melange

v0.53.0 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 1mo Build & Package

✓ No known CVEs patched

✓ No known CVEs patched in this version

Summary

AI summary

Add QEMU_NET_CIDR env var to override the default SLIRP CIDR.

Type	Severity	Summary	CVE
Feature	Medium	Adds QEMU_NET_CIDR to override SLIRP internal network. Adds QEMU_NET_CIDR to override SLIRP internal network. Source: llm_adapter@2026-06-10 Confidence: high	—
Feature	Medium	Allows GitHub verified signatures for source input. Allows GitHub verified signatures for source input. Source: llm_adapter@2026-06-10 Confidence: high	—
Bugfix	Low	Fixes git-checkout bump regardless of tag when only one present. Fixes git-checkout bump regardless of tag when only one present. Source: llm_adapter@2026-06-10 Confidence: high	—
Bugfix	Low	Removes stale wolfi-presubmit package matrix entries from CI. Removes stale wolfi-presubmit package matrix entries from CI. Source: llm_adapter@2026-06-10 Confidence: high	—

Full changelog

fix(renovate): bump git-checkout regardless of tag if there is only one by @vishal-chdhry in https://github.com/chainguard-dev/melange/pull/2562
chore(source): allow GitHub verified signatures by @jmeridth in https://github.com/chainguard-dev/melange/pull/2565
ci: remove stale wolfi-presubmit package matrix entries by @jmeridth in https://github.com/chainguard-dev/melange/pull/2566
feat(qemu): add QEMU_NET_CIDR to override SLIRP internal network by @jmeridth in https://github.com/chainguard-dev/melange/pull/2564

@jmeridth made their first contribution in https://github.com/chainguard-dev/melange/pull/2565

Full Changelog: https://github.com/chainguard-dev/melange/compare/v0.52.1...v0.53.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track melange

Get notified when new releases ship.

About melange

build APKs from source code