melange

v0.52.1 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 1mo Build & Package

✓ No known CVEs patched

✓ No known CVEs patched in this version

Summary

AI summary

Minor fixes and improvements.

Type	Severity	Summary	CVE
Dependency	Low	Bump actions/checkout from 6.0.2 to 6.0.3. Bump actions/checkout from 6.0.2 to 6.0.3. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	Guard git-checkout against stale or diverged branch+commit checks. Guard git-checkout against stale or diverged branch+commit checks. Source: llm_adapter@2026-06-08 Confidence: high	—

Full changelog

git-checkout: guard branch+expected-commit against stale/diverged commits by @stevebeattie in https://github.com/chainguard-dev/melange/pull/2555
build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2554
chore(pipelines/xcover): add scope parameter by @maxgio92 in https://github.com/chainguard-dev/melange/pull/2558
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the actions group by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2560

Full Changelog: https://github.com/chainguard-dev/melange/compare/v0.52.0...v0.52.1

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track melange

Get notified when new releases ship.

About melange

build APKs from source code