Release ledger

Release

v1.5.1

eyes up

Merge-request titles now lead with the vulnerability, so security work gets a reviewer's attention at a glance.

Highlights

  • 01

    Vulnerability-led MR titles

    Security merge requests now read "[Security] Fix CVE-2022-25857 in snakeyaml (1.33)" — leading with the CVE rather than the version bump — so they stand out as security work instead of routine maintenance. Aggregates read "[Security] Fix CVE-… +N more across N dependencies".

    Read the guide →

Full notes

Changed

  • Merge-request titles lead with the vulnerability: [Security] Fix CVE-2022-25857 in snakeyaml (1.33) (aggregate: [Security] Fix CVE-… +N more across N dependencies), rather than the Update X to Y framing. A change with no advisory keeps a plain Update X to Y title. CVE-alias preference, the +N more suffix, and the 255-character cap are unchanged.
  • Fixed a grammar slip in the aggregate MR lead sentence for the single-update case ("…update that fix…" → "…update that fixes…").
  • Updated the GitLab CI/CD component and documentation examples to default to Argus 1.5.1.