This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+10 more
Affected surfaces
Summary
AI summaryUpdates π§ Chores, βοΈ CI/CD, and π New Features across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds FIPSβ―140β3 validated builds for relayproxy. Adds FIPSβ―140β3 validated builds for relayproxy. Source: llm_adapter@2026-06-03 Confidence: high |
β |
| Dependency | Low |
Bumps GO version toβ―1.26.3 in CI. Bumps GO version toβ―1.26.3 in CI. Source: llm_adapter@2026-06-03 Confidence: high |
β |
| Dependency | Low |
Disables Govulncheck in CI workflow. Disables Govulncheck in CI workflow. Source: llm_adapter@2026-06-03 Confidence: high |
β |
| Bugfix | Medium |
Fixes json retriever format hint issue. Fixes json retriever format hint issue. Source: llm_adapter@2026-06-03 Confidence: high |
β |
| Refactor | Low |
Removes lint command and associated build/release configurations. Removes lint command and associated build/release configurations. Source: llm_adapter@2026-06-03 Confidence: high |
β |
Full changelog
1.54.0 (2026-06-03)
π New Features
- fix json retriever format hint (#5322) (fe7ed77)
- relayproxy: add FIPS 140-3 validated builds (#5332) (ab218e3)
π§ Chores
- Bump @types/react in /examples/openfeature_react/react-app (#5340) (67e821f)
- Bump @typescript-eslint/eslint-plugin (#5316) (c2e8e92)
- Bump @typescript-eslint/eslint-plugin (#5343) (80eda2b)
- Bump @typescript-eslint/parser (#5313) (0b1c633)
- Bump @typescript-eslint/parser (#5341) (3d5c009)
- Bump @vitejs/plugin-react (#5314) (dc5f429)
- Bump actions/stale from 10.2.0 to 10.3.0 (#5350) (56a5123)
- Bump cloud.google.com/go/storage from 1.62.1 to 1.62.2 (#5326) (3e78ff9)
- Bump codecov/codecov-action from 6.0.0 to 6.0.1 (#5346) (2e1122b)
- Bump coverlet.collector from 10.0.0 to 10.0.1 (#5327) (6a553d7)
- Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (#5347) (3b9068a)
- Bump eslint in /examples/openfeature_react/react-app (#5344) (8b1ce7c)
- Bump eslint in /examples/openfeature_web/webapp (#5338) (ddbccfd)
- Bump FluentAssertions from 8.9.0 to 8.10.0 (#5303) (d80816b)
- Bump github.com/aws/aws-sdk-go-v2/config from 1.32.17 to 1.32.18 (#5352) (9ade240)
- Bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager (#5353) (adc78cb)
- Bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob (#5310) (2f5105f)
- Bump github.com/IBM/sarama from 1.48.0 to 1.48.1 (#5295) (a2ce2d7)
- Bump github.com/IBM/sarama from 1.48.1 to 1.48.2 (#5309) (e54c788)
- Bump github.com/IBM/sarama from 1.48.2 to 1.49.0 (#5325) (b6b25e3)
- Bump github.com/open-feature/go-sdk-contrib/providers/go-feature-flag (#5302) (dce1533)
- Bump github/codeql-action from 4.35.4 to 4.35.5 (#5319) (5743ffd)
- Bump github/codeql-action from 4.35.5 to 4.36.0 (#5351) (d5a5c4d)
- Bump golang.org/x/net from 0.54.0 to 0.55.0 (#5354) (aa3d3db)
- Bump google.golang.org/api from 0.278.0 to 0.279.0 (#5304) (0f71a2f)
- Bump google.golang.org/api from 0.279.0 to 0.280.0 (#5329) (8205582)
- Bump google.golang.org/grpc from 1.81.0 to 1.81.1 (#5307) (0830417)
- Bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 (#5348) (88d7c53)
- Bump gradle-wrapper (#5312) (79c4b62)
- Bump htmlnano in /examples/openfeature_web/webapp (#5339) (b28d1a2)
- Bump jest in /openfeature/provider_tests/js-integration-tests (#5300) (971f6cb)
- Bump k8s.io/api from 0.36.0 to 0.36.1 (#5305) (4192460)
- Bump k8s.io/apimachinery from 0.35.4 to 0.36.0 (#5203) (556a65b)
- Bump k8s.io/client-go from 0.35.4 to 0.36.0 (#5201) (b37908e)
- Bump k8s.io/client-go from 0.36.0 to 0.36.1 (#5308) (64d2791)
- Bump NUnit from 4.6.0 to 4.6.1 (#5331) (c1211dc)
- Bump org.junit.jupiter:junit-jupiter-engine (#5330) (ce9c217)
- Bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 (#5318) (d8b46f6)
- Bump sass in /examples/openfeature_web/webapp (#5335) (f1464d3)
- Bump stylelint in /examples/openfeature_web/webapp (#5311) (ee69b18)
- Bump stylelint in /examples/openfeature_web/webapp (#5337) (7dcc706)
- Bump tailwindcss in /examples/openfeature_react/react-app (#5317) (33829f4)
- Bump vite in /examples/openfeature_react/react-app (#5315) (dabaf18)
- Bump vite in /examples/openfeature_react/react-app (#5342) (a58bb5e)
- Bump webpack in /examples/openfeature_web/webapp (#5336) (bc7750c)
- Bump zizmorcore/zizmor-action from 0.5.3 to 0.5.5 (#5320) (b533065)
- Bump zizmorcore/zizmor-action from 0.5.5 to 0.5.6 (#5349) (6adbcfd)
- remove lint command and associated build/release configurations (#4478) (a9b994f)
βοΈ CI/CD
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About GO Feature Flag
Simple, complete, and lightweight feature flag solution (alternative to LaunchDarkly).
Related context
Related tools
Beta — feedback welcome: [email protected]