clair: 4.0.4 -> 4.0.5

[r-ryantm]

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/quay/clair/releases.

meta.description for clair is: "Vulnerability Static Analysis for Containers"

meta.homepage for clair is: "https://github.com/quay/clair"

meta.changelog for clair is: "https://github.com/quay/clair/blob/v4.0.5/CHANGELOG.md"

Updates performed

• Golang update

To inspect upstream changes

• Release on GitHub

• Compare changes on GitHub

Impact

Checks done (click to expand)

---

• built on NixOS

• The tests defined in passthru.tests, if any, passed

• /nix/store/y82lpv0qwhklbrs60sf9qr2x2pj5qyh3-clair-4.0.5/bin/clair passed the binary check.

• /nix/store/y82lpv0qwhklbrs60sf9qr2x2pj5qyh3-clair-4.0.5/bin/clairctl passed the binary check.

• /nix/store/y82lpv0qwhklbrs60sf9qr2x2pj5qyh3-clair-4.0.5/bin/.clair-wrapped passed the binary check.

• 3 of 3 passed binary check by having a zero exit code.

• 2 of 3 passed binary check by having the new version present in output.

• found 4.0.5 with grep in /nix/store/y82lpv0qwhklbrs60sf9qr2x2pj5qyh3-clair-4.0.5

• found 4.0.5 in filename of file in /nix/store/y82lpv0qwhklbrs60sf9qr2x2pj5qyh3-clair-4.0.5

• directory tree listing: https://gist.github.com/07df322c19a15a15796c8d20bbcce3fe

• du listing: https://gist.github.com/f5d152a697ee8253635bb4d9a1c8840e

---

Rebuild report (if merged into master) (click to expand)

4 total rebuild path(s)

1 package rebuild(s)

1 x86_64-linux rebuild(s)
1 i686-linux rebuild(s)
1 x86_64-darwin rebuild(s)
1 aarch64-linux rebuild(s)


First fifty rebuilds by attrpath
clair

Instructions to test this update (click to expand)

---

Either download from Cachix:

nix-store -r /nix/store/y82lpv0qwhklbrs60sf9qr2x2pj5qyh3-clair-4.0.5 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.

Or, build yourself:

nix-build -A clair https://github.com/r-ryantm/nixpkgs/archive/4fad8345b2674e6d1cb3d86ca6e097f3c079a632.tar.gz

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/y82lpv0qwhklbrs60sf9qr2x2pj5qyh3-clair-4.0.5
ls -la /nix/store/y82lpv0qwhklbrs60sf9qr2x2pj5qyh3-clair-4.0.5/bin

---

Pre-merge build results

We have automatically built all packages that will get rebuilt due to
this change.

This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.

Result of nixpkgs-review run on x86_64-linux 1

1 package built:

• clair

---

Maintainer pings

cc @marsam @kalbasit for testing.

[fabaff]

Result of nixpkgs-review pr 120165 run on x86_64-linux 1

1 package built:

• clair

[fabaff]

• package built (see clair: 4.0.4 -> 4.0.5 #120165 (comment))
• all depending packages build
• tested on x86_64

...ew/pr-120165]$ ./results/clair/bin/clair -h
Usage of ./results/clair/bin/clair:
  -conf value
        The file system path to Clair's config file.
[...]]

Change looks good to me.