Merge branch 'main' into wolfictl-f400944f-78de-4c05-903a-ce10b7143024

wolfi-dev · Jan 12, 2025 · efd2475 · efd2475
2 parents 3613ace + 4d4e16a
commit efd2475
Show file tree

Hide file tree

Showing 1,314 changed files with 2,749 additions and 1,846 deletions.
diff --git a/7zip.yaml b/7zip.yaml
@@ -12,7 +12,6 @@ environment:
       - build-base
       - busybox
       - ca-certificates-bundle
-      - openssf-compiler-options
 
 pipeline:
   - uses: fetch

diff --git a/CODEOWNERS b/CODEOWNERS
@@ -4,3 +4,6 @@ CODEOWNERS @wolfi-dev/wolfi-owners
 # These packages require approval from the Foundations squad.
 openssh.yaml @wolfi-dev/foundations-squad
 ca-certificates.yaml @wolfi-dev/foundations-squad
+
+# Pipeline changes require approval of the Guarded OS squad.
+pipelines/ @wolfi-dev/foundations-squad
diff --git a/Catch2.yaml b/Catch2.yaml
@@ -11,7 +11,6 @@ environment:
     packages:
       - build-base
       - busybox
-      - openssf-compiler-options
 
 pipeline:
   - uses: git-checkout

diff --git a/R-e1071.yaml b/R-e1071.yaml
@@ -17,7 +17,6 @@ environment:
       - R-dev
       - R-proxy
       - busybox
-      - openssf-compiler-options
 
 var-transforms:
   - from: ${{package.version}}

diff --git a/R-s2.yaml b/R-s2.yaml
@@ -20,7 +20,6 @@ environment:
       - R-wk
       - Rcpp
       - busybox
-      - openssf-compiler-options
       - openssl-dev
 
 pipeline:

diff --git a/R-sf.yaml b/R-sf.yaml
@@ -32,7 +32,6 @@ environment:
       - busybox
       - gdal-dev
       - geos-dev
-      - openssf-compiler-options
       - pkgconf
       - proj-dev
       - sqlite-dev

diff --git a/R-wk.yaml b/R-wk.yaml
@@ -15,7 +15,6 @@ environment:
       - R
       - R-dev
       - busybox
-      - openssf-compiler-options
 
 pipeline:
   - uses: git-checkout

diff --git a/R.yaml b/R.yaml
@@ -67,7 +67,6 @@ environment:
       - openblas-dev
       - openjdk-17
       - openjdk-17-default-jvm
-      - openssf-compiler-options
       - pango-dev
       - pcre2-dev
       - perl

diff --git a/Rcpp.yaml b/Rcpp.yaml
@@ -1,7 +1,7 @@
 package:
   name: Rcpp
-  version: 1.0.13
-  epoch: 1
+  version: "1.0.14"
+  epoch: 0
   description: Seamless R and C++ Integration
   copyright:
     - license: GPL-2.0-or-later
@@ -15,14 +15,13 @@ environment:
       - R
       - R-dev
       - busybox
-      - openssf-compiler-options
 
 pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/cran/Rcpp
       tag: ${{package.version}}
-      expected-commit: d9d486e76a4e9ebacfe030c3b299843a597990e0
+      expected-commit: 6c6778fd52d606541df4dfca0dd1e61ce20fdddd
 
   - uses: R/build
     with:

diff --git a/abseil-cpp.yaml b/abseil-cpp.yaml
@@ -22,7 +22,6 @@ environment:
       - ca-certificates-bundle
       - cmake
       - gtest-dev
-      - openssf-compiler-options
       - samurai
   environment:
     # https://github.com/wolfi-dev/os/issues/34075

diff --git a/acl.yaml b/acl.yaml
@@ -17,7 +17,6 @@ environment:
       - ca-certificates-bundle
       - gettext-dev
       - libtool
-      - openssf-compiler-options
       - wolfi-base
 
 pipeline:

diff --git a/aerospike.yaml b/aerospike.yaml
@@ -19,7 +19,6 @@ environment:
       - coreutils
       - gmp-dev
       - libtool
-      - openssf-compiler-options
       - openssl-dev
       - zlib-dev
 

diff --git a/airflow.yaml b/airflow.yaml
@@ -23,7 +23,6 @@ environment:
       - mariadb-connector-c-dev
       - mariadb-dev
       - nodejs
-      - openssf-compiler-options
       - pkgconf-dev
       - postgresql-dev
       - py3-pip

diff --git a/alsa-lib.yaml b/alsa-lib.yaml
@@ -16,7 +16,6 @@ environment:
       - ca-certificates-bundle
       - libtool
       - linux-headers
-      - openssf-compiler-options
 
 pipeline:
   - uses: git-checkout

diff --git a/aom.yaml b/aom.yaml
@@ -21,7 +21,6 @@ environment:
       - cmake
       # gcc-14 hits ICE on arm64
       - gcc~13
-      - openssf-compiler-options
       - perl
       - samurai
       - tree

diff --git a/apache-arrow.yaml b/apache-arrow.yaml
@@ -41,7 +41,6 @@ environment:
       - libprotoc
       - libzstd1
       - lz4-dev
-      - openssf-compiler-options
       - openssl-dev
       - protobuf
       - protobuf-dev

diff --git a/apache-nifi.yaml b/apache-nifi.yaml
@@ -30,7 +30,6 @@ environment:
       - nodejs-20
       - npm
       - openjdk-21-default-jdk
-      - openssf-compiler-options
       - openssl-dev
       - rsync
   environment:

diff --git a/apache-orc.yaml b/apache-orc.yaml
@@ -12,7 +12,6 @@ environment:
       - build-base
       - cmake
       - lz4-dev
-      - openssf-compiler-options
       - protobuf-dev
       - samurai
       - snappy-dev

diff --git a/apache2.yaml b/apache2.yaml
@@ -22,7 +22,6 @@ environment:
       - libxml2-dev
       - lua5.4-dev
       - nghttp2-dev
-      - openssf-compiler-options
       - openssl-dev
       - pcre2-dev
       - readline-dev
@@ -303,6 +302,9 @@ test:
         # Stop httpd
         echo "Stopping httpd..."
         kill "$httpd_pid"
+    - uses: test/ldd-check
+      with:
+        packages: ${{package.name}}
 
 update:
   enabled: true

diff --git a/apicurio-registry.yaml b/apicurio-registry.yaml
@@ -23,7 +23,6 @@ environment:
       - npm
       - openjdk-17
       - openjdk-17-default-jvm
-      - openssf-compiler-options
   environment:
     JAVA_HOME: /usr/lib/jvm/java-17-openjdk
 

diff --git a/apk-tools.yaml b/apk-tools.yaml
@@ -18,7 +18,6 @@ environment:
       - lua5.3
       - lua5.3-dev
       - lua5.3-lzlib
-      - openssf-compiler-options
       - openssl-dev
       - scdoc
       - zlib-dev

diff --git a/apko.yaml b/apko.yaml
@@ -1,6 +1,6 @@
 package:
   name: apko
-  version: 0.22.5
+  version: 0.22.6
   epoch: 0
   description: Build OCI images using APK directly without Dockerfile
   copyright:
@@ -22,7 +22,7 @@ pipeline:
     with:
       repository: https://github.com/chainguard-dev/apko
       tag: v${{package.version}}
-      expected-commit: 20bf90264a9720492d623322989284b938601a5d
+      expected-commit: 995ee5a40608591b2c4d2e7893abdffeca93f6ff
 
   - runs: |
       make apko

diff --git a/argo-events.yaml b/argo-events.yaml
@@ -1,22 +1,22 @@
 package:
   name: argo-events
-  version: 1.9.3
-  epoch: 3
+  version: "1.9.5"
+  epoch: 0
   description: Event-driven Automation Framework for Kubernetes.
   copyright:
     - license: Apache-2.0
 
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: 9c8bda9ad1d46bf75e91b851d2265acbf704efbc
+      expected-commit: 7fc4271d91d0d1e693a722822907e6463699ba3d
       repository: https://github.com/argoproj/argo-events
       tag: v${{package.version}}
 
   - uses: go/bump
     with:
-      deps: github.com/hamba/avro/[email protected] golang.org/x/crypto@v0.31.0 golang.org/x/[email protected] github.com/go-git/go-git/[email protected]
-      replaces: github.com/whilp/git-urls=github.com/chainguard-dev/[email protected] github.com/hamba/avro=github.com/hamba/avro/[email protected]
+      deps: github.com/whilp/git-urls@v0.0.0-20191001220047-6db9661140c0
+      replaces: github.com/whilp/git-urls=github.com/chainguard-dev/[email protected]
 
   - uses: go/build
     with:

diff --git a/argocd-image-updater.yaml b/argocd-image-updater.yaml
@@ -1,7 +1,7 @@
 package:
   name: argocd-image-updater
   version: 0.15.2
-  epoch: 0
+  epoch: 1
   description: Automatic container image update for Argo CD
   copyright:
     - license: Apache-2.0
@@ -23,7 +23,7 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: github.com/golang-jwt/jwt/[email protected] golang.org/x/[email protected] golang.org/x/[email protected]
+      deps: github.com/golang-jwt/jwt/[email protected] golang.org/x/[email protected] golang.org/x/[email protected] github.com/go-git/go-git/[email protected]
 
