From d7a0629f1424d5e9ecdd0e64bbe1ab9c63f7f77b Mon Sep 17 00:00:00 2001
From: Daniel Widgren <daniel.widgren@gmail.com>
Date: Thu, 6 Aug 2026 12:57:36 +0200
Subject: [PATCH] chore: pin asobi v0.71.0 for the final build

The publish of the deprecation notice failed its own staleness gate: the
lock pinned asobi 3e493659 while the latest release was v0.71.0, so it
refused to republish a stale image. That is the gate working.

Respecting it rather than removing it, because the point applies with
extra force here: this is the LAST asobi_lua build, so whatever it ships
is what anyone still on that tag is frozen on. It should be the newest
code, not old code with a notice painted on it.

kura moves 2.17.1 -> 2.20.1 with it. Built the image and booted it to
confirm the transitive bump is fine, rather than trusting a lock diff.
---
 rebar.config | 2 +-
 rebar.lock   | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/rebar.config b/rebar.config
index 8ee5baa..1130dfe 100644
--- a/rebar.config
+++ b/rebar.config
@@ -14,7 +14,7 @@
     %% so an unattended branch pin would drift into whatever main happened to be
     %% at build time. Bump this by hand when a new asobi release should reach
     %% the alias image.
-    {asobi, {git, "https://github.com/widgrensit/asobi.git", {tag, "v0.53.0"}}},
+    {asobi, {git, "https://github.com/widgrensit/asobi.git", {tag, "v0.71.0"}}},
     %% Keep cowlib on the line cowboy needs: cowboy 2.18.0 (pulled via asobi's
     %% CVE-2026-43966 bump) requires cowlib >= 2.19.0. The old "~> 2.17" cap
     %% (< 2.18.0) silently stranded cowlib at 2.17.1 against cowboy 2.18.0, a
diff --git a/rebar.lock b/rebar.lock
index 544b301..e3ef14c 100644
--- a/rebar.lock
+++ b/rebar.lock
@@ -1,7 +1,7 @@
 {"1.2.0",
 [{<<"asobi">>,
   {git,"https://github.com/widgrensit/asobi.git",
-       {ref,"3e493659f52cfe152de827b86ee0fc012f4b5ef0"}},
+       {ref,"020374060edf5f5fd8ecac7d641753672f4550a7"}},
   0},
  {<<"backoff">>,{pkg,<<"backoff">>,<<"1.1.6">>},3},
  {<<"cowboy">>,{pkg,<<"cowboy">>,<<"2.18.0">>},1},
@@ -9,7 +9,7 @@
  {<<"erlydtl">>,{pkg,<<"erlydtl">>,<<"0.14.0">>},2},
  {<<"jhn_stdlib">>,{pkg,<<"jhn_stdlib">>,<<"5.11.2">>},2},
  {<<"jose">>,{pkg,<<"jose">>,<<"1.11.12">>},3},
- {<<"kura">>,{pkg,<<"kura">>,<<"2.17.1">>},1},
+ {<<"kura">>,{pkg,<<"kura">>,<<"2.20.1">>},1},
  {<<"kura_postgres">>,{pkg,<<"kura_postgres">>,<<"0.7.2">>},1},
  {<<"luerl">>,{pkg,<<"luerl">>,<<"1.5.1">>},1},
  {<<"nova">>,
@@ -38,7 +38,7 @@
  {<<"erlydtl">>, <<"964B2DC84F8C17ACFAA69C59BA129EF26AC45D2BA898C3C6AD9B5BDC8BA13CED">>},
  {<<"jhn_stdlib">>, <<"785074F3CA368EAA8E9AF1592BC19AE9EF1F7AF30B2CD6456A6083173A8F5CCB">>},
  {<<"jose">>, <<"06E62B467B61D3726CBC19E9B5489F7549C37993DE846DFB3EE8259F9ED208B3">>},
- {<<"kura">>, <<"6C32025B0BCE4F5674219C761AC614B67BA3A920B6A93E0E601231926BA02335">>},
+ {<<"kura">>, <<"FD4A68692CF8EFF35E878CF8E09EDDF5C9C41D0D91DB1F5C7B2C0C8C61A8016B">>},
  {<<"kura_postgres">>, <<"D5229C57FE7E1B85900F16E65F34D227888DB51D0B0FB808EB6436B21F189395">>},
  {<<"luerl">>, <<"F6700420950FC6889137E7A0C11C4A8467DEA04A8C23F707A40D83566D14E786">>},
  {<<"nova_auth">>, <<"0447C6FE716348FF0621F9F043A0CD147D8DAFD11C3E3F22CB170F7C7B00ACE8">>},
@@ -62,7 +62,7 @@
  {<<"erlydtl">>, <<"D80EC044CD8F58809C19D29AC5605BE09E955040911B644505E31E9DD8143431">>},
  {<<"jhn_stdlib">>, <<"2329CD16DEE46704AAB6184D09508E59DBA31C4D3255271DBB7D34D115ECA508">>},
  {<<"jose">>, <<"31E92B653E9210B696765CDD885437457DE1ADD2A9011D92F8CF63E4641BAB7B">>},
- {<<"kura">>, <<"BB872E7831CAB132EF7B50D9A0C9C7AD83DD6A24E4FCF2AAC7BED3A544B00609">>},
+ {<<"kura">>, <<"ED68E6EA5A03C59FA532FFEB9494F1E9FB401A930400A548158DC726E29B60E8">>},
  {<<"kura_postgres">>, <<"9209A4F16826BA17282CF16CCEF442B319BAC6581DAD73B34BFD7A0E3927D0D5">>},
  {<<"luerl">>, <<"ABF88D849BAA0D5DCA93B245A8688D4DE2EE3D588159BB2FAF51E15946509390">>},
  {<<"nova_auth">>, <<"1B343A8932037B675138DA50AF6118E4B7D3E7C93713DC9DFCD4C3F7B206DE2F">>},