This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryMinor fixes and improvements.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Dependency | Low |
Bump golang.org/x/crypto from 0.52.0 to 0.53.0 in the gomod group. Bump golang.org/x/crypto from 0.52.0 to 0.53.0 in the gomod group. Source: llm_adapter@2026-06-15 Confidence: high |
— |
| Dependency | Low |
Bump the gomod group across 1 directory with 12 updates. Bump the gomod group across 1 directory with 12 updates. Source: granite4.1:30b@2026-06-15-audit Confidence: low |
— |
Full changelog
What's Changed
- build(deps): bump the gomod group across 1 directory with 12 updates by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2567
- build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 in the gomod group by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2569
Full Changelog: https://github.com/chainguard-dev/melange/compare/v0.53.1...v0.53.2
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]