This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+10 more
Summary
AI summaryUpdates 🔧 Chores, 🚀 New Features, and ⚙️ CI/CD across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds image.fips toggle for FIPS 140‑3 variant in Helm chart. Adds image.fips toggle for FIPS 140‑3 variant in Helm chart. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Dependency | Low |
Bumps go.mod to Go 1.26.4, updating the runtime version. Bumps go.mod to Go 1.26.4, updating the runtime version. Source: llm_adapter@2026-06-11 Confidence: high |
— |
| Bugfix | Medium |
Fixes GPG signature verification issue in codecov-action CI step. Fixes GPG signature verification issue in codecov-action CI step. Source: llm_adapter@2026-06-11 Confidence: high |
— |
Full changelog
1.54.1 (2026-06-11)
🚀 New Features
🔧 Chores
- Bump @babel/preset-env in /examples/openfeature_web/webapp (#5375) (fed916a)
- Bump @openfeature/go-feature-flag-provider (#5368) (d5b59ca)
- Bump @openfeature/go-feature-flag-provider (#5373) (ce2baed)
- Bump @typescript-eslint/eslint-plugin (#5376) (3c8f442)
- Bump @typescript-eslint/parser (#5378) (f0aa8fd)
- Bump actions/checkout from 6.0.2 to 6.0.3 (#5414) (316c946)
- Bump actions/setup-dotnet from 5.2.0 to 5.3.0 (#5391) (c3b066e)
- Bump astral-sh/setup-uv from 8.1.0 to 8.2.0 (#5415) (0497435)
- Bump github.com/aws/aws-sdk-go-v2/config from 1.32.18 to 1.32.19 (#5380) (3a756e2)
- Bump github.com/aws/aws-sdk-go-v2/config from 1.32.19 to 1.32.21 (#5404) (784fdfb)
- Bump github.com/aws/aws-sdk-go-v2/credentials (#5411) (f4128c5)
- Bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager (#5359) (bc751e4)
- Bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager (#5389) (284d2ea)
- Bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager (#5406) (4f2c25f)
- Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#5387) (5f131b3)
- Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#5405) (cf87093)
- Bump github.com/aws/aws-sdk-go-v2/service/kinesis (#5419) (28d7ec5)
- Bump github.com/aws/aws-sdk-go-v2/service/s3 (#5379) (2f53277)
- Bump github.com/aws/aws-sdk-go-v2/service/sqs (#5382) (9a85ebf)
- Bump github.com/aws/aws-sdk-go-v2/service/sqs (#5412) (fc224ba)
- Bump github.com/aws/smithy-go from 1.25.1 to 1.26.0 (#5364) (c539102)
- Bump github.com/aws/smithy-go from 1.26.0 to 1.27.0 (#5407) (df81d02)
- Bump github.com/IBM/sarama from 1.49.0 to 1.50.0 (#5365) (5b960ae)
- Bump github.com/IBM/sarama from 1.50.0 to 1.50.1 (#5371) (272770b)
- Bump github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0 (#5408) (f06b095)
- Bump github.com/knadh/koanf/v2 from 2.3.4 to 2.3.5 (#5398) (75801ce)
- Bump github.com/prometheus/common from 0.67.5 to 0.68.0 (#5386) (7bf6da7)
- Bump github.com/prometheus/common from 0.68.0 to 0.68.1 (#5418) (fca4d01)
- Bump github.com/redis/go-redis/v9 from 9.19.0 to 9.20.0 (#5385) (1c8632c)
- Bump github/codeql-action from 4.36.0 to 4.36.1 (#5413) (a5771bf)
- bump go.mod to go 1.26.4 (#5420) (ce837f6)
- Bump go.opentelemetry.io/contrib/exporters/autoexport (#5390) (c663d38)
- Bump go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho (#5381) (d69eb69)
- Bump go.opentelemetry.io/contrib/samplers/jaegerremote (#5383) (faea8f7)
- Bump go.opentelemetry.io/otel/sdk from 1.43.0 to 1.44.0 (#5361) (17a7dd0)
- Bump google.golang.org/api from 0.280.0 to 0.282.0 (#5362) (c1f8222)
- Bump google.golang.org/api from 0.282.0 to 0.283.0 (#5402) (27689d5)
- Bump Microsoft.NET.Test.Sdk from 18.5.1 to 18.6.0 (#5370) (5b3bb97)
- Bump NUnit.Analyzers from 4.13.0 to 4.14.0 (#5403) (c0bbbe9)
- Bump org.apache.maven.plugins:maven-surefire-plugin (#5369) (d25cca8)
- Bump pozil/auto-assign-issue from 3.0.0 to 4.0.0 (#5416) (18647a3)
- Bump webpack in /examples/openfeature_web/webapp (#5377) (d324378)
- Bump webpack-cli in /examples/openfeature_web/webapp (#5374) (ba5d944)
⚙️ CI/CD
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About GO Feature Flag
Simple, complete, and lightweight feature flag solution (alternative to LaunchDarkly).
Beta — feedback welcome: [email protected]