Securitysshole: password bypass in Alpine’s OpenSSH

Upgrade verdicts

Should you install this update? One verdict per release — install, wait, skip, review or avoid — from advisories, malware reports, hotfixes, issue spikes and release notes, confirmed by developers who upgraded.

  • @angular/core@22.2.6Published 6 h ago; most regressions surface within 72 h.2026-11-12
  • astro@7.4.11Published 13 h ago; most regressions surface within 72 h.2026-11-11
  • prettier@3.10.0Published 17 h ago; most regressions surface within 72 h.2026-11-11
  • vite@8.3.8Published 28 h ago; most regressions surface within 72 h.2026-11-11
  • astro@7.4.10Followed by 7.4.11 within 21 h, faster than this project's usual cadence — likely a hotfix.2026-11-10
  • cypress@16.3.0Published 35 h ago; most regressions surface within 72 h.2026-11-10
  • astro@7.4.9Followed by 7.4.10 within 2 h, faster than this project's usual cadence — likely a hotfix.2026-11-10
  • @anthropic-ai/sdk@1.8.0Published 37 h ago; most regressions surface within 72 h.2026-11-10
  • @sentry/node@11.12.0Published 38 h ago; most regressions surface within 72 h.2026-11-10
  • storybook@10.6.7Published 42 h ago; most regressions surface within 72 h.2026-11-10
  • openai@7.55.0Published 47 h ago; most regressions surface within 72 h.2026-11-10
  • next@16.4.6Published 57 h ago; most regressions surface within 72 h.2026-11-09
  • @anthropic-ai/sdk@1.7.0Published 59 h ago; most regressions surface within 72 h.2026-11-09
  • openai@7.54.0Published 62 h ago; most regressions surface within 72 h.2026-11-09
  • astro@7.4.8Published 64 h ago; most regressions surface within 72 h.2026-11-09
  • @nestjs/core@12.4.2Published 66 h ago; most regressions surface within 72 h.2026-11-09
  • vite@6.4.6Published 67 h ago; most regressions surface within 72 h.2026-11-09
  • vite@8.1.7Published 67 h ago; most regressions surface within 72 h.2026-11-09
  • vite@7.3.8Published 67 h ago; most regressions surface within 72 h.2026-11-09
  • vite@8.2.6Published 68 h ago; most regressions surface within 72 h.2026-11-09
  • vite@8.3.7Published 68 h ago; most regressions surface within 72 h.2026-11-09
  • @nestjs/core@12.4.1Followed by 12.4.2 within 4 h, faster than this project's usual cadence — likely a hotfix.2026-11-09
  • @nestjs/core@11.2.9Published 70 h ago; most regressions surface within 72 h.2026-11-09
  • @angular/core@22.2.5Release notes list 1 breaking change: The img/video src attribute is removed when its value is …2026-11-06
  • tailwindcss@4.3.5Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-11-06
  • @nestjs/core@12.4.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-11-06
  • openai@7.53.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-11-06
  • astro@7.4.7Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-11-05
  • @anthropic-ai/sdk@1.6.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-11-05
  • @playwright/test@1.65.0Release notes list 8 breaking changes: Locator actions now wait for elements to be non‑inert an…2026-11-05
  • openai@7.52.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-11-05
  • storybook@10.6.6Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-11-05
  • astro@7.4.6Followed by 7.4.7 within 4 h, faster than this project's usual cadence — likely a hotfix.2026-11-05
  • @sentry/node@11.11.0Release notes list 1 breaking change: The default for `dataCollection.userInfo` is now true, ca…2026-11-05
  • vue@3.5.4515 issues mention 3.5.45 within 14 days of release (usual for this project: 3.5).2026-11-05
  • vite@8.3.6Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-11-05
  • openai@7.51.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-11-05
  • @anthropic-ai/sdk@1.5.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-11-04
  • @supabase/supabase-js@2.119.05 issues mention 2.119.0 within 14 days of release (usual for this project: 1).2026-11-04
  • @nestjs/core@12.3.3Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-11-04

How verdicts work · Tracked packages are refreshed every 30 minutes.

Get verdicts in your pull requests

Every Dependabot or Renovate PR gets one comment: the verdict for each changed npm package, what the upgrade fixes, and one-click “worked / broke something” votes. No checkout of PR code, no secrets.

on:
  pull_request:
    paths: ["package-lock.json"]
permissions:
  contents: read
  pull-requests: write
jobs:
  verdicts:
    runs-on: ubuntu-latest
    steps:
      - uses: ChangesWatch/upgrade-verdict@v1

Changelogs for your stack, once a week

Pick the tools you use and get one email with what changed — release notes, deprecations and the verdicts above.