ReARM 26.05.108: Programmatic VEX Import, Memory Optimizations, and CE Compose Fixes

We're announcing a follow-up release of ReARM v26.05.108, building on the major 26.05.90 release. Detailed information is available on its release view on the ReARM Demo instance. ReARM Pro installations have already been upgraded; ReARM CE users are encouraged to upgrade to benefit from the fixes described below.

Programmatic VEX Import

The round-trip VEX workflow introduced in 26.05.90 now extends to the programmatic path. Inbound VEX documents in CycloneDX and OpenVEX 0.2.0 formats can be ingested via API, with the same staging-area semantics, severity routing, and CISA VEX compliance controls available in the UI. See the updated VEX import documentation for details.

Memory Optimizations

This release includes a number of backend performance improvements, reducing memory footprint. The result is reduced memory pressure on busy instances and more predictable behavior on large component portfolios.

ReARM CE Docker Compose Fixes

Several local docker-compose deployment issues specific to ReARM CE have been resolved, making first-time local installs and upgrades smoother.

Dependency Updates

This release contains a number of dependency updates, including those fixing underlying CVEs in dependencies. ReARM users are encouraged to upgrade to this release to benefit from these fixes.

Release Identification

We are continuing to publish TEIs for all ReARM releases. TEI for this release: urn:tei:purl:demo.rearmhq.com:pkg:github/relizaio/rearm@26.05.108.