Skip to content

Docker Compose

v5.3.1 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

docker go orchestration

Summary

AI summary

Updates ⚙️ Dependencies, deps, and 🔧 Internal across a mixed release.

Full changelog

What's Changed

🔧 Internal

  • Ci: add concurrency group to pr-review-trigger to prevent duplicate reviews by @derekmisler in https://github.com/docker/compose/pull/13890
  • Fix grammar in Attestations field comment by @blackflytech in https://github.com/docker/compose/pull/13891
  • Ci: remove unused desktop-edge-test workflow by @thaJeztah in https://github.com/docker/compose/pull/13897
  • Ci: zizmor workflow by @crazy-max in https://github.com/docker/compose/pull/13901
  • Ci: fix docs-upstream workflow by @crazy-max in https://github.com/docker/compose/pull/13912
  • CODEOWNERS: add compose-reviewers by @thaJeztah in https://github.com/docker/compose/pull/13913
  • Ci: harden GitHub Actions workflows by @glours in https://github.com/docker/compose/pull/13896
  • GHA: dependabot: group docker/* actions updates by @thaJeztah in https://github.com/docker/compose/pull/13914

⚙️ Dependencies

  • Build(deps): bump github.com/moby/buildkit from 0.31.0 to 0.31.1 by @dependabot[bot] in https://github.com/docker/compose/pull/13892
  • Build(deps): bump github.com/moby/sys/user to v0.4.1 by @thaJeztah in https://github.com/docker/compose/pull/13893
  • Build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.4 to 4.0.0-rc.6 by @dependabot[bot] in https://github.com/docker/compose/pull/13876
  • Build(deps): bump github.com/docker/cli from 29.6.0+incompatible to 29.6.1+incompatible by @dependabot[bot] in https://github.com/docker/compose/pull/13895
  • Build(deps): bump actions/stale from 10.2.0 to 10.3.0 by @dependabot[bot] in https://github.com/docker/compose/pull/13902
  • Build(deps): bump the docker-actions group with 3 updates by @dependabot[bot] in https://github.com/docker/compose/pull/13916
  • Build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/docker/compose/pull/13908
  • Build(deps): bump actions/setup-go from 6.3.0 to 6.5.0 by @dependabot[bot] in https://github.com/docker/compose/pull/13907
  • Build(deps): bump test-summary/action from 2.4 to 2.6 by @dependabot[bot] in https://github.com/docker/compose/pull/13903
  • Build(deps): bump mxschmitt/action-tmate from 3.23 to 3.24 by @dependabot[bot] in https://github.com/docker/compose/pull/13910
  • Build(deps): bump codecov/codecov-action from 5.5.3 to 7.0.0 by @dependabot[bot] in https://github.com/docker/compose/pull/13904
  • Build(deps): bump github/codeql-action/upload-sarif from 3.36.3 to 4.36.2 by @dependabot[bot] in https://github.com/docker/compose/pull/13917
  • Build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by @dependabot[bot] in https://github.com/docker/compose/pull/13911

New Contributors

  • @blackflytech made their first contribution in https://github.com/docker/compose/pull/13891

Full Changelog: https://github.com/docker/compose/compare/v5.3.0...v5.3.1

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Docker Compose

Get notified when new releases ship.

Sign up free

About Docker Compose

Define and run multi-container applications with Docker

All releases →

Related context

Beta — feedback welcome: [email protected]