fluent-plugin-kubernetes_metadata_filter/3.5.1 package update#30852
Merged
fluent-plugin-kubernetes_metadata_filter/3.5.1 package update#30852
Conversation
Contributor
octo-sts
bot
commented
Oct 15, 2024
octo-sts
bot
commented
Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
octo-sts
bot
added
request-version-update
Contributor
Package fluent-plugin-kubernetes_metadata_filter: Click to expand/collapsePackage fluent-plugin-kubernetes_metadata_filter:
(
"""
# Generated by melange
pkgname = fluent-plugin-kubernetes_metadata_filter
- pkgver = 3.5.0-r4
+ pkgver = 3.5.1-r0
arch = x86_64
- size = 302258
+ size = 302335
origin = fluent-plugin-kubernetes_metadata_filter
pkgdesc = This is the Filter plugin to add Kubernetes metadata
url =
- commit = 7180c8e536dbbe2752bc7695c248e7b8be67d467
- builddate = 1724959519
+ commit = 1c07c002b94e80a26db29a924628c96312257a8b
+ builddate = 1729018233
license = Apache-2.0
depend = ruby-3.2
... // 7 identical lines
depend = ruby3.2-prometheus-client
depend = ruby3.2-rack-oauth2
- datahash = f520bafb65cd316170dce1892f59f6302a2b3ca197abf8a3944f87342a4cce66
+ datahash = 549d8e54eb9a401dd4b6fff6f369a6fae7c868b642a6f01522e40908edcdc0c5
"""
)
Added: /usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.1/.circleci/config.yml malcontent found differences: Click to expand/collapseDeleted: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.0/lib/fluent/plugin/filter_kubernetes_metadata.rb [
|
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | ref/path/var/log | path reference within /var/log | /var/log/containers /var/log/pods |
| -MEDIUM | ref/path/var/run | references subfolder within /var/run | /var/run/secrets/ |
| -MEDIUM | ref/words/exclamation | gets very excited | e node name which can affect the API server and watch efficiency !! |
| -LOW | ref/path/var | path reference within /var | /var/log/containers /var/log/pods /var/run/secrets/kubernetes.io/serviceaccount |
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| -LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin plugin |
Deleted: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.0/lib/fluent/plugin/kubernetes_metadata_cache_strategy.rb [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| -LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Deleted: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.0/lib/fluent/plugin/kubernetes_metadata_stats.rb [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| -LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Deleted: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.0/lib/fluent/plugin/kubernetes_metadata_common.rb [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| -LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Deleted: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.0/lib/fluent/plugin/kubernetes_metadata_test_api_adapter.rb [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| -LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Deleted: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.0/lib/fluent/plugin/kubernetes_metadata_util.rb [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://stackoverflow.com/questions/5622435/how-do-i-convert-a-ruby-class |
| -LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Deleted: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.0/lib/fluent/plugin/kubernetes_metadata_watch_namespaces.rb [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | process/name/get | get the current process name | process_name |
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| -LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Deleted: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.0/lib/fluent/plugin/kubernetes_metadata_watch_pods.rb [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| -LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Added: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.1/lib/fluent/plugin/kubernetes_metadata_util.rb [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://stackoverflow.com/questions/5622435/how-do-i-convert-a-ruby-class |
| +LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Added: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.1/lib/fluent/plugin/kubernetes_metadata_watch_namespaces.rb [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | process/name/get | get the current process name | process_name |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| +LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Added: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.1/lib/fluent/plugin/filter_kubernetes_metadata.rb [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/path/var/log | path reference within /var/log | /var/log/containers /var/log/pods |
| +MEDIUM | ref/path/var/run | references subfolder within /var/run | /var/run/secrets/ |
| +MEDIUM | ref/words/exclamation | gets very excited | e node name which can affect the API server and watch efficiency !! |
| +LOW | ref/path/var | path reference within /var | /var/log/containers /var/log/pods /var/run/secrets/kubernetes.io/serviceaccount |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| +LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin plugin |
Added: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.1/lib/fluent/plugin/kubernetes_metadata_stats.rb [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| +LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Added: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.1/lib/fluent/plugin/kubernetes_metadata_test_api_adapter.rb [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| +LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Added: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.1/lib/fluent/plugin/kubernetes_metadata_cache_strategy.rb [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| +LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Added: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.1/lib/fluent/plugin/kubernetes_metadata_common.rb [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| +LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Added: fluent-plugin-kubernetes_metadata_filter/usr/lib/ruby/gems/3.2.0/gems/fluent-plugin-kubernetes_metadata_filter-3.5.1/lib/fluent/plugin/kubernetes_metadata_watch_pods.rb [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| +LOW | ref/words/plugin | references a 'plugin' | Kubernetes Metadata Filter Plugin |
Moved: fluent-plugin-kubernetes_metadata_filter/var/lib/db/sbom/fluent-plugin-kubernetes_metadata_filter-3.5.0-r4.spdx.json -> /tmp/wolfictl-apk-840835503/fluent-plugin-kubernetes_metadata_filter/var/lib/db/sbom/fluent-plugin-kubernetes_metadata_filter-3.5.1-r0.spdx.json (similarity: 0.99)
octo-sts
bot
added
bincapz/pass
mamccorm
approved these changes
Oct 15, 2024
octo-sts bot
added a commit
that referenced
this pull request
Feb 23, 2026
Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 2afbbe4
ndinhbang
added a commit
to ndinhbang/os
that referenced
this pull request
Mar 3, 2026
* erlang-28/28.3.2 package update (wolfi-dev#30693) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 299f883 * erlang-27/27.3.4.8 package update (wolfi-dev#30690) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 1793632 * k8ssandra-client/0.8.8 package update (wolfi-dev#30699) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 0cac20d * steampipe/2.3.6 package update (wolfi-dev#30706) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 209cd8c * erlang-26/26.2.5.17 package update (wolfi-dev#30719) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 6fdab71 * external-secrets-operator-2.0/2.0.1 package update (wolfi-dev#30732) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 08562d5 * rancher-fleet/0.14.3 package update (wolfi-dev#30725) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 2026606 * kube-bench/0.15.0 package update (wolfi-dev#30739) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 72140e3 * qdrant/1.17.0 package update (wolfi-dev#30729) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 42b487a * Add omnibump package and unified pipeline system (wolfi-dev#26272) * Add omnibump package and unified pipeline system - Add omnibump package with support for Go, Rust, Java (Maven/Gradle) - Create unified pipelines at stereo root with backwards-compatible wrappers (go/bump, rust/cargobump, maven/pombump) - Update extra-packages to use unified pipelines for testing Signed-off-by: Kyle Steere <kyle.steere@chainguard.dev> * update to version 0.5.2 Signed-off-by: Kyle Steere <kyle.steere@chainguard.dev> --------- Signed-off-by: Kyle Steere <kyle.steere@chainguard.dev> Export: 1f50f6b * clickhouse-operator/0.26.0 package update (wolfi-dev#30742) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: e7fa41e * zed/0.224.9 package update (wolfi-dev#30737) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 6b1cf91 * mycli/1.55.0 package update (wolfi-dev#30744) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 496b255 * py3-stevedore/5.7.0 package update (wolfi-dev#30745) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: fdf7335 * Merge pull request wolfi-dev#29669 from chainguard-dev/staging-update-bot/os/erofs-utils.yaml erofs-utils/1.9 package update Export: 0a4062f * Merge pull request wolfi-dev#29275 from chainguard-dev/staging-update-bot/os/libcap-ng.yaml libcap-ng/0.9.1 package update Export: f9b527d * Add scala 3.8 version stream Export: dd97491 * scala-3.8: Bump {runtime-,}java-version to 25 Signed-off-by: Sergio Durigan Junior <sergiodj@chainguard.dev> Export: 06a8926 * php-8.[1-5]: decouple from /var/run merge PHP ships an empty `/var/run` directory, entangling it with the project to merge `/var/run` and `/run`. Looking at the upstream source, this is because the init scripts and systemd service files for `php-fpm` and `phpdbg` expect to be able to create PID files there. However, we don't actually ship those init scripts or systemd services anywhere, so there's no need to ship that empty directory either. Signed-off-by: Colin Watson <colin.watson@chainguard.dev> Export: ce2da29 * renovate/43.27.0 package update (wolfi-dev#30752) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: c174ed9 * Merge pull request wolfi-dev#30208 from chainguard-dev/oddbloke/open-webui open-webui: CVE remediations Export: f8e8642 * Merge pull request wolfi-dev#30533 from cjwatson/os-pdns-fix-build pdns-5.3: fix build failures Export: f0aa1ab * Merge pull request wolfi-dev#30730 from brianmcarey/mlflow-GHSA-cfh3-3jmp-rvhc mlflow: bump epoch to rebuild and remediate CVE-2026-25990 Export: 45d881d * Merge pull request wolfi-dev#30708 from brianmcarey/kubeflow-volumes-web-app-GHSA-r6ph-v2qm-q3c2 kubeflow-volumes-web-app: bump epoch and rebuild to remediate CVE-2026-26007 Export: b5b040d * azurefile-csi-1.35: remediate GHSA-wwj6-vghv-5p64 (wolfi-dev#30753) Co-authored-by: cve-remediation <cve-remediation@chainguard.dev> Export: 37d1eb8 * confluent-kafka/8.3.0.259 package update (wolfi-dev#30754) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 4f3f901 * fix(microvm-init): resolve hostname in localhost inside chroot Signed-off-by: Luca Di Maio <luca.dimaio1@gmail.com> Export: c7f5f93 * renovate/43.28.0 package update (wolfi-dev#30756) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: ae878bf * Merge branch 'main' into version-stream-reconciler/version_data/mysql.yaml Export: 3fd4c21 * Merge pull request wolfi-dev#11695 from chainguard-dev/version-stream-reconciler/version_data/scala.yaml Add scala 3.8 version stream Export: c34a0d2 * Merge pull request wolfi-dev#30755 from cjwatson/php-no-varrun php-8.[1-5]: decouple from /var/run merge Export: 14d943b * revert test stanzas for libkcapi, microvm-init, spark-4.0 These 3 packages fail in CI (test pod failed) despite passing locally. Removing them from this PR to let the other 15 land cleanly. They will be investigated and re-added in a follow-up PR. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: bcfc34e * Merge branch 'main' into add-tests/help-and-version Export: b2880e0 * fix static subpackage tests: use emptypackage or remove where appropriate - plog-static, rav1e-static, soci-static: change test/tw/staticpackage to test/tw/emptypackage (split/static produces no .a files for these) - simdjson-static: remove test stanza (package contains .a files plus cmake config files; test/tw/staticpackage rejects non-.a content) - tini-static: remove test stanza (ships a statically-linked binary, not a static library; test/tw/staticpackage expects .a files) Verified locally: all 5 packages now pass (67/72 → 72/72). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: 6973a1d * flyway/12.0.2 package update Export: b1b19d4 * uutils: remediate GHSA-3288-p39f-rqpv (wolfi-dev#30765) Co-authored-by: cve-remediation <cve-remediation@chainguard.dev> Export: 8313493 * Merge pull request wolfi-dev#30406 from chainguard-dev/add-tests/help-and-version add test stanzas to 18 packages missing top-level tests Export: 828ef8a * Merge branch 'main' into staging-update-bot/os/py3-typer.yaml Signed-off-by: shAdE424 <azimjon.ulmasov@chainguard.dev> Export: b7777d4 * eslint/10.0.1 package update (wolfi-dev#30770) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 9cafe48 * fix doc subpackage tests: use emptypackage or remove where appropriate - boost-docs, fio-docs, perl-common-sense-doc: remove test stanza (packages ship no valid documentation files) - libatomic_ops-doc, opus-doc, pango-doc, qt5-qtbase-doc, qt6-qtbase-doc, soxr-doc, speexdsp-doc, vectorscan-doc: use test/tw/emptypackage instead of test/tw/docs (packages install no files at all) Verified locally: all 11 packages now pass. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: a3b5ad3 * revert fribidi-static test: CI build failure fribidi fails to build in CI (pod failed: build failed). Removing the test/tw/staticpackage stanza and epoch bump to keep this PR unblocked. Will revisit in a follow-up PR once the build issue is resolved. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: e64410f * revert strongswan-dbg test: CI build failure strongswan fails to build in CI (pod failed: build failed). Removing the test/tw/debugpackage stanza and epoch bump. Will revisit in a follow-up PR once the build issue is resolved. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: e64a991 * Remove identity-shiro plugin Signed-off-by: Max Allan <max.allan@chainguard.dev> Export: 2c2d144 * revert 11 dev packages: CI build failures The following -dev subpackages were removed from this PR because their packages fail to build in CI (elastic-build): Build pod failures: aws-crt-cpp, brunsli, gengetopt, openvpn, potrace, ragel, sudo, wabt, xdpyinfo, xmessage, yasm Reverting their test/pkgconf stanzas and epoch bumps. Will revisit in follow-up PRs once CI build issues are resolved. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: 2d158c1 * Merge branch 'main' into add-tests/dbg-subpackages Export: c08bcf7 * Merge branch 'main' into add-tests/doc-subpackages Export: ddfbfb0 * Merge branch 'main' into add-tests/static-subpackages Export: 9e5f739 * Merge branch 'main' into add-tests/dev-subpackages Export: 9fc73b0 * Merge pull request wolfi-dev#30758 from chainguard-dev/lucadimaio/os-542-microvm-init-fix-localhost-in-chroot fix(microvm-init): resolve hostname in localhost inside chroot Export: ba7755a * kube-metrics-adapter/0.2.8 package update (wolfi-dev#30779) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 4fffef5 * remove font-xproto and fontsproto tests Reverting epoch bumps and test/tw/emptypackage stanzas for font-xproto and fontsproto per user request. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: eb2f26d * flyway: fix the path to prevent FTBFS Signed-off-by: Azimjon Ulmasov <azimjon.ulmasov@chainguard.dev> Export: 4d24092 * temporal-docker-builds/0.0_git20260220 package update (wolfi-dev#30781) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 961c4ca * Merge branch 'main' into add-tests/remaining-packages Export: d657a23 * boost, fio, perl-common-sense: revert epoch bumps (no tests added) These packages had epoch bumped alongside a test/tw/docs stanza that was subsequently removed because the -doc subpackages contain no valid docs. With no test change, the epoch bumps serve no purpose and trigger unnecessary CI rebuilds. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: 36d88bd * Merge branch 'main' into add-tests/doc-subpackages Export: 180b7b5 * ipfs-cluster: remediate GHSA-9f3f-wv7r-qc8r (wolfi-dev#30265) Co-authored-by: cve-remediation <cve-remediation@chainguard.dev> Export: 897a10d * vexctl: remediate GHSA-jqc5-w2xx-5vq4 (wolfi-dev#28071) Co-authored-by: cve-remediation <cve-remediation@chainguard.dev> Co-authored-by: Kyle Steere <kbsteere@users.noreply.github.com> Export: e7a8238 * kubo: remediate GHSA-9f3f-wv7r-qc8r (wolfi-dev#27607) Co-authored-by: cve-remediation <cve-remediation@chainguard.dev> Export: 9e47672 * consul-k8s-1.9: remediate CVE-2025-61732 (wolfi-dev#27432) Co-authored-by: cve-remediation <cve-remediation@chainguard.dev> Export: 81a9cd9 * Merge pull request wolfi-dev#24869 from chainguard-dev/staging-update-bot/os/py3-typer.yaml py3-typer/0.24.0 package update Export: 66c5030 * Merge pull request wolfi-dev#26572 from chainguard-dev/staging-update-bot/os/opensearch-3.yaml opensearch-3/3.5.0 package update Export: dcfcd16 * soxr-doc: fix test — use test/tw/docs, not test/tw/emptypackage soxr-doc ships actual manpages (4935 bytes installed), so test/tw/emptypackage incorrectly fails in CI. Switch to test/tw/docs. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: b2b45a2 * Merge branch 'main' into add-tests/doc-subpackages Export: c1ac656 * flyway: add couchbase driver support Signed-off-by: Azimjon Ulmasov <azimjon.ulmasov@chainguard.dev> Export: d2808ad * kuma-2.13/2.13.2 package update (wolfi-dev#30805) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 1bb17dc * revert 14 packages with CI build failures Remove epoch bumps and test stanzas for packages that fail to build in CI (pre-existing upstream issues, not caused by our changes): Direct build failures: - gettext, gsl, libmicrohttpd, nettle, libidn2 Cascade failures (depend on failing packages above): - cairo, elfutils, fontconfig, fuse2, glib, harfbuzz, libpsl, libsecret, oath-toolkit Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: 21d42ec * Merge branch 'main' into add-tests/static-subpackages Export: 11559d3 * zed/0.224.10 package update (wolfi-dev#30804) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 920214c * Merge pull request wolfi-dev#30572 from dustinkirkland/add-tests/dbg-subpackages openrc, rtrlib, strongswan: add test/tw/debugpackage to -dbg subpackages Export: 270cb33 * Merge pull request wolfi-dev#30475 from chainguard-dev/add-tests/remaining-packages add test stanzas to 4 remaining packages missing top-level tests Export: b3e74ba * contour-1.33/1.33.2 package update (wolfi-dev#30808) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: c35cdc3 * Merge pull request wolfi-dev#30576 from dustinkirkland/add-tests/dev-subpackages 26 packages: add test/pkgconf to -dev subpackages using split/dev Export: f103e5b * Merge pull request wolfi-dev#15154 from chainguard-dev/version-stream-reconciler/version_data/mysql.yaml Add mysql 9.6 version stream Export: 68b4df8 * libatomic_ops, opus, pango, qt5-qtbase, qt6-qtbase, speexdsp, vectorscan: remove empty -doc subpackages All 7 packages ship zero documentation files — the -doc subpackage contains only an auto-generated SBOM file. Remove the subpackage entirely rather than adding an emptypackage test. Also revert epoch bumps for these 7 packages since no meaningful change is being made. Verified by installing each -doc package in a Wolfi container and confirming the only content is var/lib/db/sbom/*.spdx.json. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: 2332e69 * libatomic_ops, opus, pango, qt5-qtbase, qt6-qtbase, speexdsp, vectorscan: bump epoch for -doc subpackage removal Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: d8baff2 * Merge branch 'main' into add-tests/doc-subpackages Export: 8343a2e * confluent-kafka/8.3.0.260 package update (wolfi-dev#30812) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 2660f3a * stress-ng/0.20.01 package update (wolfi-dev#30820) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 28d9559 * soxr: remove empty soxr-doc subpackage soxr-doc contains only the auto-generated SBOM file — no actual man pages are installed by the build. Remove the subpackage rather than testing it. Epoch bump retained since this is a real change. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: b2291a5 * Merge branch 'main' into add-tests/doc-subpackages Export: 399a456 * thingsboard: remediate GHSA-fpj8-gq4v-p354 (wolfi-dev#30814) Co-authored-by: cve-remediation <cve-remediation@chainguard.dev> Export: fdec0c3 * renovate/43.29.2 package update (wolfi-dev#30821) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 10e5979 * flyway: nit noise reduction Signed-off-by: Azimjon Ulmasov <azimjon.ulmasov@chainguard.dev> Export: 4da52cd * Merge pull request wolfi-dev#26826 from chainguard-dev/staging-update-bot/os/flyway.yaml flyway/12.0.2 package update Export: 8dc9158 * py3-diffoscope/313 package update (wolfi-dev#30828) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 1698b2d * cert-manager-istio-csr/0.15.1 package update (wolfi-dev#30825) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 1b0cefe * Merge pull request wolfi-dev#30573 from dustinkirkland/add-tests/doc-subpackages boost, fio, libatomic_ops, opus, owfs, pango, perl-common-sense, qt5-qtbase, qt6-qtbase, soxr, speexdsp, vectorscan: add test/tw/docs Export: 5d4aca1 * py3-async-lru/2.2.0 package update (wolfi-dev#30836) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 1c3f7ba * fontsproto, font-xproto: add XML validation tests via new pipeline Both packages install only XML files (no binaries or libraries): - fontsproto: usr/share/doc/fontsproto/fsproto.xml - font-xproto: usr/share/doc/xproto/*.xml (5 files) Add a new reusable pipeline test/tw/xml-syntax-check that uses xmlwf from expat to validate well-formedness of all .xml files found under usr/share (configurable via `path` input). Fails if no XML files are found or if any file is malformed. Both packages now use `uses: test/tw/xml-syntax-check` rather than inline runs: blocks. Confirmed passing locally with MELANGE_RUNNER=docker make docker-test/{fontsproto,font-xproto}. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: 5bd44f4 * py3-tox/4.43.0 package update (wolfi-dev#30840) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 30ea320 * Merge branch 'main' into add-tests/xml-font-packages Export: 2816fdb * Merge branch 'main' into claude-add-tests-skill Export: 77d4e9c * vulkan-loader/1.4.344 package update (wolfi-dev#30852) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 2afbbe4 * deno: remediate GHSA-3288-p39f-rqpv (wolfi-dev#30842) Co-authored-by: cve-remediation <cve-remediation@chainguard.dev> Export: c75f044 * basisu/2.0.3 package update (wolfi-dev#30854) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 952b49b * neuvector-scanner/4.080 package update (wolfi-dev#30855) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 8dbbf9c * libhtp: revert epoch bump and static test (CI failure on pre-existing test) Export: 8f8252f * aws-cli-2/2.33.27 package update (wolfi-dev#30857) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: c26a631 * gh/2.87.1 package update (wolfi-dev#30860) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: f0890a0 * libreoffice-26.2/26.2.1.2 package update (wolfi-dev#30863) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 977c935 * gh/2.87.2 package update (wolfi-dev#30870) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: bfd54d2 * Merge branch 'main' into add-tests/static-subpackages Export: 9ac0f06 * test: add xml-syntax-check to xcb-proto, wayland-protocols, xtrans, libxt These packages install XML files (protocol definitions and documentation) that can be validated for well-formedness using xmlwf from expat. - xcb-proto: 32 XML protocol definitions in usr/share/xcb - wayland-protocols: 57 XML protocol definitions in usr/share/wayland-protocols (also removes unused libxml2-utils build dep from test environment) - xtrans: 1 XML doc file in usr/share/doc/xtrans - libxt: 22 XML doc files in usr/share/doc/libXt Introduces os/pipelines/test/tw/xml-syntax-check.yaml (also in PR wolfi-dev#30844). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: ff62328 * Catch2, libatomic_ops, odbc-cpp-wrapper, openrc, plog, snmalloc: bump epochs (main advanced) Export: b1630f4 * Merge branch 'main' into add-tests/xml-font-packages Export: a1ce304 * py3-tox/4.44.0 package update (wolfi-dev#30891) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 3475116 * aerospike-7/7.2.0.15 package update (wolfi-dev#30892) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 8ce5ce4 * Merge branch 'main' into add-tests/static-subpackages Export: 64c1ce9 * cluster-autoscaler-1.35/1.35.1 package update (wolfi-dev#30895) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 2feb07e * py3-boto3/1.42.54 package update (wolfi-dev#30907) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 7abb043 * llvm-18: revert static test and epoch bump Export: 00ec828 * Merge branch 'main' into add-tests/static-subpackages Export: 4595b47 * caddy/2.11.0 package update (wolfi-dev#30916) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 7be0777 * gatus/5.35.0 package update (wolfi-dev#30923) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 7f02d96 * test: add shell-syntax-check pipeline + 30 completion subpackages Introduces a single unified test pipeline test/tw/shell-syntax-check that intelligently validates shell files using each shell's built-in parse-only mode, with two complementary detection strategies: Location-based (completion files, no shebang required): usr/share/bash-completion/completions/ → bash --norc -n usr/share/zsh/site-functions/ → zsh -n usr/share/fish/vendor_completions.d/ → fish --no-execute Shebang-based (executable scripts in usr/bin, usr/sbin, usr/libexec): #!/bin/bash, #!/usr/bin/env bash → bash --norc -n #!/bin/sh, #!/bin/dash, /env sh|dash → sh -n #!/bin/zsh, #!/usr/bin/env zsh → zsh -n #!/usr/bin/env fish → fish --no-execute Fails if no shell files are found at all, or if any file has a syntax error. Reports total count of files checked on success. Applies the pipeline to 30 previously untested shell completion subpackages across 14 packages: btrfs-progs, bubblewrap, cue, kmod, minify, mtr, openrc, powertop, subversion, topgrade, uutils, wl-clipboard, zellij, zoxide. Verified with 1670 completion files pre-checked in a container (zero failures). Local melange tests pass for zoxide (bash+zsh+fish), kmod (bash only), topgrade (bash+zsh+fish), openrc (bash+zsh — also exercises shebang-based script detection). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: d83d366 * test: add optional explicit file list to shell-syntax-check pipeline When the new `files` input is specified (space-separated paths), only those files are checked using the same location/shebang detection logic. When omitted, the existing auto-detection behaviour is unchanged. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: cf12fcf * Merge branch 'main' into add-tests/static-subpackages Export: b64528b * Merge branch 'main' into add-tests/shell-completion-check Signed-off-by: Dustin Kirkland <kirkland@chainguard.dev> Export: 6f56664 * weaviate/1.35.10 package update (wolfi-dev#30931) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: e979d10 * fix: bump epoch for openrc and uutils (missing epoch bumps for shell-syntax-check tests) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Export: a7187f9 * Merge branch 'main' into add-tests/shell-completion-check Export: 3a6baa6 * py3-greenlet/3.3.2 package update (wolfi-dev#30937) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 7f4775f * trust-manager/0.21.1 package update (wolfi-dev#30935) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 4c86c9c * confluent-kafka/8.3.0.262 package update (wolfi-dev#30939) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 3fdf2d9 * py3-botocore/1.42.54 package update (wolfi-dev#30942) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: bed5eb7 * nss/3.121 package update (wolfi-dev#30810) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 27ab90e * caddy/2.11.1 package update (wolfi-dev#30947) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 1f37fb1 * temporal-docker-builds/0.0_git20260221 package update (wolfi-dev#30950) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 6939df7 * ollama/0.16.3 package update (wolfi-dev#30949) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: c9245c9 * atmoz-sftp/0.0.0_git20260221 package update (wolfi-dev#30952) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 740427d * ipfs-cluster: remediate GHSA-2f2x-8mwp-p2gc Export: ac24b76 * jupyter-docker-stacks/0.0.0_git20260221 package update (wolfi-dev#30953) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 88cfaf0 * zarf/0.73.0 package update (wolfi-dev#30958) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 4043b5a * nats-server-config-reloader/0.22.3 package update (wolfi-dev#30962) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 91f66ee * crane: add krane Add krane and krane-fips subpackages and add tests. As recommended by @imjasonh, as requested by @s10gopal Fixes: wolfi-dev#78581 Fixes: wolfi-dev#78579 Export: 3210372 * rancher-partner-charts/0_git20260221 package update (wolfi-dev#30964) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 34f5629 * libgcrypt/1.12.1 package update (wolfi-dev#30967) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 74eb598 * Merge pull request wolfi-dev#30965 from xnox/krane crane: add krane Export: d2c8646 * mlflow/3.10.0 package update (wolfi-dev#30773) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 53b3a36 * libsdl3/3.4.2 package update (wolfi-dev#30976) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: ad92f93 * py3-uuid-utils/0.14.1 package update (wolfi-dev#30979) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 70cfb10 * Merge branch 'main' into add-tests/static-subpackages Export: 9f2ec14 * confluent-kafka/8.3.0.264 package update (wolfi-dev#30989) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 3fef36b * temporal-docker-builds/0.0_git20260221 package update (wolfi-dev#31007) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 26f2c14 * py3-peewee/4.0.0 package update Export: 8943b67 * valijson/1.1.0 package update Export: c8e0ac7 * cass-operator/1.29.0 package update Export: 01f55cd * rstudio/2026.01.1_p403 package update Export: 3e4c85a * flux-helm-controller/1.5.0 package update Export: 60ebba2 * zed/0.224.11 package update (wolfi-dev#31073) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 4014be4 * cert-manager-csi-driver/0.12.1 package update Export: d49c738 * rstudio: fix node-22.22.0.patch for v2026.01.1+403 The NEWS file hunk failed to apply because upstream changed "copilot completions" to "Copilot completions", renamed "vscode server" to "Code OSS server", and the content shifted from line 85 to line 115. Update patch context to match. Export: 2b0c714 * vim/9.2.0038 package update (wolfi-dev#31091) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 6b28eab * flux-helm-controller: use GOTOOLCHAIN=local+auto Export: d7b71ab * cass-operator: fix test by providing image config as ConfigMap v1.29.0 loads image config from a ConfigMap with label k8ssandra.io/config=image instead of a raw file on disk. Replace the empty touch with a proper ConfigMap containing a minimal v1beta2 ImageConfig. Export: 42b916b * fix tests Signed-off-by: Dentrax <furkan.turkal@chainguard.dev> Export: 41bf529 * valijson: remove headers dropped in v1.1.0 compat/optional.hpp and valijson/internal/optional.hpp were removed upstream in v1.1.0, causing the header-check test to fail. Verified by cloning v1.1.0: $ find include -name "optional.hpp" (no results) $ ls include/compat/ No such file or directory See: https://github.com/tristanpenman/valijson/tree/v1.1.0/include Export: b1d6e9b * add required build-time packages Signed-off-by: Dentrax <furkan.turkal@chainguard.dev> Export: 2b31c7a * py3-maturin/1.12.4 package update (wolfi-dev#31099) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: f8bd95b * renovate/43.30.0 package update (wolfi-dev#31108) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 117c90c * linkerd-await/0.3.2 package update Export: 5882806 * minify/2.24.9 package update (wolfi-dev#31116) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 3bca3f8 * cpp-httplib/0.33.1 package update (wolfi-dev#31129) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 44d8d94 * bump go-libp2p to 0.47.0 as its compatible with webtransport-go 0.10.0 Signed-off-by: Dentrax <furkan.turkal@chainguard.dev> Export: c32ae46 * linkerd-await: fix version mismatch in upstream Cargo.toml Upstream tagged release/v0.3.2 but Cargo.toml still has version 0.3.1, causing --version to report the wrong version and failing tests. https://github.com/linkerd/linkerd-await/blob/b23359a47ad0156599f59268138bae587fb930e5/Cargo.toml#L3 Export: c974832 * llvm-15,16,17,19,20,21: add test/tw/staticpackage to -static subpackages Export: 313fc4a * trim to lib* packages only: remove llvm and misc packages (split into separate PRs) Export: c0d9e1d * Merge branch 'main' into add-tests/static-subpackages Export: 86e4013 * Merge branch 'main' into add-tests/static-subpackages-llvm Export: d353516 * renovate/43.31.0 package update (wolfi-dev#31175) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 78839d0 * filebrowser/2.60.0 package update (wolfi-dev#31193) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: b498fbe * vim/9.2.0043 package update (wolfi-dev#31208) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 2323a22 * py3-typer/0.24.1 package update (wolfi-dev#31215) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: fc30e97 * Merge branch 'main' into add-tests/static-subpackages Export: 1fd8eba * Merge branch 'main' into add-tests/static-subpackages-llvm Export: 7e71484 * atmoz-sftp/0.0.0_git20260222 package update (wolfi-dev#31310) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 72c0658 * jupyter-docker-stacks/0.0.0_git20260222 package update (wolfi-dev#31320) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 6e95da5 * confluent-kafka/8.3.0.265 package update (wolfi-dev#31333) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 1003d0e * Merge branch 'main' into add-tests/static-subpackages