Merge branch 'main' into python-dev

alsa-lib.yaml

@@ -1,7 +1,7 @@
 package:
   name: alsa-lib
   version: 1.2.12
-  epoch: 0
+  epoch: 1
   description: Advanced Linux Sound Architecture (ALSA) library
   copyright:
     - license: LGPL-2.1-or-later
@@ -14,13 +14,22 @@ environment:
       - build-base
       - busybox
       - ca-certificates-bundle
+      - libtool
       - linux-headers
 
 pipeline:
-  - uses: fetch
+  - uses: git-checkout
     with:
-      expected-sha256: 4868cd908627279da5a634f468701625be8cc251d84262c7e5b6a218391ad0d2
-      uri: https://alsa-project.org/files/pub/lib/alsa-lib-${{package.version}}.tar.bz2
+      repository: https://github.com/alsa-project/alsa-lib.git
+      tag: v${{package.version}}
+      expected-commit: 34422861f5549aee3e9df9fd8240d10b530d9abd
+
+  - runs: |
+      libtoolize --force --copy --automake
+      aclocal
+      autoheader
+      automake --foreign --copy --add-missing
+      autoconf
 
   - uses: autoconf/configure
     with:
@@ -49,5 +58,6 @@ subpackages:
 
 update:
   enabled: true
-  release-monitor:
-    identifier: 38
+  github:
+    identifier: alsa-project/alsa-lib
+    strip-prefix: v

apk-tools.yaml

@@ -1,7 +1,7 @@
 package:
   name: apk-tools
-  version: 2.14.1
-  epoch: 2
+  version: 2.14.4
+  epoch: 0
   description: "apk-tools (Wolfi package manager)"
   copyright:
     - license: GPL-2.0-only
@@ -23,10 +23,11 @@ environment:
       - zlib-dev
 
 pipeline:
-  - uses: fetch
+  - uses: git-checkout
     with:
-      uri: https://gitlab.alpinelinux.org/alpine/apk-tools/-/archive/v${{package.version}}/apk-tools-v${{package.version}}.tar.gz
-      expected-sha256: c06487563cae9e92161dfe1a81e714f700229cc0ad075b6c26ac3f157892e732
+      repository: https://gitlab.alpinelinux.org/alpine/apk-tools.git
+      tag: v${{package.version}}
+      expected-commit: de114558a5d8fa15350b1b3d440712fab6bae817
 
   - runs: |
       sed -i -e 's:-Werror::' Make.rules

apr-util.yaml

@@ -1,7 +1,7 @@
 package:
   name: apr-util
   version: 1.6.3
-  epoch: 1
+  epoch: 2
   description: The Apache Portable Runtime Utility Library
   copyright:
     # Some files also contain RSA-MD.
@@ -13,22 +13,29 @@ environment:
   contents:
     packages:
       - autoconf
+      - automake
       - build-base
       - busybox
       - ca-certificates-bundle
       - expat-dev
       - gdbm-dev
+      - libapr
       - libapr-dev
+      - libtool
       - openldap-dev
       - openssl-dev
       - postgresql-16-dev
       - sqlite-dev
 
 pipeline:
-  - uses: fetch
+  - uses: git-checkout
     with:
-      expected-sha256: a41076e3710746326c3945042994ad9a4fcac0ce0277dd8fea076fec3c9772b5
-      uri: https://www.apache.org/dist/apr/apr-util-${{package.version}}.tar.bz2
+      repository: https://github.com/apache/apr-util.git
+      tag: ${{package.version}}
+      expected-commit: 28327eeca2614816c1fa33ff7c4105213e0ad938
+
+  - runs: |
+      ./buildconf --with-apr=/usr/share/apr-1/
 
   - uses: autoconf/configure
     with:
@@ -78,5 +85,9 @@ subpackages:
 
 update:
   enabled: true
-  release-monitor:
-    identifier: 96
+  ignore-regex-patterns:
+    - ^[^0-9].*
+    - ".*x-.*"
+  github:
+    identifier: apache/apr-util
+    use-tag: true

argo-workflows.yaml

@@ -1,7 +1,7 @@
 package:
   name: argo-workflows
-  version: 3.5.7
-  epoch: 2
+  version: 3.5.8
+  epoch: 0
   description: Workflow engine for Kubernetes.
   copyright:
     - license: Apache-2.0
@@ -20,14 +20,10 @@ environment:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: 503eef1357ebc9facc3f463708031441072ef7c2
+      expected-commit: 3bb637c0261f8c08d4346175bb8b1024719a1f11
       repository: https://github.com/argoproj/argo-workflows
       tag: v${{package.version}}
 
-  - uses: go/bump
-    with:
-      deps: github.com/Azure/azure-sdk-for-go/sdk/[email protected]
-
   - runs: |
       # NODE_OPTIONS has to been set
       sed -i 's/NODE_OPTIONS='\''[^'\'']*'\''/NODE_OPTIONS='\''--openssl-legacy-provider'\''/g' ui/package.json

aws-cli-v2.yaml

@@ -2,7 +2,7 @@
 #nolint:documentation
 package:
   name: aws-cli-v2
-  version: 2.16.9
+  version: 2.16.10
   epoch: 0
   description: "Universal Command Line Interface for Amazon Web Services (v2)"
   copyright:
@@ -30,7 +30,7 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/aws/aws-cli
-      expected-commit: 8d31e37f5494889782a0d8e5b535bf8a1054b83c
+      expected-commit: a19e1f54a023a180b0707fa43a16eba69313bad0
       tag: ${{package.version}}
 
   - runs: |

cargo-c.yaml

@@ -1,6 +1,6 @@
 package:
   name: cargo-c
-  version: 0.9.32
+  version: 0.10.0
   epoch: 0
   description: build and install C-compatible libraries
   copyright:
@@ -20,7 +20,7 @@ pipeline:
     with:
       repository: https://github.com/lu-zero/cargo-c
       tag: v${{package.version}}
-      expected-commit: 56dfe34ce1281f6ae5eb5517f7cf03f87bec352c
+      expected-commit: 62e72d44915675b2678f32e701bc1503d32881bb
 
   - runs: |
       cargo build --release

chromium.yaml

@@ -1,7 +1,7 @@
 #nolint:git-checkout-must-use-github-updates
 package:
   name: chromium
-  version: 126.0.6478.55
+  version: 126.0.6478.61
   epoch: 0
   description: "Open souce version of Google's chrome web browser"
   copyright:
@@ -120,7 +120,7 @@ pipeline:
       repository: https://chromium.googlesource.com/chromium/src.git
       tag: ${{package.version}}
       depth: 1
-      expected-commit: 7616ff175414646cbd1ac65e912fc530b19cc573
+      expected-commit: 8dc092df54ce9b93406cb7fec530eb297bc0b332
       destination: /home/src
 
   - runs: |

curl-rustls.yaml

@@ -1,7 +1,7 @@
 package:
   name: curl-rustls
   version: 8.8.0
-  epoch: 0
+  epoch: 1
   description: "URL retrieval utility and library"
   copyright:
     - license: MIT
@@ -30,11 +30,18 @@ environment:
       - wolfi-base
       - zlib-dev
 
+var-transforms:
+  - from: ${{package.version}}
+    match: \.
+    replace: _
+    to: mangled-package-version
+
 pipeline:
-  - uses: fetch
+  - uses: git-checkout
     with:
-      uri: https://curl.se/download/curl-${{package.version}}.tar.xz
-      expected-sha256: 0f58bb95fc330c8a46eeb3df5701b0d90c9d9bfcc42bd1cd08791d12551d4400
+      repository: https://github.com/curl/curl.git
+      tag: curl-${{vars.mangled-package-version}}
+      expected-commit: fd567d4f06857f4fc8e2f64ea727b1318f76ad33
 
   - runs: autoreconf -vif
 

cyrus-sasl.yaml

@@ -1,14 +1,16 @@
 package:
   name: cyrus-sasl
   version: 2.1.28
-  epoch: 2
+  epoch: 3
   description: "Cyrus Simple Authentication Service Layer (SASL)"
   copyright:
     - license: BSD-3-Clause
 
 environment:
   contents:
     packages:
+      - autoconf
+      - automake
       - build-base
       - busybox
       - ca-certificates-bundle
@@ -21,10 +23,13 @@ environment:
       - wolfi-base
 
 pipeline:
-  - uses: fetch
+  - uses: git-checkout
     with:
-      uri: https://github.com/cyrusimap/cyrus-sasl/releases/download/cyrus-sasl-${{package.version}}/cyrus-sasl-${{package.version}}.tar.gz
-      expected-sha512: db15af9079758a9f385457a79390c8a7cd7ea666573dace8bf4fb01bb4b49037538d67285727d6a70ad799d2e2318f265c9372e2427de9371d626a1959dd6f78
+      repository: https://github.com/cyrusimap/cyrus-sasl.git
+      tag: cyrus-sasl-${{package.version}}
+      expected-commit: 7a6b45b177070198fed0682bea5fa87c18abb084
+
+  - runs: ./autogen.sh
 
   - uses: autoconf/configure
     with:

dask-gateway.yaml

@@ -1,7 +1,7 @@
 package:
   name: dask-gateway
   version: 2024.1.0
-  epoch: 5
+  epoch: 6
   description: "A multi-tenant server for securely deploying and managing Dask clusters."
   copyright:
     - license: BSD-3-Clause
@@ -40,8 +40,8 @@ pipeline:
 
   - runs: |
       cd ${{package.name}}
-      # Mitigate GHSA-753j-mpmx-qq6g
-      sed -i 's|tornado|tornado>=6.4.1|g' requirements.txt
+      # Mitigate GHSA-753j-mpmx-qq6g, GHSA-w235-7p84-xx57
+      sed -i 's|tornado|tornado==6.4.1|g' requirements.txt
 
       # Build package
       python -m gpep517 build-wheel --wheel-dir dist --output-fd 1

dav1d.yaml

@@ -18,10 +18,11 @@ environment:
       - nasm
 
 pipeline:
-  - uses: fetch
+  - uses: git-checkout
     with:
-      expected-sha256: 2a7e68a17b22d1c060d31a7af84c8e033a145fca1d63ef36d57f0f39eb4dd0df
-      uri: https://code.videolan.org/videolan/dav1d/-/archive/${{package.version}}/dav1d-${{package.version}}.tar.bz2
+      repository: https://code.videolan.org/videolan/dav1d.git
+      tag: ${{package.version}}
+      expected-commit: e9986de7f4264940af6fa1df1498fd2754077de4
 
   - uses: meson/configure
     with:

erlang-26.yaml

@@ -1,7 +1,7 @@
 package:
   name: erlang-26
   version: 26.2.5
-  epoch: 1
+  epoch: 2
   description: General-purpose programming language and runtime environment
   copyright:
     - license: Apache-2.0
@@ -26,10 +26,11 @@ environment:
       - zlib-dev
 
 pipeline:
-  - uses: fetch
+  - uses: git-checkout
     with:
-      expected-sha256: de155c4ad9baab2b9e6c96dbd03bf955575a04dd6feee9c08758beb28484c9f6
-      uri: https://github.com/erlang/otp/releases/download/OTP-${{package.version}}/otp_src_${{package.version}}.tar.gz
+      repository: https://github.com/erlang/otp.git
+      tag: OTP-${{package.version}}
+      expected-commit: 412bff5196fc0ab88a61fe37ca30e5226fc7872d
 
   - runs: |
       export CPPFLAGS="-D_BSD_SOURCE $CPPFLAGS"

execline.yaml

@@ -1,7 +1,7 @@
 package:
   name: execline
   version: 2.9.6.0
-  epoch: 0
+  epoch: 1
   description: "a small scripting language intended to be an alternative to shell scripting"
   copyright:
     - license: ISC
@@ -16,10 +16,11 @@ environment:
       - wolfi-baselayout
 
 pipeline:
-  - uses: fetch
+  - uses: git-checkout
     with:
-      uri: https://skarnet.org/software/execline/execline-${{package.version}}.tar.gz
-      expected-sha256: ba2a27e97c5eb6bd7ca6a0987a8925e44465a5be996daa0d18f8feca37d7571a
+      repository: git://git.skarnet.org/execline
+      tag: v${{package.version}}
+      expected-commit: 48ebde9a5ea2a5a96f438b1bc9a19cd3bcb96f8c
 
   - name: Configure
     runs: |