v5.3.1

What's Changed

🔧 Internal

• Ci: add concurrency group to pr-review-trigger to prevent duplicate reviews by @derekmisler in #13890
• Fix grammar in Attestations field comment by @blackflytech in #13891
• Ci: remove unused desktop-edge-test workflow by @thaJeztah in #13897
• Ci: zizmor workflow by @crazy-max in #13901
• Ci: fix docs-upstream workflow by @crazy-max in #13912
• CODEOWNERS: add compose-reviewers by @thaJeztah in #13913
• Ci: harden GitHub Actions workflows by @glours in #13896
• GHA: dependabot: group docker/* actions updates by @thaJeztah in #13914

⚙️ Dependencies

• Build(deps): bump github.com/moby/buildkit from 0.31.0 to 0.31.1 by @dependabot[bot] in #13892
• Build(deps): bump github.com/moby/sys/user to v0.4.1 by @thaJeztah in #13893
• Build(deps): bump go.yaml.in/yaml/v4 from 4.0.0-rc.4 to 4.0.0-rc.6 by @dependabot[bot] in #13876
• Build(deps): bump github.com/docker/cli from 29.6.0+incompatible to 29.6.1+incompatible by @dependabot[bot] in #13895
• Build(deps): bump actions/stale from 10.2.0 to 10.3.0 by @dependabot[bot] in #13902
• Build(deps): bump the docker-actions group with 3 updates by @dependabot[bot] in #13916
• Build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #13908
• Build(deps): bump actions/setup-go from 6.3.0 to 6.5.0 by @dependabot[bot] in #13907
• Build(deps): bump test-summary/action from 2.4 to 2.6 by @dependabot[bot] in #13903
• Build(deps): bump mxschmitt/action-tmate from 3.23 to 3.24 by @dependabot[bot] in #13910
• Build(deps): bump codecov/codecov-action from 5.5.3 to 7.0.0 by @dependabot[bot] in #13904
• Build(deps): bump github/codeql-action/upload-sarif from 3.36.3 to 4.36.2 by @dependabot[bot] in #13917
• Build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by @dependabot[bot] in #13911

New Contributors

• @blackflytech made their first contribution in #13891

Full Changelog: v5.3.0...v5.3.1