Irwin Release notes

Irwin Platform Services

23 April 2026

  • 2 features
  • 4 fixes
  • 1 improvement
  • 2 other changes

Features

  • Add Postmark Inbound CreateContact command and tests
  • Add include_irm_address column to email_group_emails

Bug Fixes

  • Add global CSP's and set default headers per FDS security review
  • Temporarily disable recipient_lookup endpoint, return 503 Service Unavailable
  • [security-fix] tenant scoping in ItineraryItemsController
  • Bump rack 3.2.5 → 3.2.6 to fix CVE-2026-34829 (unbounded multipart upload)

Improvements

  • Improve exception handling in Postmark Server creation

General

  • Use the /kaniko/bundle_gem_fury_io path layed out in kaniko template to fix build time error
  • Consume the kaniko build time secret for gemfury to remove SAST violation