Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chromium/129.0.6668.100 package update #30357

Merged
merged 4 commits into from
Oct 12, 2024

Conversation

octo-sts[bot]
Copy link
Contributor

@octo-sts octo-sts bot commented Oct 8, 2024

@octo-sts octo-sts bot added request-version-update request for a newer version of a package automated pr P1 This label indicates our scanning found High, Medium or Low CVEs for these packages. labels Oct 8, 2024
Copy link
Contributor Author

octo-sts bot commented Oct 8, 2024

Open AI suggestions to solve the build error:

The error log indicates the following issues:

1. **Warning**: "target-architecture and --arch do not overlap, nothing to build"
   - This suggests that the specified target architecture in your build configuration does not match the architecture provided with the `--arch` flag. 

2. **Warning**: "skipping test for chromium on arm64"
   - This indicates that the test for Chromium is being skipped on the arm64 architecture.

To resolve these issues, you should:

- Verify and ensure that the target architecture in your build configuration matches the architecture specified with the `--arch` flag.
- Update your build configuration or command to align the architectures.
- Re-run the build process and check for any additional warnings or errors.

Copy link
Contributor Author

octo-sts bot commented Oct 8, 2024

Open AI suggestions to solve the build error:

The error message indicates a mismatch in architecture settings: "WARN target-architecture and --arch do not overlap, nothing to build\nWARN skipping test for chromium on arm64". To resolve this, ensure that the target architecture in your build configuration matches the `--arch` flag, and adjust them accordingly before re-running the build process.

Copy link
Contributor Author

octo-sts bot commented Oct 9, 2024

Open AI suggestions to solve the build error:

The error message indicates that the build process is skipping the architecture `arm64` because the target architecture and the specified `--arch` do not overlap, resulting in nothing to build. Additionally, it is skipping tests for `chromium` on `arm64`.

To fix this error, you should:
1. Verify that the build configuration includes `arm64`.
2. Ensure that the `--arch` parameter matches the target architecture.
3. Update any scripts or configuration files to include `arm64`.
4. Re-run the build process after making these adjustments.

wolfi-bot and others added 3 commits October 9, 2024 12:31
Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
Signed-off-by: RJ Trujillo <rj.sampson@chainguard.dev>
Signed-off-by: Mark McCormick <mark.mccormick@chainguard.dev>
@mamccorm mamccorm force-pushed the wolfictl-824191b7-71b3-4440-a965-0072160da97f branch from 06917cc to abde726 Compare October 9, 2024 11:31
Copy link
Contributor Author

octo-sts bot commented Oct 9, 2024

Open AI suggestions to solve the build error:

The error message in the log is: "WARN target-architecture and --arch do not overlap, nothing to build."

To fix this error, you should:
1. Ensure the target architecture matches the specified `--arch` option.
2. Verify the build configuration in `chromium.yaml` to support the desired architecture.
3. Adjust the build scripts or environment to align the architecture settings.

Copy link
Contributor

Package chromium: Click to expand/collapse

Package chromium:
Modified: /usr/lib/chromium/chrome
Modified: /usr/lib/chromium/chromedriver
Modified: /usr/lib/chromium/headless_lib_data.pak
Modified: /usr/lib/chromium/headless_lib_strings.pak
Modified: /usr/lib/chromium/libqt6_shim.so
Modified: /usr/lib/chromium/libqt6_shim.so.TOC
Modified: /usr/lib/chromium/resources.pak
Modified: /usr/lib/chromium/snapshot_blob.bin
Modified: /usr/lib/chromium/v8_context_snapshot.bin

Package chromium-lang: Click to expand/collapse

Package chromium-lang:
Modified: /usr/lib/chromium/locales/af.pak
Modified: /usr/lib/chromium/locales/cs.pak
Modified: /usr/lib/chromium/locales/da.pak
Modified: /usr/lib/chromium/locales/de.pak
Modified: /usr/lib/chromium/locales/es.pak
Modified: /usr/lib/chromium/locales/fa.pak
Modified: /usr/lib/chromium/locales/fr.pak
Modified: /usr/lib/chromium/locales/hi.pak
Modified: /usr/lib/chromium/locales/it.pak
Modified: /usr/lib/chromium/locales/kn.pak
Modified: /usr/lib/chromium/locales/pt-BR.pak
Modified: /usr/lib/chromium/locales/ru.pak
Modified: /usr/lib/chromium/locales/sl.pak
Modified: /usr/lib/chromium/locales/uk.pak
Modified: /usr/lib/chromium/locales/zh-TW.pak

Package chromium-docker-selenium-compat: Click to expand/collapse

Package chromium-docker-selenium-compat:
Modified: /opt/selenium/browser_version

malcontent found differences: Click to expand/collapse

Deleted: chromium-docker-selenium-compat/var/lib/db/sbom/chromium-docker-selenium-compat-129.0.6668.70-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/6f8176a02d1249e65ebbed8c286f

Deleted: chromium-lang/var/lib/db/sbom/chromium-lang-129.0.6668.70-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/c8730d2cd42b83327cd8c154761f

Added: chromium-lang/var/lib/db/sbom/chromium-lang-129.0.6668.100-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/fd9ac59c33817b6fcd715344f390

Added: chromium-docker-selenium-compat/var/lib/db/sbom/chromium-docker-selenium-compat-129.0.6668.100-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/aed18412cbf16bd0d08a36600743

Changed: /tmp/wolfictl-apk-621019680/chromium/usr/lib/chromium/chrome

1 new behaviors

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM fs/file/copy copy files using cp cp

Changed: /tmp/wolfictl-apk-621019680/chromium/usr/lib/chromium/chromedriver

Moved: chromium/var/lib/db/sbom/chromium-129.0.6668.70-r0.spdx.json -> /tmp/wolfictl-apk-621019680/chromium/var/lib/db/sbom/chromium-129.0.6668.100-r0.spdx.json (similarity: 0.98)

@octo-sts octo-sts bot added bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. manual/review-needed labels Oct 11, 2024
Copy link
Member

@mamccorm mamccorm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank-you @EyeCantCU and @hbh7

@mamccorm mamccorm merged commit fededdc into main Oct 12, 2024
14 checks passed
@mamccorm mamccorm deleted the wolfictl-824191b7-71b3-4440-a965-0072160da97f branch October 12, 2024 00:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automated pr bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. manual/review-needed P1 This label indicates our scanning found High, Medium or Low CVEs for these packages. request-version-update request for a newer version of a package
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants