | openjdk1.8-latest | 1.8.0 | cflinuxfs3, cflinuxfs4 |
  | ruby | 3.1.5 | cflinuxfs3 |
  | ruby | 3.1.5 | cflinuxfs4 |
  | ruby | 3.1.6 | cflinuxfs3 |
  | ruby | 3.1.6 | cflinuxfs4 |
  | ruby | 3.2.4 | cflinuxfs3 |
  | ruby | 3.2.4 | cflinuxfs4 |
  | ruby | 3.2.5 | cflinuxfs3 |
  | ruby | 3.2.5 | cflinuxfs4 |
  | ruby | 3.3.2 | cflinuxfs3 |
  | ruby | 3.3.2 | cflinuxfs4 |
  | ruby | 3.3.4 | cflinuxfs3 |
  | ruby | 3.3.4 | cflinuxfs4 |
  | rubygems | 3.5.21 | cflinuxfs3, cflinuxfs4 |
  | yarn | 1.22.22 | cflinuxfs3, cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | ruby | 3.2.x |
  * Uncached buildpack SHA256: 0412f24e611320324500371eafa96a25548c742d16e11087d7fe8431aa7a48b7
  * Uncached buildpack SHA256: cea78370e5511e313e0c7d6ff0c183f9b6abe34ca4eed11e16e8fd7903657fd1
          
web-servers-cnb-buildpack0.15.2
silk3.60.0 v3.60.0
  ##  3.60.0
  **Release Date**: December 09, 2024
  ## Changes
  - Dependency Bumps
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.59.0...v3.60.0
  ## Resources
  - [Download release 3.60.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.60.0).
          
v3.59.0
  ##  3.59.0
  **Release Date**: December 04, 2024
  ## Changes
  - Upgrade silk-healthchecker
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.58.0...v3.59.0
  ## Resources
  - [Download release 3.59.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.59.0).
          
v3.58.0
  ##  3.58.0
  **Release Date**: December 04, 2024
  ## Changes
  - Bump go to 1.23.4
  - Bump healthchecker
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.57.0...v3.58.0
  ## Resources
  - [Download release 3.58.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.58.0).
          
v3.57.0
  ##  3.57.0
  **Release Date**: December 02, 2024
  ## Changes
  - Dependency Bumps
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.56.0...v3.57.0
  ## Resources
  - [Download release 3.57.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.57.0).
          
v3.56.0
  ##  3.56.0
  **Release Date**: November 18, 2024
  ## Changes
  - [Upgrade silk-healthchecker](https://github.com/cloudfoundry/silk-release/commit/9a64b05ce674243a2b738d0253407661a03b1159)
  - Bump Go
  - Bump dependancies
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.55.0...v3.56.0
  ## Resources
  - [Download release 3.56.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.56.0).
          
v3.55.0
  ##  3.55.0
  **Release Date**: November 14, 2024
  ## Changes
  - Dependency bumps
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.54.0...v3.55.0
  ## Resources
  - [Download release 3.55.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.55.0).
          
v3.54.0
  ##  3.54.0
  **Release Date**: November 05, 2024
  ## Changes
  - [Address integer overflows when downcasting for G115](https://github.com/cloudfoundry/silk-release/commit/58a8d27d505cc0cc8f69ed91a35d9cbbc8cc9c46)
  - [Address integer overflows when downcasting for G115](https://github.com/cloudfoundry/silk-release/pull/145)
  - [add retry logic for LinkList and AddrList netlink calls in cni](https://github.com/cloudfoundry/silk-release/commit/2f280324816cef03771099b1a34552d35d4cb55e)
  - [Retry with backoff tests](https://github.com/cloudfoundry/silk-release/commit/f0ebfc864d0588f39765c9c38e30aacb1dce7588)
  - [Add retry logic for LinkList and AddrList netlink calls in cni #147](https://github.com/cloudfoundry/silk-release/pull/147)
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.53.0...v3.54.0
  ## Resources
  - [Download release 3.54.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.54.0).
          
