Skip to content

Commit 8643162

Browse files
authored
Merge branch 'main' into wolfictl-e72b90eb-bec2-4780-b0e6-a09da3d532b5
2 parents b2b66c6 + 731ac6e commit 8643162

File tree

573 files changed

+2584
-2023
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

573 files changed

+2584
-2023
lines changed

.github/chainguard/lifecycle-eol-mover.sts.yaml

+2-3
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,5 @@ issuer: https://accounts.google.com
55
subject: "105314035764875766195"
66

77
permissions:
8-
contents: write
9-
pull_requests: write
10-
workflows: write
8+
contents: write # to push to branches of the repo
9+
pull_requests: write # to open and modify PRs

abseil-cpp.yaml

+3-3
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,8 @@
66
# to this file from the OS team.
77
package:
88
name: abseil-cpp
9-
version: "20250127.0" # On update, please check if -fdelete-null-pointer-checks is still required
10-
epoch: 2
9+
version: "20250127.1" # On update, please check if -fdelete-null-pointer-checks is still required
10+
epoch: 0
1111
description: Abseil Common Libraries (C++)
1212
copyright:
1313
- license: Apache-2.0
@@ -32,7 +32,7 @@ pipeline:
3232
with:
3333
repository: https://github.com/abseil/abseil-cpp
3434
tag: ${{package.version}}
35-
expected-commit: 9ac7062b1860d895fb5a8cbf58c3e9ef8f674b5f
35+
expected-commit: d9e4955c65cd4367dd6bf46f4ccb8cd3d100540b
3636

3737
- runs: |
3838
cmake -B build -G Ninja \

amazon-cloudwatch-agent.yaml

+2-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
package:
22
name: amazon-cloudwatch-agent
33
version: "1.300053.1"
4-
epoch: 0
4+
epoch: 1
55
description: CloudWatch Agent enables you to collect and export host-level metrics and logs on instances running Linux or Windows server.
66
copyright:
77
- license: Apache-2.0
@@ -27,6 +27,7 @@ pipeline:
2727
golang.org/x/crypto@v0.35.0
2828
golang.org/x/oauth2@v0.27.0
2929
golang.org/x/net@v0.36.0
30+
github.com/expr-lang/expr@v1.17.0
3031
3132
- uses: go/build
3233
with:

apache-activemq-artemis.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
package:
22
name: apache-activemq-artemis
33
version: "2.40.0"
4-
epoch: 0
4+
epoch: 1
55
description: ActiveMQ Artemis is the next generation message broker from Apache ActiveMQ.
66
copyright:
77
- license: Apache-2.0
@@ -41,7 +41,7 @@ pipeline:
4141
with:
4242
repository: https://github.com/apache/activemq-artemis
4343
tag: ${{package.version}}
44-
expected-commit: 665d2763c3a3a063fccc62dc68a30576d24958c6
44+
expected-commit: 2c3903ff71de7ecc6830d5f051dfc94d6df9b187
4545

4646
- uses: maven/pombump
4747

apicurio-registry.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
package:
22
name: apicurio-registry
33
version: 3.0.6
4-
epoch: 1
4+
epoch: 2
55
description: An API/Schema registry - stores APIs and Schemas
66
copyright:
77
- license: Apache-2.0

apicurio-registry/pombump-deps.yaml

+15-15
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
11
patches:
2-
- groupId: io.netty
3-
artifactId: netty-handler
4-
version: 4.1.118.Final
5-
- groupId: io.netty
6-
artifactId: netty-common
7-
version: 4.1.118.Final
8-
- groupId: org.apache.kafka
9-
artifactId: kafka-clients
10-
version: 3.7.1
11-
- groupId: net.minidev
12-
artifactId: json-smart
13-
version: 2.5.2
14-
- groupId: io.quarkus.http
15-
artifactId: quarkus-http-core
16-
version: 5.3.4
2+
- groupId: io.netty
3+
artifactId: netty-handler
4+
version: 4.1.118.Final
5+
- groupId: io.netty
6+
artifactId: netty-common
7+
version: 4.1.118.Final
8+
- groupId: org.apache.kafka
9+
artifactId: kafka-clients
10+
version: 3.7.1
11+
- groupId: net.minidev
12+
artifactId: json-smart
13+
version: 2.5.2
14+
- groupId: io.quarkus.http
15+
artifactId: quarkus-http-core
16+
version: 5.3.4
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
properties:
2+
- property: quarkus.version
3+
value: "3.15.4"

apk-tools.yaml

+6-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
package:
22
name: apk-tools
33
version: "2.14.10"
4-
epoch: 0
4+
epoch: 2
55
description: "apk-tools (Wolfi package manager)"
66
copyright:
77
- license: GPL-2.0-only
@@ -31,6 +31,9 @@ pipeline:
3131
tag: v${{package.version}}
3232
expected-commit: 9d074efdc12bc41b5d24190595a5269a770e852a
3333

34+
- runs: |
35+
git am 292.patch
36+
3437
- runs: |
3538
sed -i -e 's:-Werror::' Make.rules
3639
echo "FULL_VERSION=${{package.version}}-r${{package.epoch}}" > config.mk
@@ -105,7 +108,9 @@ test:
105108
mkdir -p packages/aarch64/
106109
wget https://raw.githubusercontent.com/chainguard-dev/apko/71f1961fde53a10c5bd40b80dd4c00a9250dd9f7/pkg/apk/apk/testdata/rsa256-signed/APKINDEX.tar.gz -O packages/aarch64/APKINDEX.tar.gz
107110
apk --arch aarch64 --repository ./packages/ info --all alpine-baselayout
111+
apk update
108112
apk --version
113+
apk info apk-tools
109114
- uses: test/ldd-check
110115
with:
111116
packages: ${{package.name}}

