This release keeps dependencies and maintenance posture current for teams operating this tool.
Published 3d
Build & Package
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
containers
docker
Affected surfaces
deps
Summary
AI summaryMinor fixes and improvements.
Full changelog
Changelog
- 461d02cacfce07a4feceb57d10eedda8f7261038 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#2341)
- 1a98f08fb07cd849bfa20edb0a312971b1064ed9 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#2335)
- 8922bbd145e70e4d7572852bccd1b1f467f7e9c7 build(deps): bump chainguard-dev/actions/setup-registry from 1.6.27 to 1.6.28 (#2343)
- 8cf5556b2bb129740c0b605fd077603123470474 build(deps): bump chainguard.dev/sdk from 0.1.127 to 0.1.138 (#2340)
- bee9883f6227bf6ac12798e04361f857b4ba5298 build(deps): bump chainguard.dev/sdk from 0.1.138 to 0.1.140 (#2344)
- bed83b762204bea3f247ada4a67318a7de18014a build(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (#2345)
- 906c1577c077536c8b474a6756f39c2fefbd3c74 build(deps): bump github/codeql-action/analyze from 4.37.0 to 4.37.1 (#2339)
- 31842dfcb0554df6e9d6b0f5950d80304f6c0c36 build(deps): bump github/codeql-action/init from 4.37.0 to 4.37.1 (#2338)
- 534ebdcdf20ee5db82308930434856b8da9c0440 build(deps): bump go.step.sm/crypto from 0.84.1 to 0.85.0 (#2334)
- bb243a92114b948a98dfce0708353cedc7be28e2 build(deps): bump google.golang.org/api from 0.288.0 to 0.289.0 (#2337)
- 9345f17813b3f4ca06282688abdc87352cac767a build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 in the go_modules group across 1 directory (#2342)
- 2200a73fefc60bb8c88ab397cf2b601c64c953e7 build(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 (#2333)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]