Export: c84de02 * rancher-partner-charts/0_git20260222 package update (wolfi-dev#31338) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 4c11783 * renovate/43.31.1 package update (wolfi-dev#31348) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 04b03be * py3-xmltodict/1.0.4 package update (wolfi-dev#31360) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 08c9e7a * goreleaser/2.14.0 package update Export: 06678cc * goreleaser: use GOTOOLCHAIN=local+auto Export: cbbde26 * sops/3.12.1 package update Export: 4119d9d * sops: fix expected-commit in test git-checkout The test git-checkout had a stale expected-commit from a previous version. Updated to match the build pipeline commit for v3.12.1. Export: 68cd22b * confluent-kafka/8.3.0.266 package update (wolfi-dev#31436) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: fad3d31 * confluent-kafka/8.3.0.267 package update (wolfi-dev#31473) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: f9a6f79 * argo-cd-3.3/3.3.2 package update (wolfi-dev#31479) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 0481601 * gawk/5.4.0 package update (wolfi-dev#31491) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: bd92ffb * confluent-kafka/8.3.0.268 package update (wolfi-dev#31499) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: b481281 * rdfind/1.8.0 package update (wolfi-dev#31503) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 665b87a * vim/9.2.0044 package update (wolfi-dev#31506) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 8257504 * imagemagick-7/7.1.2.15 package update (wolfi-dev#31554) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: d81fadb * cpp-httplib/0.34.0 package update (wolfi-dev#31564) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: e1fd7c1 * vim/9.2.0045 package update (wolfi-dev#31568) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 098c9b8 * atmoz-sftp/0.0.0_git20260223 package update (wolfi-dev#31576) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: c09bff0 * parallel/20260222 package update (wolfi-dev#31570) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: f2fca20 * jupyter-docker-stacks/0.0.0_git20260223 package update (wolfi-dev#31585) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: d9598c1 * rancher-partner-charts/0_git20260223 package update (wolfi-dev#31589) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: e3226cd * apko/1.1.10 package update (wolfi-dev#31590) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 87d25c3 * wolfictl/0.39.2 package update (wolfi-dev#31591) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: f76458a * melange/0.43.2 package update (wolfi-dev#31600) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 0890b39 * yam/0.2.50 package update (wolfi-dev#31603) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 2ac1a76 * 7 packages (a-g): add test/tw/staticpackage to -static subpackages (wolfi-dev#31592) Part of a series split for faster CI builds from PR wolfi-dev#31144. Co-authored-by: Dustin Kirkland <dustin.kirkland@chainguard.dev> Export: 73ee737 * 7 packages (g-m): add test/tw/staticpackage to -static subpackages (wolfi-dev#31593) Part of a series split for faster CI builds from PR wolfi-dev#31144. Co-authored-by: Dustin Kirkland <dustin.kirkland@chainguard.dev> Export: 99c85d4 * 7 packages (n-s): add test/tw/staticpackage to -static subpackages (wolfi-dev#31594) Part of a series split for faster CI builds from PR wolfi-dev#31144. Co-authored-by: Dustin Kirkland <dustin.kirkland@chainguard.dev> Export: b57a87a * 7 packages (s-z): add test/tw/staticpackage to -static subpackages (wolfi-dev#31595) Part of a series split for faster CI builds from PR wolfi-dev#31144. Co-authored-by: Dustin Kirkland <dustin.kirkland@chainguard.dev> Export: 8c86bb2 * py3-astroid/4.1.1 package update (wolfi-dev#31607) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 1c6b190 * py3-scipy/1.17.1 package update (wolfi-dev#31622) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 922d284 * Merge pull request wolfi-dev#30575 from dustinkirkland/add-tests/static-subpackages 72 packages: add test/tw/staticpackage to -static subpackages Export: 34409fe * rust-analyzer/20260223 package update (wolfi-dev#31694) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 007b6ab * Merge branch 'main' into add-tests/shell-completion-check Signed-off-by: Dustin Kirkland <kirkland@chainguard.dev> Export: e0e04e8 * Update openrc.yaml Signed-off-by: Dustin Kirkland <dustin.kirkland@gmail.com> Export: 99ab2a2 * Update minify.yaml Signed-off-by: Dustin Kirkland <dustin.kirkland@gmail.com> Export: f55933b * perl-clone/0.48.06 package update (wolfi-dev#31705) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: d2cd9dd * Merge pull request wolfi-dev#30713 from chainguard-dev/staging-update-bot/os/flux-helm-controller.yaml flux-helm-controller/1.5.0 package update Export: efe4249 * Merge pull request wolfi-dev#30707 from chainguard-dev/staging-update-bot/os/valijson.yaml valijson/1.1.0 package update Export: 1c6869b * Merge pull request wolfi-dev#30743 from chainguard-dev/staging-update-bot/os/cass-operator.yaml cass-operator/1.29.0 package update Export: 971b297 * py3-mpmath/1.4.0 package update (wolfi-dev#31755) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 40d7d07 * chore(os): move ceph-20 back to Wolfi OS The ceph-20.2 version stream was created in error; remove this stream and move the ceph-20 stream back to Wolfi OS. Withdraw APK's created by this errant version stream. Export: 7d9bd68 * Merge pull request wolfi-dev#30801 from chainguard-dev/staging-update-bot/os/cert-manager-csi-driver.yaml cert-manager-csi-driver/0.12.1 package update Export: 888a8b5 * Merge pull request wolfi-dev#30829 from chainguard-dev/staging-update-bot/os/py3-peewee.yaml