apk-tools/292.patch

+106
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,106 @@
1+
From https://gitlab.alpinelinux.org/alpine/apk-tools/-/merge_requests/292.patch
2+
From 716fe84f69137b59dd12b3b4fa90710e5f4ed911 Mon Sep 17 00:00:00 2001
3+
From: Justin Vreeland <vreeland.justin@gmail.com>
4+
Date: Tue, 18 Mar 2025 10:25:33 -0700
5+
Subject: [PATCH] db: Explicitly clean st on fstatat failure to workaround
6+
rosetta2
7+
8+
We've discovered an issue with in apk when using Rosetta2 with wolfi that was surfaced
9+
by f3f239a: apk, db: rework dbopts cache_max_age default handling. With the new
10+
settings apk now hits an fstatat conditional where it didn't before. As far as I can tell
11+
this failure is expected and shouldn't be a problem. It only is because the code
12+
continues to rely out the buffer that was passed in to contain clean
13+
values. On Rosetta2 with wolfi the st buffer is no longer clean out after the call to fstatat.
14+
15+
This issue only occurs if cache_max_age is positive, and `/var/cache/apk`
16+
is empty. This issue can be seen below:
17+
18+
```
19+
a549fa77b74f:/apk-tools# apk --help | head -1
20+
apk-tools 2.14.10, compiled for x86_64.
21+
a549fa77b74f:/apk-tools# apk update
22+
fetch https://packages.wolfi.dev/os/x86_64/APKINDEX.tar.gz
23+
WARNING: opening from cache https://packages.wolfi.dev/os: No such file or directory
24+
2 unavailable, 0 stale; 83 distinct packages available
25+
26+
a549fa77b74f:/apk-tools# apk update --cache-max-age 0
27+
fetch https://packages.wolfi.dev/os/x86_64/APKINDEX.tar.gz
28+
[https://packages.wolfi.dev/os]
29+
OK: 144415 distinct packages available
30+
31+
a549fa77b74f:/apk-tools# apk update
32+
[https://packages.wolfi.dev/os]
33+
OK: 144415 distinct packages available
34+
35+
a549fa77b74f:/apk-tools# apk update --cache-max-age 1
36+
[https://packages.wolfi.dev/os]
37+
OK: 144415 distinct packages available
38+
39+
a549fa77b74f:/apk-tools# rm /var/cache/apk/*
40+
41+
a549fa77b74f:/apk-tools# apk update
42+
fetch https://packages.wolfi.dev/os/x86_64/APKINDEX.tar.gz
43+
WARNING: opening from cache https://packages.wolfi.dev/os: No such file or directory
44+
2 unavailable, 0 stale; 83 distinct packages available
45+
```
46+
47+
Some debug output with Rosetta2
48+
49+
```
50+
a549fa77b74f:/apk-tools# LD_PRELOAD=`pwd`/src/libapk.so ./src/apk update --cache-max-age 1
51+
st_mtime pre fstat: 0
52+
cache_max_age=60
53+
ferr: -1, tmperr: 2
54+
st_mtime post fstat: 140737472955232
55+
fetch https://packages.wolfi.dev/os/x86_64/APKINDEX.tar.gz
56+
WARNING: opening from cache https://packages.wolfi.dev/os: No such file or directory
57+
2 unavailable, 0 stale; 83 distinct packages available
58+
a549fa77b74f:/apk-tools# git diff > /test.patch
59+
a549fa77b74f:/apk-tools# ps aux | grep rosetta
60+
1 root 0:02 {sh} /run/rosetta/rosetta /bin/sh /bin/sh -l
61+
15816 root 0:00 {grep} /run/rosetta/rosetta /usr/bin/grep grep rosetta
62+
```
63+
64+
Some debug output without Rosetta2
65+
66+
```
67+
/apk-tools # LD_PRELOAD=`pwd`/src/libapk.so ./src/apk update --cache-max-age 1
68+
st_mtime pre fstat: 0
69+
cache_max_age=60
70+
ferr: -1, tmperr: 2
71+
st_mtime post fstat: 0
72+
fetch https://packages.wolfi.dev/os/x86_64/APKINDEX.tar.gz
73+
[https://packages.wolfi.dev/os]
74+
OK: 144391 distinct packages available
75+
/apk-tools # ps aux | grep rosetta
76+
2438 root 0:00 grep rosetta
77+
```
78+
79+
I cannot reproduce this with Alpine. In fact the st buffer remains clean
80+
with Alpine. I believe the real issue is with rosetta2 & glibc not
81+
actually apk but it seems reasonable not to rely on the buffer from
82+
a failed system call as a solution for now.
83+
---
84+
src/database.c | 6 +++++-
85+
1 file changed, 5 insertions(+), 1 deletion(-)
86+
87+
diff --git a/src/database.c b/src/database.c
88+
index dc5e4fd4..b7353221 100644
89+
--- a/src/database.c
90+
+++ b/src/database.c
91+
@@ -654,7 +654,11 @@ int apk_cache_download(struct apk_database *db, struct apk_repository *repo,
92+
if (r < 0) return r;
93+
94+
if (autoupdate && db->cache_max_age > 0 && !(apk_force & APK_FORCE_REFRESH)) {
95+
- if (fstatat(db->cache_fd, cacheitem, &st, 0) == 0 &&
96+
+ int ferr = fstatat(db->cache_fd, cacheitem, &st, 0);
97+
+ if (ferr == -1) {
98+
+ memset(&st, 0, sizeof(struct stat));
99+
+ }
100+
+ if (ferr == 0 &&
101+
now - st.st_mtime <= db->cache_max_age)
102+
return -EALREADY;
103+
}
104+
--
105+
GitLab
106+

argo-cd-2.14.yaml

+2-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
package:
22
name: argo-cd-2.14
33
version: "2.14.5"
4-
epoch: 3
4+
epoch: 4
55
description: Declarative continuous deployment for Kubernetes.
66
copyright:
77
- license: Apache-2.0
@@ -35,6 +35,7 @@ pipeline:
3535
golang.org/x/oauth2@v0.27.0
3636
golang.org/x/crypto@v0.35.0
3737
golang.org/x/net@v0.36.0
38+
github.com/expr-lang/expr@v1.17.0
3839
3940
- runs: |
4041
cd ui

argo-workflows.yaml

+2-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
package:
22
name: argo-workflows
33
version: "3.6.5"
4-
epoch: 1
4+
epoch: 2
55
description: Workflow engine for Kubernetes.
66
copyright:
77
- license: Apache-2.0
@@ -45,6 +45,7 @@ pipeline:
4545
with:
4646
deps: |-
4747
golang.org/x/net@v0.36.0
48+
github.com/expr-lang/expr@v1.17.0
4849
4950
- uses: go/build
5051
with:

aws-c-auth.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
package:
22
name: aws-c-auth
3-
version: "0.8.6"
3+
version: "0.8.7"
44
epoch: 0
55
description: "C99 library implementation of AWS client-side authentication: standard credentials providers and signing"
66
copyright:
@@ -26,7 +26,7 @@ environment:
2626
pipeline:
2727
- uses: git-checkout
2828
with:
29-
expected-commit: 01dd06acd2b8865a4a6bc232380ee69a042af47d
29+
expected-commit: e0bd58d172cdc78d62eff5728437790d06fcce50
3030
repository: https://github.com/awslabs/aws-c-auth
3131
tag: v${{package.version}}
3232

aws-c-common.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
package:
22
name: aws-c-common
3-
version: "0.12.0"
3+
version: "0.12.1"
44
epoch: 0
55
description: Core c99 package for AWS SDK for C including cross-platform primitives, configuration, data structures, and error handling
66
copyright:
@@ -18,7 +18,7 @@ environment:
1818
pipeline:
1919
- uses: git-checkout
2020
with:
21-
expected-commit: 7fb0071ab88182bffcc18a4a09bdb4dd2a5751d8
21+
expected-commit: d80b00560f0ebb441538b3ab40192a242afeaa80
2222
repository: https://github.com/awslabs/aws-c-common
2323
tag: v${{package.version}}
2424

aws-c-event-stream.yaml

+1-5
Original file line numberDiff line numberDiff line change
@@ -54,14 +54,10 @@ subpackages:
5454
test:
5555
pipeline:
5656
- uses: test/tw/ldd-check
57-
with:
58-
packages: aws-c-event-stream-dev
5957

6058
test:
6159
pipeline:
62-
- uses: test/ldd-check
63-
with:
64-
packages: ${{package.name}}
60+
- uses: test/tw/ldd-check
6561

6662
update:
6763
enabled: true

aws-c-http.yaml

+1-5
Original file line numberDiff line numberDiff line change
@@ -53,14 +53,10 @@ subpackages:
5353
test:
5454
pipeline:
5555
- uses: test/tw/ldd-check
56-
with:
57-
packages: aws-c-http-dev
5856

5957
test:
6058
pipeline:
61-
- uses: test/ldd-check
62-
with:
63-
packages: ${{package.name}}
59+
- uses: test/tw/ldd-check
6460

6561
update:
6662
enabled: true

aws-c-io.yaml

-2
Original file line numberDiff line numberDiff line change
@@ -80,8 +80,6 @@ test:
8080
echo "Verifying aws-c-io installation..."
8181
find /usr /usr/local -name 'libaws-c-io.so' || (echo "aws-c-io library not found!" && exit 1)
8282
- uses: test/tw/ldd-check
83-
with:
84-
packages: aws-c-io
8583
- name: "Compile and Run aws-c-io Test Program"
8684
runs: |
8785
echo "Testing aws-c-io functionality..."

aws-c-mqtt.yaml

+1-5
Original file line numberDiff line numberDiff line change
@@ -55,8 +55,6 @@ subpackages:
5555
test:
5656
pipeline:
5757
- uses: test/tw/ldd-check
58-
with:
59-
packages: aws-c-mqtt-dev
6058

6159
update:
6260
enabled: true
@@ -77,9 +75,7 @@ test:
7775
- gcc
7876
- aws-c-mqtt-dev
7977
pipeline:
80-
- uses: test/ldd-check
81-
with:
82-
packages: ${{package.name}}
78+
- uses: test/tw/ldd-check
8379
- name: "Compile simple MQTT test program"
8480
runs: |
8581
cat << 'EOF' > test.c

aws-c-s3.yaml

+1-5
Original file line numberDiff line numberDiff line change
@@ -66,14 +66,10 @@ subpackages:
6666
test:
6767
pipeline:
6868
- uses: test/tw/ldd-check
69-
with:
70-
packages: aws-c-s3-dev
7169

7270
test:
7371
pipeline:
74-
- uses: test/ldd-check
75-
with:
76-
packages: ${{package.name}}
72+
- uses: test/tw/ldd-check
7773

7874
update:
7975
enabled: true

0 commit comments

Comments
 (0)