Merge branch 'main' into automated-moves-by-eol-mover-service

Author: AmberArcadia

authservice.yaml

@@ -1,6 +1,6 @@
 package:
   name: authservice
-  version: "1.1.0"
+  version: "1.1.1"
   epoch: 0 # CVE-2025-47907
   description: Move OIDC token acquisition out of your app code and into the Istio mesh
   copyright:
@@ -13,7 +13,7 @@ environment:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: fdc8e0f19829c6bda98e3c960ce0ad3b2a71846e
+      expected-commit: d36104fe329f7e3c44b18536356c19b4d22d1b21
       repository: https://github.com/istio-ecosystem/authservice
       tag: v${{package.version}}
 

bom.yaml

@@ -1,7 +1,7 @@
 package:
   name: bom
-  version: 0.6.0
-  epoch: 25 # CVE-2025-47910
+  version: "0.7.0"
+  epoch: 0 # CVE-2025-47910
   description: A utility to generate SPDX-compliant Bill of Materials manifests
   copyright:
     - license: Apache-2.0
@@ -18,15 +18,7 @@ pipeline:
     with:
       repository: https://github.com/kubernetes-sigs/bom
       tag: v${{package.version}}
-      expected-commit: 9be3ab721e914ad41141f302d6b5d0124a12cd1e
-
-  - uses: go/bump
-    with:
-      deps: |-
-        github.com/go-git/go-git/[email protected]
-        golang.org/x/[email protected]
-        golang.org/x/[email protected]
-        github.com/docker/[email protected]
+      expected-commit: f93d90e22cd5e76eb9407fc3eb038ede6149025e
 
   - uses: go/build
     with:

cass-operator.yaml

@@ -1,6 +1,6 @@
 package:
   name: cass-operator
-  version: "1.27.0"
+  version: "1.27.1"
   epoch: 0 # CVE-2025-47907
   description: Manages Cassandra cluster as standalone product or as part of the k8ssandra-operator
   copyright:
@@ -11,7 +11,7 @@ pipeline:
     with:
       repository: https://github.com/k8ssandra/cass-operator.git
       tag: v${{package.version}}
-      expected-commit: 7f1abb88c01187737774460e7488c082bc27ae87
+      expected-commit: 5854a888ed0e4c0133d0770617bb1e898fe0539b
 
   - uses: go/build
     with:

confluent-kafka.yaml

@@ -8,7 +8,7 @@ package:
   # with the `version:` field.
   # 2. Created a new variable `mangled-package-version` to append `-ccs` to the
   # version.
-  version: "8.2.0.266"
+  version: "8.2.0.273"
   epoch: 0
   description: Community edition of Confluent Kafka.
   copyright:
@@ -46,7 +46,7 @@ var-transforms:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: 771af88a291bb2d6ce2c78606bc36e9bd95414d8
+      expected-commit: dc4f23376c01db5577a43c74ec8777771d266478
       repository: https://github.com/confluentinc/kafka
       tag: v${{vars.mangled-package-version}}
 

ddp-tool.yaml

@@ -1,7 +1,7 @@
 #nolint:valid-pipeline-git-checkout-commit,valid-pipeline-git-checkout-tag
 package:
   name: ddp-tool
-  version: "1.0.34.0_git20250924"
+  version: "1.0.34.0_git20250925"
   epoch: 0
   description: Intel Dynamic Device Personalization Tool
   copyright:

dkron.yaml

@@ -1,7 +1,7 @@
 package:
   name: dkron
-  version: "4.0.5"
-  epoch: 2 # GHSA-2464-8j7c-4cjm
+  version: "4.0.7"
+  epoch: 0 # GHSA-2464-8j7c-4cjm
   description: Distributed job scheduler for microservices
   copyright:
     - license: LGPL-3.0
@@ -16,7 +16,7 @@ environment:
       - bun
       - ca-certificates-bundle
       - corepack
-      - go-1.23
+      - go
       - nodejs-20
       - protobuf
       - protobuf-dev
@@ -30,7 +30,7 @@ pipeline:
     with:
       repository: https://github.com/distribworks/dkron
       tag: v${{package.version}}
-      expected-commit: 03c680d562187d6837fdb4ab1c4cf4d0e67b9fd5
+      expected-commit: fec67b958d9ecee749ddeda5b0f5c1e819872ab0
 
   - name: Generate protobuf files
     runs: |
@@ -56,11 +56,6 @@ pipeline:
       GOBIN=$PWD go install ./builtin/...
       go mod tidy
 
-  - uses: go/bump
-    with:
-      deps: |-
-        github.com/go-viper/mapstructure/[email protected]
-
   - uses: go/build
     with:
       packages: .

external-dns-0.16.yaml

@@ -0,0 +1,90 @@
+package:
+  name: external-dns-0.16
+  version: "0.16.1"
+  epoch: 1 # GHSA-mh63-6h87-95cp
+  description: Configure external DNS servers (AWS Route53, Google CloudDNS and others) for Kubernetes Ingresses and Services.
+  copyright:
+    - paths:
+        - '*'
+      license: Apache-2.0
+  dependencies:
+    provides:
+      - external-dns=${{package.full-version}}
+
+var-transforms:
+  - from: ${{package.version}}
+    match: ^(\d+)\.\d+\.\d+$
+    replace: "$1"
+    to: major-version
+
+environment:
+  contents:
+    packages:
+      - build-base
+      - busybox
+      - ca-certificates-bundle
+      - go
+
+pipeline:
+  - uses: git-checkout
+    with:
+      expected-commit: 017f7687ca393138b565e51757a6fa8010902066
+      repository: https://github.com/kubernetes-sigs/external-dns
+      tag: v${{package.version}}
+
+  - uses: go/bump
+    with:
+      deps: |-
+        github.com/golang-jwt/jwt/[email protected]
+
+  - runs: |
+      # Our global LDFLAGS conflict with a Makefile parameter
+      unset LDFLAGS
+      make build
+      mkdir -p ${{targets.destdir}}/usr/bin
+      mv build/external-dns ${{targets.destdir}}/usr/bin/
+
+  - uses: strip
+
+subpackages:
+  - name: ${{package.name}}-iamguarded-compat
+    pipeline:
+      - uses: iamguarded/build-compat
+        with:
+          package: external-dns
+          version: ${{vars.major-version}}
+      - name: Create symlinks
+        runs: |
+          mkdir -p /opt/iamguarded/external-dns/bin
+          ln -s /usr/bin/external-dns /opt/iamguarded/external-dns/bin/external-dns
+      - uses: iamguarded/finalize-compat
+        with:
+          package: external-dns
+          version: ${{vars.major-version}}
+    test:
+      environment:
+        contents:
+          packages:
+            - ${{package.name}}
+      pipeline:
+        - runs: |
+            /opt/iamguarded/external-dns/bin/external-dns --version
+            /opt/iamguarded/external-dns/bin/external-dns --help
+        - uses: iamguarded/test-compat
+          with:
+            package: external-dns
+            version: ${{vars.major-version}}
+
+update:
+  enabled: true
+  github:
+    identifier: kubernetes-sigs/external-dns
+    strip-prefix: v
+    tag-filter: v0.16.
+
+test:
+  pipeline:
+    # AUTOGENERATED
+    - runs: |
+        external-dns --version
+        external-dns --help

filebrowser.yaml

@@ -1,6 +1,6 @@
 package:
   name: filebrowser
-  version: "2.43.0"
+  version: "2.44.0"
   description: "Web File Browser"
   epoch: 0 # GHSA-jc7w-c686-c4v9
   copyright:
@@ -22,7 +22,7 @@ pipeline:
     with:
       repository: https://github.com/filebrowser/filebrowser.git
       tag: v${{package.version}}
-      expected-commit: 2f0c1f5fa288bad90ab70d5801a11f86a69b5cac
+      expected-commit: 878cdfbc52bdb4c4385f24904a87927f852cb907
 
   - name: install-npm-dependencies
     working-directory: frontend

fluent-bit-4.0.yaml

@@ -1,6 +1,6 @@
 package:
   name: fluent-bit-4.0
-  version: "4.0.10"
+  version: "4.0.11"
   epoch: 0
   description: Fast and Lightweight Log processor and forwarder
   resources:
@@ -44,7 +44,7 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/fluent/fluent-bit
-      expected-commit: af80d63922dc294186e8d8db58002d0f151b2f74
+      expected-commit: 628f0c53373c245ee1e4f73c25e79d86912bf43b
       tag: v${{package.version}}
 
   - runs: |

fluent-plugin-label-router.yaml

@@ -1,7 +1,7 @@
 #nolint:valid-pipeline-git-checkout-tag
 package:
   name: fluent-plugin-label-router
-  version: "0.5.0_git20250924"
+  version: "0.5.0_git20250925"
   epoch: 0
   description: Label-Router helps routing log messages based on their labels and namespace tag in a Kubernetes environment.
   copyright: