Merge branch 'main' into wolfictl-39bb6865-17e1-4445-b90d-f8c08b57a819

wolfi-dev · Dec 23, 2024 · 097c145 · 097c145
2 parents f1bac35 + b4beeff
commit 097c145
Show file tree

Hide file tree

Showing 85 changed files with 647 additions and 343 deletions.
diff --git a/apk-tools.yaml b/apk-tools.yaml
@@ -79,6 +79,9 @@ test:
         wget https://raw.githubusercontent.com/chainguard-dev/apko/71f1961fde53a10c5bd40b80dd4c00a9250dd9f7/pkg/apk/apk/testdata/rsa256-signed/APKINDEX.tar.gz -O packages/aarch64/APKINDEX.tar.gz
         apk --arch aarch64 --repository ./packages/ info --all alpine-baselayout
         apk --version
+    - uses: test/ldd-check
+      with:
+        files: /lib/libapk.so.2.14.0
 
 update:
   enabled: false

diff --git a/aws-cli-2.yaml b/aws-cli-2.yaml
@@ -2,7 +2,7 @@
 #nolint:documentation
 package:
   name: aws-cli-2
-  version: 2.22.22
+  version: 2.22.23
   epoch: 0
   description: "Universal Command Line Interface for Amazon Web Services (v2)"
   copyright:
@@ -33,7 +33,7 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/aws/aws-cli
-      expected-commit: d1051fc853f830d0b57f65c41965fa02da90062e
+      expected-commit: de43a3e9ba637457f6e8e73e87c42cdef103e916
       tag: ${{package.version}}
 
   - runs: |

diff --git a/brew.yaml b/brew.yaml
@@ -1,6 +1,6 @@
 package:
   name: brew
-  version: 4.4.12
+  version: 4.4.13
   epoch: 0
   description: "The homebrew package manager"
   copyright:
@@ -49,7 +49,7 @@ pipeline:
       repository: https://github.com/Homebrew/brew
       tag: ${{package.version}}
       destination: ./brew
-      expected-commit: 3001afe88112c13b5aafdd92e097680897060881
+      expected-commit: 6ea9df68df4868ce12ea7c51c85b57dce514f2e8
 
   - runs: |
       set -x

diff --git a/btrfs-progs.yaml b/btrfs-progs.yaml
@@ -114,3 +114,12 @@ test:
 
         # Show filesystem info
         btrfs inspect-internal dump-super test.img
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libbtrfs.so.0
+          /usr/lib/libbtrfs.so.0.1
+          /usr/lib/libbtrfs.so.0.1.4
+          /usr/lib/libbtrfsutil.so.1
+          /usr/lib/libbtrfsutil.so.1.3
+          /usr/lib/libbtrfsutil.so.1.3.2
diff --git a/cloudnative-pg.yaml b/cloudnative-pg.yaml
@@ -1,7 +1,7 @@
 package:
   name: cloudnative-pg
-  version: 1.24.1
-  epoch: 2
+  version: 1.25.0
+  epoch: 0
   description: CloudNativePG is a comprehensive platform designed to seamlessly manage PostgreSQL databases
   copyright:
     - license: Apache-2.0
@@ -11,15 +11,15 @@ pipeline:
     with:
       repository: https://github.com/cloudnative-pg/cloudnative-pg
       tag: v${{package.version}}
-      expected-commit: 3f96930d984ff7e795e013160afbc6d3012f8718
+      expected-commit: bad5a251642655399eca392abf5d981668fbd8cc
 
   - name: Generate controller code
     runs: |
       make generate fmt vet
 
   - uses: go/bump
     with:
-      deps: golang.org/x/crypto@v0.31.0 golang.org/x/net@v0.33.0
+      deps: golang.org/x/net@v0.33.0
 
   - uses: go/build
     with:

diff --git a/clusterctl.yaml b/clusterctl.yaml
@@ -1,6 +1,6 @@
 package:
   name: clusterctl
-  version: 1.9.2
+  version: 1.9.3
   epoch: 0
   description: A command line tool to manage clusters created by cluster API
   copyright:
@@ -23,11 +23,7 @@ pipeline:
     with:
       repository: https://github.com/kubernetes-sigs/cluster-api
       tag: v${{package.version}}
-      expected-commit: 05ddeacc99fec22faf29b422f61e8efdb710c071
-
-  - uses: go/bump
-    with:
-      deps: golang.org/x/net@v0.33.0
+      expected-commit: cd279dd0c24c5472db45255e3805ae16c61e1432
 
   - uses: go/build
     with:

diff --git a/cyrus-sasl.yaml b/cyrus-sasl.yaml
@@ -112,3 +112,41 @@ test:
         saslpasswd2 --version
         saslauthd --help
         sasldblistusers2 help
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libsasl2.so.3
+          /usr/lib/libsasl2.so.3.0.0
+          /usr/lib/sasl2/libanonymous.so
+          /usr/lib/sasl2/libanonymous.so.3
+          /usr/lib/sasl2/libanonymous.so.3.0.0
+          /usr/lib/sasl2/libcrammd5.so
+          /usr/lib/sasl2/libcrammd5.so.3
+          /usr/lib/sasl2/libcrammd5.so.3.0.0
+          /usr/lib/sasl2/libdigestmd5.so
+          /usr/lib/sasl2/libdigestmd5.so.3
+          /usr/lib/sasl2/libdigestmd5.so.3.0.0
+          /usr/lib/sasl2/libgs2.so
+          /usr/lib/sasl2/libgs2.so.3
+          /usr/lib/sasl2/libgs2.so.3.0.0
+          /usr/lib/sasl2/libgssapiv2.so
+          /usr/lib/sasl2/libgssapiv2.so.3
+          /usr/lib/sasl2/libgssapiv2.so.3.0.0
+          /usr/lib/sasl2/liblogin.so
+          /usr/lib/sasl2/liblogin.so.3
+          /usr/lib/sasl2/liblogin.so.3.0.0
+          /usr/lib/sasl2/libntlm.so
+          /usr/lib/sasl2/libntlm.so.3
+          /usr/lib/sasl2/libntlm.so.3.0.0
+          /usr/lib/sasl2/libplain.so
+          /usr/lib/sasl2/libplain.so.3
+          /usr/lib/sasl2/libplain.so.3.0.0
+          /usr/lib/sasl2/libsasldb.so
+          /usr/lib/sasl2/libsasldb.so.3
+          /usr/lib/sasl2/libsasldb.so.3.0.0
+          /usr/lib/sasl2/libscram.so
+          /usr/lib/sasl2/libscram.so.3
+          /usr/lib/sasl2/libscram.so.3.0.0
+          /usr/lib/sasl2/libsql.so
+          /usr/lib/sasl2/libsql.so.3
+          /usr/lib/sasl2/libsql.so.3.0.0
diff --git a/envoy-ratelimit.yaml b/envoy-ratelimit.yaml
@@ -2,8 +2,8 @@
 package:
   name: envoy-ratelimit
   # This project doesn't do releases and everything is commit based.
-  version: 0.0.0_git20241216
-  epoch: 1
+  version: 0.0.0_git20241223
+  epoch: 0
   description: Go/gRPC service designed to enable generic rate limit scenarios from different types of applications.
   copyright:
     - license: Apache-2.0

diff --git a/external-secrets-operator.yaml b/external-secrets-operator.yaml
@@ -1,7 +1,7 @@
 package:
   name: external-secrets-operator
-  version: 0.11.0
-  epoch: 2
+  version: 0.12.1
+  epoch: 0
   description: Integrate external secret management systems with Kubernetes
   copyright:
     - license: Apache-2.0
@@ -11,11 +11,7 @@ pipeline:
     with:
       repository: https://github.com/external-secrets/external-secrets
       tag: v${{package.version}}
-      expected-commit: 0656bf33c5bde3b54afe6c5d21e246e58fb19be7
-
-  - uses: go/bump
-    with:
-      deps: golang.org/x/crypto@v0.31.0 golang.org/x/net@v0.33.0
+      expected-commit: 21205d3a093f9081ec79a7b0d1a8703363e95f2f
 
   - uses: go/build
     with:

diff --git a/frr-10.2.yaml b/frr-10.2.yaml
@@ -1,7 +1,7 @@
 package:
   name: frr-10.2
-  version: "10.2"
-  epoch: 1
+  version: 10.2.1
+  epoch: 0
   description: The FRRouting Protocol Suite
   copyright:
     - license: GPL-2.0-only
@@ -44,7 +44,7 @@ environment:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: 22746b8d59e6e6cb77ced61bc9e0cff2ead227b5
+      expected-commit: 5f0beaa0fdd00b7a60c1765067d1b6fa65ce96c0
       repository: https://github.com/FRRouting/frr
       tag: frr-${{package.version}}
 

diff --git a/gcc.yaml b/gcc.yaml
@@ -350,6 +350,39 @@ test:
     - uses: test/compiler-hardening-check
       with:
         cc: gcc
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/gcc/x86_64-pc-linux-gnu/14/plugin/libcc1plugin.so
+          /usr/lib/gcc/x86_64-pc-linux-gnu/14/plugin/libcc1plugin.so.0
+          /usr/lib/gcc/x86_64-pc-linux-gnu/14/plugin/libcc1plugin.so.0.0.0
+          /usr/lib/gcc/x86_64-pc-linux-gnu/14/plugin/libcp1plugin.so
+          /usr/lib/gcc/x86_64-pc-linux-gnu/14/plugin/libcp1plugin.so.0
+          /usr/lib/gcc/x86_64-pc-linux-gnu/14/plugin/libcp1plugin.so.0.0.0
+          /usr/lib/libasan.so
+          /usr/lib/libasan.so.8
+          /usr/lib/libasan.so.8.0.0
+          /usr/lib/libatomic.so
+          /usr/lib/libcc1.so
+          /usr/lib/libcc1.so.0
+          /usr/lib/libcc1.so.0.0.0
+          /usr/lib/libgomp.so
+          /usr/lib/libhwasan.so
+          /usr/lib/libhwasan.so.0
+          /usr/lib/libhwasan.so.0.0.0
+          /usr/lib/libitm.so
+          /usr/lib/libitm.so.1
+          /usr/lib/libitm.so.1.0.0
+          /usr/lib/liblsan.so
+          /usr/lib/liblsan.so.0
+          /usr/lib/liblsan.so.0.0.0
+          /usr/lib/libquadmath.so
+          /usr/lib/libtsan.so
+          /usr/lib/libtsan.so.2
+          /usr/lib/libtsan.so.2.0.0
+          /usr/lib/libubsan.so
+          /usr/lib/libubsan.so.1
+          /usr/lib/libubsan.so.1.0.0
 
 update:
   enabled: true

diff --git a/gdbm.yaml b/gdbm.yaml
@@ -58,3 +58,8 @@ test:
         gdbm_dump --help
         gdbm_load --help
         gdbmtool --help
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libgdbm.so.6
+          /usr/lib/libgdbm.so.6.0.0
diff --git a/glibc.yaml b/glibc.yaml
@@ -614,6 +614,26 @@ test:
         ldconfig --help
         ld.so --version
         ld.so --help
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /lib/libBrokenLocale.so.1
+          /lib/libanl.so.1
+          /lib/libc.so.6
+          /lib/libc_malloc_debug.so.0
+          /lib/libdl.so.2
+          /lib/libm.so.6
+          /lib/libmvec.so.1
+          /lib/libnsl.so.1
+          /lib/libnss_compat.so.2
+          /lib/libnss_dns.so.2
+          /lib/libnss_files.so.2
+          /lib/libpthread.so.0
+          /lib/libresolv.so.2
+          /lib/librt.so.1
+          /lib/libthread_db.so.1
+          /lib/libutil.so.1
+          /usr/bin/ld.so
 
 update:
   enabled: true

diff --git a/gmp.yaml b/gmp.yaml
@@ -54,3 +54,13 @@ update:
   enabled: true
   release-monitor:
     identifier: 1186
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libgmp.so.10
+          /usr/lib/libgmp.so.10.5.0
+          /usr/lib/libgmpxx.so.4
+          /usr/lib/libgmpxx.so.4.7.0
diff --git a/hugo-extended.yaml b/hugo-extended.yaml
@@ -1,7 +1,7 @@
 package:
   name: hugo-extended
-  version: 0.140.0
-  epoch: 1
+  version: 0.140.1
+  epoch: 0
   description: The world's fastest framework for building websites.
   copyright:
     - license: Apache-2.0
@@ -22,7 +22,7 @@ pipeline:
     with:
       repository: https://github.com/gohugoio/hugo
       tag: v${{package.version}}
-      expected-commit: 3f35721fb2c75a1f7cc5a7a14400b66e73d4b06e
+      expected-commit: a9b0b95ef402a1cc70bc5386d649d947e2bcc027
 
   - uses: go/bump
     with:

diff --git a/hugo.yaml b/hugo.yaml
@@ -1,7 +1,7 @@
 package:
   name: hugo
-  version: 0.140.0
-  epoch: 1
+  version: 0.140.1
+  epoch: 0
   description: The world's fastest framework for building websites.
   copyright:
     - license: Apache-2.0
@@ -18,7 +18,7 @@ pipeline:
     with:
       repository: https://github.com/gohugoio/hugo
       tag: v${{package.version}}
-      expected-commit: 3f35721fb2c75a1f7cc5a7a14400b66e73d4b06e
+      expected-commit: a9b0b95ef402a1cc70bc5386d649d947e2bcc027
 
   - uses: go/bump
     with:

diff --git a/inih.yaml b/inih.yaml
@@ -62,3 +62,11 @@ update:
     strip-prefix: r
     use-tag: true
     tag-filter: r
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libINIReader.so.0
+          /usr/lib/libinih.so.0
diff --git a/iptables.yaml b/iptables.yaml
@@ -178,3 +178,14 @@ test:
         iptables-nft-restore --help
         iptables-restore --help
         iptables-translate --help
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libip4tc.so.2
+          /usr/lib/libip4tc.so.2.0.0
+          /usr/lib/libip6tc.so.2
+          /usr/lib/libip6tc.so.2.0.0
+          /usr/lib/libipq.so.0
+          /usr/lib/libipq.so.0.0.0
+          /usr/lib/libxtables.so.12
+          /usr/lib/libxtables.so.12.7.0
diff --git a/isl.yaml b/isl.yaml
@@ -60,3 +60,11 @@ update:
   manual: true # originally skipped, let's be careful upgrading this package
   release-monitor:
     identifier: 13286
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libisl.so.23
+          /usr/lib/libisl.so.23.4.0
diff --git a/jq.yaml b/jq.yaml
@@ -76,3 +76,8 @@ test:
     - name: Using jq to transform JSON structure
       runs: |
         echo '[{"id":1,"name":"John"},{"id":2,"name":"Jane"}]' | jq '{users: map({userId: .id, userName: .name})}' | grep -E '"userId": 1|"userId": 2' || exit 1
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libjq.so.1
+          /usr/lib/libjq.so.1.0.4