melange

v0.56.2 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 14d Build & Package

✓ No known CVEs patched

✓ No known CVEs patched in this version

Summary

AI summary

Minor fixes and improvements.

Type	Severity	Summary	CVE
Dependency
Dependency	Low	Bump docker/setup-docker-action from 5.2.0 to 5.3.0. Bump docker/setup-docker-action from 5.2.0 to 5.3.0. Source: llm_adapter@2026-07-13 Confidence: high	—
Dependency	Low	Bump step-security/harden-runner from 2.19.4 to 2.20.0. Bump step-security/harden-runner from 2.19.4 to 2.20.0. Source: llm_adapter@2026-07-13 Confidence: high	—
Dependency	Low	Bump chainguard.dev/apko from 1.2.22 to 1.2.23. Bump chainguard.dev/apko from 1.2.22 to 1.2.23. Source: llm_adapter@2026-07-13 Confidence: high	—
Bugfix	Medium	Fix/improve shell comparison syntax. Fix/improve shell comparison syntax. Source: llm_adapter@2026-07-13 Confidence: high	—

Full changelog

Fix/improve shell comparison syntax by @sergiodj in https://github.com/chainguard-dev/melange/pull/2588
build(deps): bump the gomod group across 1 directory with 4 updates by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2590
build(deps): bump docker/setup-docker-action from 5.2.0 to 5.3.0 in the actions group across 1 directory by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2587
build(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 in the actions group by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2591
build(deps): bump chainguard.dev/apko from 1.2.22 to 1.2.23 in the gomod group by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2593

Full Changelog: https://github.com/chainguard-dev/melange/compare/v0.56.1...v0.56.2

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track melange

Get notified when new releases ship.

About melange

build APKs from source code