py3-peewee/4.0.0 package update Export: 420a1a0 * Merge pull request wolfi-dev#30956 from chainguard-dev/cve-remediation/os/ipfs-cluster.yaml ipfs-cluster 1.1.5-r4: remediate GHSA-2f2x-8mwp-p2gc Export: ee2efd7 * renovate/43.31.2 package update (wolfi-dev#31795) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: cf0ab3c * brew/5.0.15 package update (wolfi-dev#31801) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 8385d1f * victoriametrics-operator/0.68.0 package update (wolfi-dev#31808) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: b2880c7 * temporal-docker-builds/0.0_git20260223 package update (wolfi-dev#31820) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 1b30c3f * py3-narwhals/2.17.0 package update (wolfi-dev#31822) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: d3a49a8 * spegel{-fips,}: remediate some CVEs This remediates this: └── 📄 /usr/bin/spegel 📦 github.com/pion/dtls/v3 v3.0.6 (go-module) Medium CVE-2026-26014 GHSA-9f3f-wv7r-qc8r fixed in 3.0.11 📦 github.com/quic-go/webtransport-go v0.9.0 (go-module) Medium CVE-2026-21438 GHSA-2f2x-8mwp-p2gc fixed in 0.10.0 Medium CVE-2026-21434 GHSA-g6x7-jq8p-6q9q fixed in 0.10.0 Medium CVE-2026-21435 GHSA-px4r-g4p3-hhqv fixed in 0.10.0 Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero@chainguard.dev> Export: 1509189 * sbt/1.12.4 package update (wolfi-dev#31837) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: af3ed64 * Merge pull request wolfi-dev#31836 from aborrero/arturo-15936-spegel-fips-remed spegel{-fips,}: remediate some CVEs Export: 1ad36af * loki-3.6/3.6.7 package update (wolfi-dev#31851) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 2fe5d85 * Merge pull request wolfi-dev#31771 from javacruft/chore/move-ceph-20-back-to-os chore(os): move ceph-20 back to Wolfi OS Export: 18abc5e * libjxl/0.10.4_git20260223 package update (wolfi-dev#31859) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: aebce25 * postgis: explicit dependency on libpq Previous to this patch, the dependency was implicit (autogenerated) and could be satisfied by different libpq versions, resulting in package dependency conflicts at install time. Make the dependency explicit. While at it, refresh package tests. Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero@chainguard.dev> Export: 0ea7622 * Merge pull request wolfi-dev#31414 from chainguard-dev/staging-update-bot/os/sops.yaml sops/3.12.1 package update Export: 17f1169 * Merge pull request wolfi-dev#29957 from chainguard-dev/staging-update-bot/os/rstudio.yaml rstudio/2026.01.1_p403 package update Export: cc381a4 * Merge pull request wolfi-dev#30900 from chainguard-dev/staging-update-bot/os/linkerd-await.yaml linkerd-await/0.3.2 package update Export: 47039c4 * Merge pull request wolfi-dev#31225 from chainguard-dev/staging-update-bot/os/goreleaser.yaml goreleaser/2.14.0 package update Export: c758b92 * Merge pull request wolfi-dev#31862 from aborrero/arturo-7620-postgis-explicit-d postgis: explicit dependency on libpq Export: 948b9fc * Merge pull request wolfi-dev#31143 from dustinkirkland/add-tests/static-subpackages-llvm 6 packages: add test/tw/staticpackage to llvm -static subpackages Export: c6a5a04 * Merge pull request wolfi-dev#30844 from dustinkirkland/add-tests/xml-font-packages fontsproto, font-xproto: add XML validation tests via new test/tw/xml-syntax-check pipeline Export: 6d730ba * Merge pull request wolfi-dev#30920 from dustinkirkland/add-tests/shell-completion-check test: add shell-syntax-check pipeline (bash/zsh/fish/sh) + 30 subpackages Export: 3f64e76 * renovate/43.31.3 package update (wolfi-dev#31878) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: ad1dbb7 * neuvector-scanner/4.081 package update (wolfi-dev#31880) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: 8e2d83c * nfs-ganesha/9.6 package update (wolfi-dev#31893) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: a0a3e8f * fluent-bit-plugin-loki/3.6.7 package update (wolfi-dev#31895) Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Export: d4f6400 --------- Signed-off-by: ndinhbang <47777358+ndinhbang@users.noreply.github.com> Co-authored-by: octo-sts[bot] <157150467+octo-sts[bot]@users.noreply.github.com> Co-authored-by: Kyle Steere <kbsteere@users.noreply.github.com> Co-authored-by: Kevin W Monroe <kevin.monroe@chainguard.dev> Co-authored-by: version-stream-reconciler <version-stream-reconciler@chainguard.dev> Co-authored-by: Sergio Durigan Junior <sergiodj@chainguard.dev> Co-authored-by: Colin Watson <colin.watson@chainguard.dev> Co-authored-by: Daniel Watkins <daniel.watkins@chainguard.dev> Co-authored-by: Brian Carey <brian.carey@chainguard.dev> Co-authored-by: Luca Di Maio <luca.dimaio1@gmail.com> Co-authored-by: Amber Arcadia <amber.arcadia@chainguard.dev> Co-authored-by: Dustin Kirkland <dustin.kirkland@gmail.com> Co-authored-by: Dustin Kirkland <dustin.kirkland@chainguard.dev> Co-authored-by: staging-update-bot <staging-update-bot@chainguard.dev> Co-authored-by: Dustin Kirkland <kirkland@chainguard.dev> Co-authored-by: shAdE424 <azimjon.ulmasov@chainguard.dev> Co-authored-by: Max Allan <max.allan@chainguard.dev> Co-authored-by: Joshua Powers <joshua.powers@chainguard.dev> Co-authored-by: cve-remediation <cve-remediation@chainguard.dev> Co-authored-by: Dimitri John Ledkov <dimitri.ledkov@chainguard.dev> Co-authored-by: Dimitri John Ledkov <19779+xnox@users.noreply.github.com> Co-authored-by: Batuhan Apaydin <16693043+developer-guy@users.noreply.github.com> Co-authored-by: Dentrax <furkan.turkal@chainguard.dev> Co-authored-by: Debasish Biswas <debasishbsws.dev@gmail.com> Co-authored-by: James Page <james.page@chainguard.dev> Co-authored-by: Arturo Borrero Gonzalez <arturo.borrero@chainguard.dev>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.