This release keeps dependencies and maintenance posture current for teams operating this tool.
Published 9h
Build & Package
✓ No known CVEs patched
✓ No known CVEs patched in this version
Affected surfaces
deps
Summary
AI summaryMinor fixes and improvements.
Full changelog
What's Changed
- build(deps): bump the actions group with 2 updates by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2598
- build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2599
- build(deps): bump the gomod group with 2 updates by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2597
- build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2600
- build(deps): bump the gomod group with 2 updates by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2601
- build(deps): bump github.com/ulikunitz/xz from 0.5.15 to 0.5.16 in the gomod group by @dependabot[bot] in https://github.com/chainguard-dev/melange/pull/2602
Full Changelog: https://github.com/chainguard-dev/melange/compare/v0.56.3...v0.56.4
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]