From 53de05d596d6e76ebdd7ec20d584a6690d58d13e Mon Sep 17 00:00:00 2001
From: Kate <kit-ty-kate@exn.st>
Date: Thu, 9 Jul 2026 17:13:29 +0100
Subject: [PATCH] Add the announce for opam 2.5.2

---
 .../opam/2026-07-09-opam-2-5-2.md             | 61 +++++++++++++++++++
 1 file changed, 61 insertions(+)
 create mode 100644 data/platform_releases/opam/2026-07-09-opam-2-5-2.md

diff --git a/data/platform_releases/opam/2026-07-09-opam-2-5-2.md b/data/platform_releases/opam/2026-07-09-opam-2-5-2.md
new file mode 100644
index 0000000000..e0145d7b67
--- /dev/null
+++ b/data/platform_releases/opam/2026-07-09-opam-2-5-2.md
@@ -0,0 +1,61 @@
+---
+title: "opam 2.5.2"
+authors: [
+  "Raja Boujbel",
+  "Kate Deplaix",
+  "Nathan Rebours",
+  "David Allsopp",
+]
+versions: ["2.5.2"]
+tags: [opam, platform]
+github_release_tags: [2.5.2]
+---
+
+_Feedback on this post is welcomed on [Discuss](https://discuss.ocaml.org/t/ann-opam-2-5-2/18338)!_
+
+We are pleased to announce the release of opam 2.5.2 fixing a security issue ([OSEC-2026-10](https://github.com/ocaml/security-advisories/blob/main/advisories/2026/OSEC-2026-10.md)) and other minor things.
+
+We advise everyone to upgrade. Please read on for installation and upgrade instructions.
+
+
+## Security fix
+
+
+* [OSEC-2026-10](https://osv.dev/vulnerability/OSEC-2026-10) / CVE-2026-57825: Fix a bug that allowed a package to install files anywhere on the system using a symlink to an external directory without warning the user and asking for their permission ([#7005](https://github.com/ocaml/opam/pull/7005))
+
+Distributions maintainers that have not already done so, are invited to either upgrade their opam package to 2.5.2 or backport the fix. For any questions please send an email to the authors of this here blog post as listed above.
+
+
+## Other changes
+
+* Re-allow `..` in `.install` files, partially reverting 2.5.1's [#6898](https://github.com/ocaml/opam/pull/6898) ([#7009](https://github.com/ocaml/opam/pull/7009), [ocaml/dune#14393](https://github.com/ocaml/dune/issues/14393))
+
+
+## Try it!
+
+The upgrade instructions are unchanged:
+
+1. Either from binaries: run
+
+For Unix systems
+```
+bash -c "sh <(curl -fsSL https://opam.ocaml.org/install.sh) --version 2.5.2"
+```
+or from PowerShell for Windows systems
+```
+Invoke-Expression "& { $(Invoke-RestMethod https://opam.ocaml.org/install.ps1) } -Version 2.5.2"
+```
+or download manually from [the Github "Releases" page](https://github.com/ocaml/opam/releases/tag/2.5.2) to your PATH.
+
+2. Or from source, manually: see the instructions in the [README](https://github.com/ocaml/opam/tree/2.5.2#compiling-this-repo).
+
+
+You should then run:
+```
+opam init --reinit -ni
+```
+
+
+Please report any issues to [the bug-tracker](https://github.com/ocaml/opam/issues).
+
+Happy hacking!