Platform Release Notes: May 5, 2017

Curious what’s new that you might find helpful as a cloud.gov application developer? Here are highlights from our platform updates over the past five weeks.

Changed

• logs.fr.cloud.gov, where you can view and search your logs on the web, has been upgraded to a newer version of Kibana (the open source project that powers the log viewer). The new version includes bug fixes and provides a slightly different look. For help navigating the new interface, start with our logs documentation. The Kibana user guide provides more information about the most recent version.
• You can now migrate to the cloud.gov CDN broker with zero downtime. You can create a TXT record to be validated by Let’s Encrypt before you migrate, whereas before you needed to start by pointing your domain at the cloud.gov CDN to create a certificate.
• cloud.gov’s web-based dashboard now provides more useful information if you have an empty org or space. For example, if you’re the only user in your organization, the dashboard gives you more information about inviting new users.

Deprecated

Python 3.3 has been deprecated with an anticipated end-of-life (EOL) in October 2017. The latest Python buildpacks no longer include 3.3.

Removed

Ruby 2.1 is now at EOL. If your app relies on Ruby 2.1 it will stop working following your next push. You should upgrade as soon as possible.

Production releases

We upgraded the Cloud Foundry deployment to v257. This addresses several security vulnerabilities. You should restage your application to incorporate fixes in the base filesystem and ensure you’re running the most recent language version supported by your buildpack.

Additional upgrades

• PHP buildpack 4.3.30
• .NET Core buildpack 1.0.15
• NodeJS buildpack 1.5.32
• Go buildpack 1.8.0
• Python buildpack 1.5.17
• Staticfile buildpack 1.4.4
• Ruby buildpack 1.6.37
• Diego 1.14.1
• RootFS cflinuxfs2 1.115.0, which address vulnerabilities described in these security notices:
  • USN-3246-1: Eject vulnerability
  • USN-3259-1: Bind vulnerabilities
  • USN-3263-1: FreeType vulnerability
• Stemcell 3312.23, which address vulnerabilities described in these security notices:
  • USN-3249-2: Linux kernel (Xenial HWE) vulnerability
  • USN-3256-1: Linux kernel vulnerability

See also

If you’re interested in details about recent dashboard updates, you can also see the dashboard release notes.