v3.53.0
  ##  3.53.0
  **Release Date**: October 22, 2024
  ## Changes
  - Bump dependancies
  ## ✨  Built with go 1.23.2
  **Full Changelog**: https://github.com/cloudfoundry/silk-release/compare/v3.52.0...v3.53.0
  ## Resources
  - [Download release 3.53.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.53.0).
          
smb-volume3.13.0 v3.13.0
  ##  3.13.0
  **Release Date**: December 09, 2024
  ## Changes
  - Dependency Bumps
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/smb-volume-release/compare/v3.12.0...v3.13.0
  ## Resources
  - [Download release 3.13.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.13.0).
          
v3.12.0
  ##  3.12.0
  **Release Date**: December 04, 2024
  ## Changes
  - Bump go to 1.23.4
  ## ✨  Built with go 1.23.4
  **Full Changelog**: https://github.com/cloudfoundry/smb-volume-release/compare/v3.11.0...v3.12.0
  ## Resources
  - [Download release 3.12.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.12.0).
          
v3.11.0
  ##  3.11.0
  **Release Date**: December 02, 2024
  ## Changes
  - Dependency bumps
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/smb-volume-release/compare/v3.10.0...v3.11.0
  ## Resources
  - [Download release 3.11.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.11.0).
          
v3.10.0
  ##  3.10.0
  **Release Date**: November 27, 2024
  ## Changes
  - Minor dependency bumps
  ## ✨  Built with go 1.23.3
  **Full Changelog**: https://github.com/cloudfoundry/smb-volume-release/compare/v3.9.0...v3.10.0
  ## Resources
  - [Download release 3.10.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.10.0).
          
smoke-tests4.10.0
staticfile-offline-buildpack1.6.18 1.6.18
  * Add nginx 1.27.2, remove nginx 1.27.1
  for stack(s) cflinuxfs3, cflinuxfs4
  | name | version | cf_stacks |
  |-|-|-|
  | nginx | 1.26.2 | cflinuxfs3 |
  | nginx | 1.26.2 | cflinuxfs4 |
  | nginx | 1.27.2 | cflinuxfs3 |
  | nginx | 1.27.2 | cflinuxfs4 |
  Default binary versions:
  | name | version |
  |-|-|
  | nginx | 1.27.x |
  * Uncached buildpack SHA256: 8f6510b62424936a81ab5dc38dba67b0117f25d8d76ffc60e8afd0cc7475dc6c
  * Uncached buildpack SHA256: 8d23de078ea9d777b5ac75b1d83834d778557c79928fdb5a5ad2da81c52d719e
          
statsd-injector1.11.45 v1.11.45
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.22.10
  **Full Changelog**: https://github.com/cloudfoundry/statsd-injector-release/compare/v1.11.44...v1.11.45
          
v1.11.44
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.22.9
  **Full Changelog**: https://github.com/cloudfoundry/statsd-injector-release/compare/v1.11.43...v1.11.44
          
syslog12.3.5 v12.3.5
  ## What's Changed
  * Bump dependencies
  * bump packaged Golang to go1.22.9
  **Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.3.4...v12.3.5
          
v12.3.4
  ## What's Changed
  * Fix syslog_storer write permissions in Noble stemcells with new apparmor rules by @ramonskie in https://github.com/cloudfoundry/syslog-release/pull/188
  * Bump packaged Golang to go1.22.8
  * Bump blackbox dependencies
  ## New Contributors
  * @ramonskie made their first contribution in https://github.com/cloudfoundry/syslog-release/pull/188
  **Full Changelog**: https://github.com/cloudfoundry/syslog-release/compare/v12.3.3...v12.3.4
          
system-metrics-scraper4.0.13 v4.0.13
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.22.10
  **Full Changelog**: https://github.com/cloudfoundry/system-metrics-scraper-release/compare/v4.0.12...v4.0.13
          
v4.0.12
  ## What's Changed
  * Bump dependencies
  * Bump packaged Golang to go1.22.9
  **Full Changelog**: https://github.com/cloudfoundry/system-metrics-scraper-release/compare/v4.0.11...v4.0.12
          
uaa77.20.0 v77.20.0
  ## What's Changed
  ### New UAA
  * Bump to [UAA v77.20.0](https://github.com/cloudfoundry/uaa/releases/tag/v77.20.0)
  ### Dependency Bumps
  * Bump github.com/cloudfoundry/bosh-utils from 0.0.502 to 0.0.503 in /src/acceptance_tests by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/982
  * Bump minitest from 5.25.1 to 5.25.2 by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/983
  * Bump github.com/cloudfoundry/bosh-utils from 0.0.503 to 0.0.504 in /src/acceptance_tests by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/985
  * Bump github.com/onsi/gomega from 1.35.1 to 1.36.0 in /src/acceptance_tests by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/986
  **Full Changelog**: https://github.com/cloudfoundry/uaa-release/compare/v77.19.0...v77.20.0
          
v77.19.0
  ## What's Changed
  ### New UAA
  * Bump to [UAA v77.19.0](https://github.com/cloudfoundry/uaa/releases/tag/v77.19.0)
  ### Fixes
  * [CVE-2024-52318](https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.97) [Upgrade Tomcat to version 9.0.97](https://github.com/cloudfoundry/uaa-release/commit/89024263bef1cc3838cbb2b3e018832a3be35fc4)
  * [CVE-2024-38827](https://spring.io/security/cve-2024-38827) in [Spring Security](https://github.com/cloudfoundry/uaa/pull/3142)
  ### Dependency Bumps
  * Bump activesupport from 7.2.1.1 to 7.2.1.2 by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/972
  * Bump github.com/onsi/gomega from 1.34.2 to 1.35.0 in /src/acceptance_tests by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/973
  * Bump github.com/onsi/gomega from 1.35.0 to 1.35.1 in /src/acceptance_tests by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/975
  * Bump activesupport from 7.2.1.2 to 7.2.2 by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/974
  * Bump benchmark from 0.3.0 to 0.4.0 by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/976
  * Bump securerandom from 0.3.1 to 0.3.2 by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/978
  * Bump activesupport from 7.2.2 to 8.0.0 by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/977
  * Bump uri from 1.0.1 to 1.0.2 by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/979
  * Bump mini_portile2 from 2.8.7 to 2.8.8 by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/980
  * Bump github.com/cloudfoundry/bosh-utils from 0.0.500 to 0.0.502 in /src/acceptance_tests by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/981
  **Full Changelog**: https://github.com/cloudfoundry/uaa-release/compare/v77.18.0...v77.19.0
          
v77.18.0
  ## What's Changed
  ### New UAA
  * Bump to [UAA v77.18.0](https://github.com/cloudfoundry/uaa/releases/tag/v77.18.0)
  ### Fixes
  * [CVE-2024-38821](https://spring.io/security/cve-2024-38821)
  * [CVE-2024-21235](https://nvd.nist.gov/vuln/detail/CVE-2024-21235)
  ### Dependency Bumps
  * [Upgrade Bellsoft JDK to version 17.0.13+12](https://github.com/cloudfoundry/uaa-release/commit/364cad45653130db03a5f2a87bd697722bccce8c) -> [CVE-2024-21235](https://nvd.nist.gov/vuln/detail/CVE-2024-21235)
  * [Upgrade Tomcat to version 9.0.96](https://github.com/cloudfoundry/uaa-release/commit/1cd0037b07de2896008cfbddc4766815cb4eeee9)
  * Bump github.com/cloudfoundry/bosh-utils from 0.0.499 to 0.0.500 in /src/acceptance_tests by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/969
  * Bump activesupport from 7.2.1 to 7.2.1.1 by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/970
  * Bump rspec-core from 3.13.1 to 3.13.2 by @dependabot in https://github.com/cloudfoundry/uaa-release/pull/971
  **Full Changelog**: https://github.com/cloudfoundry/uaa-release/compare/v77.17.0...v77.18.0
          
tanzu-jammy-stack1.0.1

6.0.1 - 6.0.10

See TAS Patch Version v6.0.1-v6.0.10 Release Notes.

New features in VMware Tanzu Application Service for VMs v6.0

These are the new features for VMware Tanzu Application Service for VMs v6.0.

Updates to GenAI for Tanzu Application Service (beta)

  • Improved vSphere Support: Platform engineers can now deploy large language models on larger GPUs, such as the Nvidia A100, on VMware vSphere-backed deployments. This allows for larger models to be deployed and for improved inferencing times

  • Azure Support: GenAI for Tanzu Application Service, has been validated to work with Azure as a support IaaS destination in addition to AWS, GCP, and vSphere, providing customers with more choices across cloud providers

  • Multi-Model Support: GenAI for Tanzu Application Service now supports multiple worker models running simultaneously, which expands the types of applications that can use this service. This enables platform engineers to deploy multiple types of LLMs optimized for different use cases. For instance, a platform engineer can deploy a model optimized for chatbots and models optimized for code completion

  • Improved inferencing speeds with vLLM support: In addition to the fastchat deployment option, platform engineers can serve LLMs via vLLM, optimized for inference throughput. This improves overall model response times and preparation for running models in production

Improved Autoscaling based on Application CPU Usage

  • Managing CPU-based autoscaling rules for their apps with less tuning and fewer errors:App Autoscaler has been updated to use CPU entitlement metrics, which greatly improves the overall autoscaling of applications based on CPU usage. App Autoscaler provides a new rule that monitors an app’s average usage of its CPU entitlement and scales the app up or down accordingly.

    • Unlike with the previous CPU processor utilization rule, the scaling thresholds for this rule do not need to change when developers adjust the memory allocation for the app or when the platform engineers adjust the size of the underlying Diego cell container-host VMs. When configured through the improved autoscaling UI in Apps Manager, developers get sensible default values of 30% and 80% for the low and high scaling thresholds, which should be a good starting point for most apps. Developers should have an easier and more intuitive experience configuring this new autoscaling rule for their apps.

Improved Platform Footprint and Enhanced Operations

  • Small footprint now supports an in-place upgrade to a full Tanzu Application Service Installation: Small footprint for Tanzu Application Service now supports customers that want to upgrade to a “full” Tanzu Application Service installation. Small footprint Tanzu Application Service was generally considered to be used for proof of concept or sandbox environments, but this upgrade path will allow platform engineers to migrate to full installation without having to reinstall the platform. This should allow organizations to start with an overall smaller footprint (~4-6 virtual machines) at a lower cost and gives them the option to grow their platform footprint in their own time. The small footprint for Tanzu Application Service is also fully supported for production use and can be utilized in locations with limited infrastructure footprint, such as an edge location.

  • Availability Zone Aware routing for Gorouter: The Gorouter has a new, opt-in feature to prefer local routing within an Availability Zone. When this option is enabled, the Gorouters will attempt to route all application traffic to application instances running on Diego cells within their local availability zone. This will improve the overall network traffic path and reduce overall round-trip latency to improve application performance. Gorouters will prefer not to send traffic to traffic to application instances running on other Availability Zones, but will in the event that no application instances are running in their zone.

  • Scale your dopplers and traffic controllers all the way to 0: For Tanzu Application Service installations using aggregate syslog drains to send app logs and metrics via the syslog protocol, platform engineers can now completely turn off the doppler and traffic controller VMs at the core of the loggregator subsystem. This optimization represents another step forward in the transition towards the new, more efficient “shared-nothing” observability architecture that is incrementally replacing earlier generations of observability subsystems, and helps platform engineers further reduce their infrastructure costs. Note: To completely scale down to 0, platform engineers must stop the use of firehose nozzles and other tiles that utilize nozzles, such as Healthwatch and App Metrics.

  • Human-readable foundation names in the platform log stream: Platform engineers can configure a human-readable foundation tag in their outgoing platform log stream. This will improve the overall experience when sending multiple foundation log streams to a log aggregation platform, as platform engineers will be able to identify what foundation is sending logs, ultimately avoiding mistakes and eliminating the need to re-work.

