Merge branch 'main' into automated-moves-by-eol-mover-service

Author: AmberArcadia

aws-cli-2.yaml

@@ -2,7 +2,7 @@
 #nolint:documentation
 package:
   name: aws-cli-2
-  version: "2.31.1"
+  version: "2.31.2"
   epoch: 0
   description: "Universal Command Line Interface for Amazon Web Services (v2)"
   copyright:
@@ -39,7 +39,7 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/aws/aws-cli
-      expected-commit: b9b0cf1cd5446e5c4103af4f187de017fa2ef79f
+      expected-commit: 83f1565b109f43b71d368f5423c136d03194f451
       tag: ${{package.version}}
 
   - uses: patch

backfill-packages.txt

@@ -0,0 +1 @@
+fmt-dev-10.2.1-r0.apk

bats.yaml

@@ -1,7 +1,7 @@
 package:
   name: bats
   version: "1.12.0"
-  epoch: 2
+  epoch: 3
   description: Bash Automated Testing System
   copyright:
     - license: MIT
@@ -29,10 +29,13 @@ pipeline:
       ./install.sh "${{targets.contextdir}}/usr"
       mkdir -p "${{targets.contextdir}}/tmp/"
       cp -r ./docker "${{targets.contextdir}}/tmp/docker"
+      # XXX This has to be exported this way, as ${{targets.contextdir}}
+      # is not expanded in the environment variable declaration section.
+      export BATS_LIBS_DEST_DIR="${{targets.contextdir}}/usr/lib/bats"
       "${{targets.contextdir}}/tmp/docker/install_libs.sh" support 0.3.0
       "${{targets.contextdir}}/tmp/docker/install_libs.sh" file 0.4.0
-      "${{targets.contextdir}}/tmp/docker/install_libs.sh" assert 2.1.0
-      "${{targets.contextdir}}/tmp/docker/install_libs.sh" detik 1.3.1
+      "${{targets.contextdir}}/tmp/docker/install_libs.sh" assert 2.2.0
+      "${{targets.contextdir}}/tmp/docker/install_libs.sh" detik 1.4.0
       find "${{targets.contextdir}}" -type f -perm /2000 -exec chmod g-s {} \;
       rm -rf "${{targets.contextdir}}/tmp/"
 
@@ -95,6 +98,18 @@ test:
         cat << 'EOF' > /tmp/inline_test.bats
         #!/usr/bin/env bats
 
+        # ensure the included modules can be loaded
+        bats_load_library bats-support
+        bats_load_library bats-assert
+        bats_load_library bats-file
+        # bats-detik doesn't include a load.bats
+        load "/usr/lib/bats/bats-detik/detik"
+
+        # test that the bats-assert (and bats-support) libs work
+        @test 'assert_equal()' {
+          assert_equal 'have' 'have'
+        }
+
         load_file() {
           source "/tmp/example.sh"
         }

bom.yaml

@@ -1,6 +1,6 @@
 package:
   name: bom
-  version: "0.7.0"
+  version: "0.7.1"
   epoch: 0 # CVE-2025-47910
   description: A utility to generate SPDX-compliant Bill of Materials manifests
   copyright:
@@ -18,7 +18,7 @@ pipeline:
     with:
       repository: https://github.com/kubernetes-sigs/bom
       tag: v${{package.version}}
-      expected-commit: f93d90e22cd5e76eb9407fc3eb038ede6149025e
+      expected-commit: 1ab6284ac5e118267414f2ac3874bb08a701e9ad
 
   - uses: go/build
     with:

configurable-http-proxy.yaml

@@ -1,7 +1,7 @@
 package:
   name: configurable-http-proxy
-  version: "5.0.1"
-  epoch: 1
+  version: "5.1.0"
+  epoch: 0
   description: "HTTP parser written against llparse"
   copyright:
     - license: BSD-3-Clause
@@ -22,7 +22,7 @@ environment:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: d0256b228558a186e3608c00b4364fba9f25831a
+      expected-commit: 8f989e5cc030248807e4ca6c1d1fbc0a6f59537f
       repository: https://github.com/jupyterhub/configurable-http-proxy
       tag: ${{package.version}}
 

confluent-kafka.yaml

@@ -8,7 +8,7 @@ package:
   # with the `version:` field.
   # 2. Created a new variable `mangled-package-version` to append `-ccs` to the
   # version.
-  version: "8.2.0.273"
+  version: "8.2.0.279"
   epoch: 0
   description: Community edition of Confluent Kafka.
   copyright:
@@ -46,7 +46,7 @@ var-transforms:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: dc4f23376c01db5577a43c74ec8777771d266478
+      expected-commit: de757b0153794bde4392f02050854b363c57ea4d
       repository: https://github.com/confluentinc/kafka
       tag: v${{vars.mangled-package-version}}
 

ddp-tool.yaml

@@ -1,7 +1,7 @@
 #nolint:valid-pipeline-git-checkout-commit,valid-pipeline-git-checkout-tag
 package:
   name: ddp-tool
-  version: "1.0.34.0_git20250925"
+  version: "1.0.34.0_git20250926"
   epoch: 0
   description: Intel Dynamic Device Personalization Tool
   copyright:

dkron.yaml

@@ -1,6 +1,6 @@
 package:
   name: dkron
-  version: "4.0.7"
+  version: "4.0.8"
   epoch: 0 # GHSA-2464-8j7c-4cjm
   description: Distributed job scheduler for microservices
   copyright:
@@ -30,7 +30,7 @@ pipeline:
     with:
       repository: https://github.com/distribworks/dkron
       tag: v${{package.version}}
-      expected-commit: fec67b958d9ecee749ddeda5b0f5c1e819872ab0
+      expected-commit: a890c2f435a88b2f820cbc41c16a5407f82fd456
 
   - name: Generate protobuf files
     runs: |

external-dns-0.16.yaml

@@ -1,7 +1,7 @@
 package:
   name: external-dns-0.16
   version: "0.16.1"
-  epoch: 1 # GHSA-mh63-6h87-95cp
+  epoch: 2 # GHSA-vvgc-356p-c3xw
   description: Configure external DNS servers (AWS Route53, Google CloudDNS and others) for Kubernetes Ingresses and Services.
   copyright:
     - paths:
@@ -36,6 +36,7 @@ pipeline:
     with:
       deps: |-
         github.com/golang-jwt/jwt/[email protected]
+        golang.org/x/[email protected]
 
   - runs: |
       # Our global LDFLAGS conflict with a Makefile parameter

fluent-plugin-label-router.yaml

@@ -1,7 +1,7 @@
 #nolint:valid-pipeline-git-checkout-tag
 package:
   name: fluent-plugin-label-router
-  version: "0.5.0_git20250925"
+  version: "0.5.0_git20250926"
   epoch: 0
   description: Label-Router helps routing log messages based on their labels and namespace tag in a Kubernetes environment.
   copyright: