v1.4.445

danielmiessler/Fabricv1.4.445Apr 13, 2026by github-actions[bot]

AI Summary

This release focuses on enhancing Docker container security and build reproducibility by pinning specific versions and fixing critical vulnerabilities.

Key Highlights

Pins Alpine 3.21 and Go 1.25.9 for reproducible, auditable builds.
Remediates critical vulnerability CVE-2025-47273 by upgrading setuptools.
Configures the final image to run as a non-root user to reduce attack surface.

Full Release Notes

## Changes

### PR [#2091](https://github.com/danielmiessler/Fabric/pull/2091) by [jimscard](https://github.com/jimscard) and [ksylvan](https://github.com/ksylvan): Update Dockerfile for best practices and critical CVE fixes

- Pins Alpine 3.21 and Go 1.25.9 explicitly for reproducible, auditable builds.
- Installs the Go toolchain directly in the builder stage, removing the dependency on an unavailable upstream `golang` tag.
- Upgrades `setuptools` to remediate the critical vulnerability CVE-2025-47273.
- Refreshes the `yt-dlp` installation path to align with current packaging conventions.
- Configures the final image to run as a non-root user, reducing the container's attack surface.