  • Certificate Rotation Dashboard for internal certificate management: Tanzu Operations Manager has been updated to include a Certificate Rotation Dashboard to continuously improve the internal platform certification rotation and management process. The dashboard allows platform engineers to track certification rotation status to easily understand the next step for the certificate rotation process within their Tanzu Application Service environments.

  • Configurable App File descriptor limits: Tanzu Application Service allows platform engineers to change the default Linux file descriptor limits for applications running on the platform. This feature enables applications to move to the platform that requires larger than normal numbers of Unix file descriptors. This allows for more application types to be migrated onto the Tanzu Application Service platform.

Enhancements to Enable Improved Platform Security Postures

  • Early access to FIPS-compliant stemcells: Tanzu Application Service now supports the use of FIPS-compliant Jammy stemcells through early access to federal customers for their TAS foundations. Please reach out to the Tanzu team if interested in testing out this feature.

  • Manage local User Account and Authentication (UAA) Password policies when external identity providers are configured: Local UAA password policies can be set and maintained in conjunction with an external identity provider. This change enables better security posture for platform engineers who are managing local platform accounts.

Tanzu Application Service Ecosystem Optimizations

Enhancements to the AWS Cloud Service Broker
  • Support for the AWS Simple Queue Service (SQS): Platform engineers can now add production-ready plans for the AWS SQS service to their Tanzu Application Service marketplace offerings. Developers can easily deploy and use the AWS SQS service to expand upon their application use cases just like any other service supported by the Cloud Service Broker.

  • Support for AWS GovCloud Regions: The Cloud Service Broker for AWS is now supported for use in AWS GovCloud Regions. Customers who wish to use these regions can now begin to migrate off the legacy AWS service broker and take advantage of all the new features and functionality of the Cloud Service Broker, allowing them with more options across cloud providers.

Reduced logging and metric infrastructure requirements

If you do not use the legacy V1 and V2 Loggregator Firehoses, you now can scale Doppler and Traffic Controller VMs down to zero. This can significantly reduce costs or free up resources for running additional workloads on the platform. You might not be able to scale down to zero if you use integrations or other features that depend on the Firehose, such as log and metric nozzles or Metric Registrar.

Reintroduction of global log rate limit

TAS for VMs v3.0 introduced granular app log rate limits for fine-grained control over application log rates.

TAS for VMs v4.0 removed the older global log rate limit feature App log rate limit (deprecated) under App Containers. This was problematic for operators who were performing a jump upgrade to TAS for VMs v4.0 (skipping v3.0), as logs would not be rate limited until application-based log rate limits were applied.

TAS for VMs v6.0 restores the global log rate limit, so that operators can perform upgrades while retaining log rate limits. Operators must configure the same setting separately for both Isolation Segment and TAS for VMs [Windows].

If you had previously set a global log rate limit, this limit is re-applied following the upgrade to VMware Tanzu Application Service for VMs v6.0.

App Autoscaler supports scaling on CPU entitlement

VMware Tanzu Application Service for VMs v6.0 introduces support for autoscaling on CPU entitlement. This improves App Autoscaler support for scaling on CPU. Previously, App Autoscaler CPU rules could be brittle due to their dependency on the underlying Diego Cell configuration. With this feature, apps can autoscale on the CPU entitlement available, calculated appropriately based on the memory allocated.

Breaking Changes

For breaking changes when upgrading VMware Tanzu Application Service for VMs to v6.0, see Breaking Changes.

Known issues

Here are the known issues for VMware Tanzu Application Service for VMs v6.0.

Loggregator Agents in other products may log failure when Dopplers are scaled to zero

Service tile products can use Loggregator Agent to egress metrics for service instances. If the Doppler instance group is scaled to zero, then Loggregator Agent jobs deployed by these products may repeatedly log a failure to connect to Doppler:

failed to connect: unable to lookup a log consumer

UAA causes database overload (for VMware Tanzu Application Service for VMs 6.0.0 and 6.0.1)

The UAA can cause and experience slowness in its database when attempting to hit its /Users endpoint. The issue is especially noticeable when the UAA contains a large number of users; for example, in the millions. This only happens when using a MySQL database. VMware Tanzu Application Service for VMs 6.0.2 fixes the issue.