Evidence-linked product lifecycle intelligenceSUPPORT · SECURITY · RETIREMENT
← Lifecycle catalogue
RELEASE NOTESDOCKERVERIFIED

PUBLISHER UPDATE · DOCKER-COMPOSE-5.3.1

DOCKER-COMPOSE-5.3.1 release notes and known issues

v5.3.1

Scope: Docker Compose. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.

Summary

What's Changed 🔧 Internal Ci: add concurrency group to pr-review-trigger to prevent duplicate reviews by @derekmisler in #13890 Fix grammar in Attestations field comment by @blackflytech in #13891 Ci: remove unused desktop-edge-test workflow by @thaJeztah in #13897 Ci: zizmor workflow by @crazy-max in #13901 Ci: fix docs-upstream workflow by @crazy-max in #13912 CODEOWNERS: add compose-reviewers by @thaJeztah in #13913 Ci: harden GitHub Actions workflows by @glours in #13896 GHA: dependabot: group docker/* actions updates by @thaJeztah in #13914 ⚙️ Dependencies Build(deps): bump github.com/moby/buildkit from 0.31.0 to 0.31.1 by @dependabot [bot] in #13892 Build(deps): bump github.com/moby/sys/user to v0.4.1 by @thaJeztah in #13893 Build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.4 to 4.0.0-rc.6 by @dependabot [bot] in #13876 Build(deps): bump github.com/docker/cli from 29.6.0+incompatible to 29.6.1+incompatible by @dependabot [bot] in #13895 Build(deps): bump actions/stale from 10.2.0 to 10.3.0 by @dependabot [bot] in #13902 Build(deps): bump the docker-actions group with 3 updates by @dependabot [bot] in #13916 Build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot [bot] in #13908 Build(deps): bump actions/setup-go from 6.3.0 to 6.5.0 by @dependabot [bot] in #13907 Build(deps): bump test-summary/action from 2.4 to 2.6 by @dependabot [bot] in #13903 Build(deps): bump mxschmitt/action-tmate from 3.23 to 3.24 by @dependabot [bot] in #13910 Build(deps): bump codecov/codecov-action from 5.5.3 to 7.0.0 by @dependabot [bot] in #13904 Build(deps): bump github/codeql-action/upload-sarif from 3.36.3 to 4.36.2 by @dependabot [bot] in #13917 Build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by @dependabot [bot] in #13911 New Contributors @blackflytech made their first contribution in #13891 Full Changelog : v5.3.0...v5.3.1

Improvements and security content

  • What's Changed 🔧 Internal Ci: add concurrency group to pr-review-trigger to prevent duplicate reviews by @derekmisler in #13890 Fix grammar in Attestations field comment by @blackflytech in #13891 Ci: remove unused desktop-edge-test workflow by @thaJeztah in #13897 Ci: zizmor workflow by @crazy-max in #13901 Ci: fix docs-upstream workflow by @crazy-max in #13912 CODEOWNERS: add compose-reviewers by @thaJeztah in #13913 Ci: harden GitHub Actions workflows by @glours in #13896 GHA: dependabot: group docker/* actions updates by @thaJeztah in #13914 ⚙️ Dependencies Build(deps): bump github.com/moby/buildkit from 0.31.0 to 0.31.1 by @dependabot [bot] in #13892 Build(deps): bump github.com/moby/sys/user to v0.4.1 by @thaJeztah in #13893 Build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.4 to 4.0.0-rc.6 by @dependabot [bot] in #13876 Build(deps): bump github.com/docker/cli from 29.6.0+incompatible to 29.6.1+incompatible by @dependabot [bot] in #13895 Build(deps): bump actions/stale from 10.2.0 to 10.3.0 by @dependabot [bot] in #13902 Build(deps): bump the docker-actions group with 3 updates by @dependabot [bot] in #13916 Build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot [bot] in #13908 Build(deps): bump actions/setup-go from 6.3.0 to 6.5.0 by @dependabot [bot] in #13907 Build(deps): bump test-summary/action from 2.4 to 2.6 by @dependabot [bot] in #13903 Build(deps): bump mxschmitt/action-tmate from 3.23 to 3.24 by @dependabot [bot] in #13910 Build(deps): bump codecov/codecov-action from 5.5.3 to 7.0.0 by @dependabot [bot] in #13904 Build(deps): bump github/codeql-action/upload-sarif from 3.36.3 to 4.36.2 by @dependabot [bot] in #13917 Build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by @dependabot [bot] in #13911 New Contributors @blackflytech made their first contribution in #13891 Full Changelog : v5.3.0...v5.3.1

Known issues

Publisher statement

Not stated. The verified publisher record does not contain a known-issues statement.

Affected products and versions

Products

  • Docker Compose

Affected versions

  • 5.3.1
  • 0.31.0
  • 0.31.1
  • 0.4.1
  • 4.0.0-rc.4
  • 4.0.0-rc.6
  • 29.6.0+incompatible
  • 29.6.1+incompatible
  • 10.2.0
  • 10.3.0
  • 7.0.0
  • 7.0.1
  • 6.3.0
  • 6.5.0
  • 2.4
  • 2.6
  • 3.23
  • 3.24
  • 5.5.3
  • 3.36.3
  • 4.36.2
  • 6.0.2
  • 5.3.0

Fixed versions or updates

  • No fixed version is stated in this record.

Recommended action

Review the official publisher document before deployment.

Official publisher evidence