Release
v1.5.1
eyes upMerge-request titles now lead with the vulnerability, so security work gets a reviewer's attention at a glance.
Highlights
- 01
Vulnerability-led MR titles
Security merge requests now read "[Security] Fix CVE-2022-25857 in snakeyaml (1.33)" — leading with the CVE rather than the version bump — so they stand out as security work instead of routine maintenance. Aggregates read "[Security] Fix CVE-… +N more across N dependencies".
Read the guide →
Full notes
Changed
- Merge-request titles lead with the vulnerability:
[Security] Fix CVE-2022-25857 in snakeyaml (1.33)(aggregate:[Security] Fix CVE-… +N more across N dependencies), rather than theUpdate X to Yframing. A change with no advisory keeps a plainUpdate X to Ytitle. CVE-alias preference, the+N moresuffix, and the 255-character cap are unchanged. - Fixed a grammar slip in the aggregate MR lead sentence for the single-update case ("…update that fix…" → "…update that fixes…").
- Updated the GitLab CI/CD component and documentation examples to default to Argus
1.5.1.