Android - Security Edge Release

Ecosystem CircleCI Images
1

Hey Everyone!

An updated edge image is being released for the Android machine executor.

This release is available under the :edge tag and also as a dated tag if you wish to pin:

  • android:2026.10.1

Note: Edge-only dated tags will automatically redirect to the current published image once the new images are rolled out.

What’s New

This is part of a security update, we’re releasing a new android machine with the latest patched security updates. See CircleCI response to the eMudhra certificate authority compromise (CVE-2026-111943)

Security Updates

This image includes the latest Ubuntu 24.04 security patches. The toolchain updates below also bring in upstream security fixes, notably in Docker, containerd, Node.js, Python, and Ruby. See CircleCI response to the eMudhra certificate authority compromise (CVE-2026-111943)

Standard Update

A refresh of toolchains: Docker, containerd, Docker Compose, Node.js, Python, pyenv, Ruby, Maven, and Fastlane have all been updated.

Changes worth calling out:

  • Ruby moved across a major version from 3.4.9 to 4.0.7. Gems with native extensions or pinned to Ruby 3.x may need updating.

  • Python moved from 3.14.4 to 3.15.1 (pyenv 2.6.31 → 2.8.11).

  • Maven moved from 3.9.16 to 3.10.0.

  • Node.js LTS updated from 24.15.0 to 24.22.1, and Node.js Current from 26.1.0 to 26.12.1.

  • Docker moved from 29.4.2 to 29.9.2, containerd from 2.2.3 to 2.4.2, and Docker Compose from 5.1.3 to 5.6.1.

Removed

  • The global grunt npm package is no longer preinstalled, because it conflicts with grunt-cli under newer npm. grunt-cli is still installed, so if your project depends on grunt, add it to your project’s devDependencies (which is the setup Grunt recommends).

Example

version: 2.1
workflows:
  main:
    jobs:
     - build
jobs:
  build:
    machine:
      image: android:edge
    resource_class: medium
    steps:
      - checkout
      - run: echo "Do some things"

Software Versions

Notes:

  • The “Old version” column reflects the previous image (2026.05.1).
  • The “New version” column reflects the new edge image (2026.10.1).

Android (Ubuntu 24.04 base)

Software Old version (2026.05.1) New version (2026.10.2)
Google Cloud SDK 562.0.0 562.0.0
Git LFS 3.1.4 3.1.4
Gradle 9.5.1 9.5.1
Fastlane 2.234.0 2.241.1
OpenJDK 21 21 21
Apache Maven 3.9.16 3.10.0
Node.js LTS 24.15.0 24.22.1
Node.js Current 26.1.0 26.12.1
Python 3 3.14.4 3.15.1
pyenv 2.6.31 2.8.11
Ruby 3.4.9 4.0.7
Docker 29.4.2 29.9.2
containerd 2.2.3 2.4.2
Docker Compose 5.6.1 5.6.1