Skip to content

Template docs: vulnerability fixes (keycloak, minio, pgvector CVE in 17 templates, image updates) - #374

Merged
enk21 merged 9 commits into
mainfrom
docs/5376-vulnerability-fixes
Oct 29, 2026
Merged

enk21 merged 9 commits into
mainfrom
docs/5376-vulnerability-fixes

Conversation

@jacobecox

Copy link
Copy Markdown
Contributor

Docs for templates PR controlplane-com/templates#685 (merged): the 10-22 vulnerability scan fixes. Minimal updates only: each page changes just what the new template version changed. There are no rewrites, and no page changes structure.

Per page

  • keycloak 1.5.1: Keycloak 26.8.1 (CVE-2026-18963, Critical). Image tags below 26.7.2 are refused. The HA database moves to patroni-postgres:0.8. New "Upgrading From 1.5.0".
  • minio 1.4.0: now runs Silo (pgsty/silo). The replica quota prerequisite applies only above 6 replicas (replicaDirect quota). New "Upgrading From 1.3.x" with the maintenance window. External links point to Silo.
  • pgvector 1.0.1: pgvector 0.8.7 (CVE-2026-103484). Image guard. ALTER EXTENSION vector UPDATE;. The comparison table is updated.
  • nginx 1.1.3: nginx 1.31.7. capacityAI removed. Custom nginxConf subsection. Routing changes roll the proxy by themselves.
  • open-webui 1.4.0, ollama 1.2.0: Open WebUI v0.12.4, with an upgrade note covering the snapshot, no rollback, Python 3.12 tools and Direct Integrations. ollama's UI memory rises to 2Gi, and users are signed out once.
  • uptime-kuma 1.3.0: 2.5.8, upgrade note, and a TCP Port monitor caveat.
  • n8n 1.5.0, umami 1.5.0: image updates and guards. umami's optional app.twoFactorKeySecretName. The HA database moves to 0.8 with upgrade notes. n8n's env var name is corrected to N8N_WEBHOOK_URL.
  • langfuse 2.0.0: Langfuse 4 and ClickHouse 26.8. New langfuse.migration.writeMode and historicBackfill. A full "Upgrading from 1.3.0" section with the SDK support matrix from the upstream guide.
  • postgres-highly-available 2.8.1, postgres-multi-location 2.0.1, timescaledb-highly-available 1.2.1: fixed images, image guards, upgrade notes. postgres-multi-location: stop writes during an upgrade. timescaledb-highly-available: ALTER EXTENSION timescaledb UPDATE.
  • timescaledb: pgvector exposure note (no fixed upstream image yet).
  • chatwoot, glitchtip, grafana, metabase, listmonk, nocodb, polaris, twenty, unleash, temporal, cdc-pipeline: the bundled HA database moves to patroni-postgres:0.8 (new postgresHA.image; cdc-pipeline: postgres-highly-available.image). Tags 0.1–0.7 and an empty image are refused. Each page gets an "Upgrading from …" note.
  • Frontmatter fixes (chatwoot, gitea, n8n, polaris): quoted descriptions that contained an unquoted colon. On main these stopped mintlify dev from starting.

Checks

  • audit_cli, audit_semantic (against templates main b0ab6fea) and audit_skeleton exit 0 on all changed pages.
  • --urls is clean on the pages with new links, and the render check is clean.
  • Reviewer findings fixed in 5f96d8c.

Follow-ups (not in this PR)

  • postgres-highly-available.mdx still lacks the 2.8.0 content (walLevel, logical replication, clearing the install-time password).

🤖 Generated with Claude Code

https://claude.ai/code/session_01WZ5WWhTn9mEkPY7cLt1cr4

jacobecox and others added 9 commits October 29, 2026 14:27
….8.7), upgrade notes

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WZ5WWhTn9mEkPY7cLt1cr4
…pgvector 1.0.1, nginx 1.1.3, open-webui 1.4.0, ollama 1.2.0, uptime-kuma 1.3.0

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WZ5WWhTn9mEkPY7cLt1cr4
…es-ha 2.8.1, postgres-multi-location 2.0.1, timescaledb-ha 1.2.1, timescaledb pgvector note; fix n8n frontmatter

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WZ5WWhTn9mEkPY7cLt1cr4
…on broke mintlify)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WZ5WWhTn9mEkPY7cLt1cr4
…ing wording for uptime-kuma and postgres-multi-location notes, n8n outage wording, grafana heading case

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WZ5WWhTn9mEkPY7cLt1cr4
@mintlify

mintlify Bot commented Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated
controlplanecorporation 🟢 Ready View Preview Oct 29, 2026, 8:43 PM

💡 Tip: Enable Automations to automatically generate PRs for you.

@github-actions

Copy link
Copy Markdown

No description provided.

@github-actions

Copy link
Copy Markdown

No description provided.

@enk21
enk21 merged commit 770394d into main Oct 29, 2026
7 checks passed
@enk21
enk21 deleted the docs/5376-vulnerability-fixes branch October 29, 2026 21:02
@github-actions

Copy link
Copy Markdown

No description provided.

This branch was successfully deployed

1 active deployment
staging — 5f96d8ce Deployed Oct 29, 2026 by mintlify[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants