8000 Update ocaml to 5.5.2 by gominimal-pkgmgr-mgr[bot] · Pull Request #1100 · gominimal/pkgs · GitHub
[go: up one dir, main page]

Skip to content

Update ocaml to 5.5.2 - #1100

Merged
bryan-minimal merged 1 commit into
mainfrom
update-ocaml-5.5.2
Oct 26, 2026
Merged

bryan-minimal merged 1 commit into
mainfrom
update-ocaml-5.5.2

Conversation

@gominimal-pkgmgr-mgr
Copy link
Copy Markdown
Contributor

Update ocaml 5.5.1 → 5.5.2

Source: github:ocaml/ocaml:release-asset
Release: https://github.com/ocaml/ocaml/releases/tag/5.5.2
Changelog: ocaml/ocaml@5.5.1...5.5.2
Released: 2 days ago (2026-10-23)

Pkgscan: clean — diff against the prior version surfaced no newly-introduced suspicious patterns.

Vulnerability impact

Partition analysis at 5.5.2 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

  • 6 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.

Vulnerabilities fixed (6)

This update clears 6 vulnerabilities affecting 5.5.1:

CVE / GHSA Severity Fixed in
OSEC-2026-24 HIGH 5.5.2, 70a3a75c0bfb23d67ad5fe3e9c1ba9800d61feae, 0bbf8e5af985feb03a11a5ffe57d068373d09fd0
OSEC-2026-21 MEDIUM 5.5.2, 090e61ca5ab5700b0fe3153534365191753aa5b6, feccd4744ebe25b90208e569d03efd514b964dce
OSEC-2026-22 MEDIUM 5.5.2, de57bb4f59c3302260aaeaaa4dfee12695597d25, ff978d2139ba638886c2565f2d86c0ee265840a5
OSEC-2026-23 MEDIUM 5.5.2, 7da997d28b1ac57dd3a7108a865b327493fd4239, 709b0ab93e53d54297b42d897d74dced1e9c75a5
OSEC-2026-25 MEDIUM 5.5.2, 2247294d06464df0273479f41b0418655918da27, 9dcf0c86201cf5e8ece56c6bb5f61fc4d92fb74a
OSEC-2026-26 MEDIUM 5.5.2, ac2fae847a9c2c35ae3bba90a19adbe5d0cc6f59, de10a6b03a471821cb0b868223e5331b919f48c0

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)
Component Old New
~ ocaml 5.5.1 5.5.2
~ ocaml-upstream 5.5.1 5.5.2

Changes

Old New
Version 5.5.1 5.5.2
SHA256 ae47728d0a876665... bb3ffef5e4fce4f0...
Size 5.0 MB 5.0 MB
Source gs://minimal-staging-archives/ocaml-5.5.1.tar.gz gs://minimal-staging-archives/ocaml-5.5.2.tar.gz
  • License: LGPL-2.1-only (source: tarball)

Upstream digest: ✓ the download matches the sha256 GitHub publishes for release asset ocaml-5.5.2.tar.gz.

🔒 TLS: github.com — Sectigo Public Server Authentication CA DV E36 → Sectigo Public Server Authentication Root E46 (root c90f26f0fb1b4018…) · TLSv1_3 · TLS13_AES_128_GCM_SHA256 · X25519 ⇒ release-assets.githubusercontent.com — YR1 → Root YR → ISRG Root X1 (root 96bcec06264976f3…) · TLSv1_3 · TLS13_AES_128_GCM_SHA256 · X25519


Created by pkgmgr

@gominimal-pkgmgr-mgr
gominimal-pkgmgr-mgr Bot requested a review from a team as a code owner October 26, 2026 05:46
@gominimal-pkgmgr-mgr gominimal-pkgmgr-mgr Bot added the auto-update Opened autonomously by pkgmgr auto-update label Oct 26, 2026
@coderabbitai
coderabbitai Bot commented Oct 26, 2026
Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@bryan-minimal
bryan-minimal added this pull request to the merge queue Oct 26, 2026
Merged via the queue into main with commit b75db76 Oct 26, 2026
12 checks passed
@bryan-minimal
bryan-minimal deleted the update-ocaml-5.5.2 branch October 26, 2026 16:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-update Opened autonomously by pkgmgr auto-update

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

0