   - uses: go/build
     with:

diff --git a/argon2.yaml b/argon2.yaml
@@ -10,7 +10,6 @@ environment:
   contents:
     packages:
       - build-base
-      - openssf-compiler-options
       - wolfi-base
 
 pipeline:

diff --git a/armadillo.yaml b/armadillo.yaml
@@ -17,7 +17,6 @@ environment:
       - ca-certificates-bundle
       - cmake
       - openblas-dev
-      - openssf-compiler-options
 
 pipeline:
   - uses: fetch

diff --git a/arpack.yaml b/arpack.yaml
@@ -17,7 +17,6 @@ environment:
       - cmake
       - gfortran
       - openblas-dev
-      - openssf-compiler-options
 
 pipeline:
   - uses: git-checkout

diff --git a/async-profiler.yaml b/async-profiler.yaml
@@ -13,7 +13,6 @@ environment:
       - build-base
       - openjdk-11
       - openjdk-11-default-jvm
-      - openssf-compiler-options
       - wolfi-base
   environment:
     JAVA_HOME: /usr/lib/jvm/java-11-openjdk
@@ -39,6 +38,9 @@ test:
         /usr/bin/asprof --help
         asprof --version
         asprof --help
+    - uses: test/ldd-check
+      with:
+        packages: ${{package.name}}
 
 update:
   enabled: true

diff --git a/at-spi2-core.yaml b/at-spi2-core.yaml
@@ -1,7 +1,7 @@
 package:
   name: at-spi2-core
-  version: 2.54.0
-  epoch: 2
+  version: "2.55.0"
+  epoch: 0
   description: Protocol definitions and daemon for D-Bus at-spi
   copyright:
     - license: LGPL-2.0-or-later
@@ -19,7 +19,6 @@ environment:
       - libxml2-dev
       - libxtst-dev
       - meson
-      - openssf-compiler-options
       - posix-libc-utils
 
 # creates a new var that contains only the major and minor version to be used in the fetch URL
@@ -33,7 +32,7 @@ var-transforms:
 pipeline:
   - uses: fetch
     with:
-      expected-sha256: d7eee7e75beddcc272cedc2b60535600f3aae6e481589ebc667afc437c0a6079
+      expected-sha256: 59604b2792fcdcc84db56e59c01ca1deeacb41e405dac3fcb57ada86d6cb122b
       uri: https://download.gnome.org/sources/at-spi2-core/${{vars.mangled-package-version}}/at-spi2-core-${{package.version}}.tar.xz
 
   - uses: meson/configure

diff --git a/attr.yaml b/attr.yaml
@@ -16,7 +16,6 @@ environment:
       - ca-certificates-bundle
       - gettext-dev
       - libtool
-      - openssf-compiler-options
       - wolfi-base
 
 pipeline:

diff --git a/atuin.yaml b/atuin.yaml
@@ -13,7 +13,6 @@ environment:
       - busybox
       - ca-certificates-bundle
       - cargo-auditable
-      - openssf-compiler-options
       - protobuf-dev
       - rust
 

diff --git a/audit.yaml b/audit.yaml
@@ -26,7 +26,6 @@ environment:
       - libtool
       - linux-headers
       - openldap-dev
-      - openssf-compiler-options
       - python3
       - python3-dev
       - swig

diff --git a/avahi.yaml b/avahi.yaml
@@ -27,7 +27,6 @@ environment:
       - libdaemon-dev
       - libevent-dev
       - libtool
-      - openssf-compiler-options
       - pkgconf-dev
       - systemd-dev
 

diff --git a/aws-c-auth.yaml b/aws-c-auth.yaml
@@ -19,7 +19,6 @@ environment:
       - busybox
       - ca-certificates-bundle
       - cmake
-      - openssf-compiler-options
       - openssl-dev
       - s2n-tls-dev
       - samurai

diff --git a/aws-c-cal.yaml b/aws-c-cal.yaml
@@ -14,7 +14,6 @@ environment:
       - busybox
       - ca-certificates-bundle
       - cmake
-      - openssf-compiler-options
       - openssl-dev
       - samurai
 

diff --git a/aws-c-common.yaml b/aws-c-common.yaml
@@ -13,7 +13,6 @@ environment:
       - busybox
       - ca-certificates-bundle
       - cmake
-      - openssf-compiler-options
       - samurai
 
 pipeline:

diff --git a/aws-c-compression.yaml b/aws-c-compression.yaml
@@ -14,7 +14,6 @@ environment:
       - busybox
       - ca-certificates-bundle
       - cmake
-      - openssf-compiler-options
       - samurai
 
 pipeline:

diff --git a/aws-c-event-stream.yaml b/aws-c-event-stream.yaml
@@ -17,7 +17,6 @@ environment:
       - busybox
       - ca-certificates-bundle
       - cmake
-      - openssf-compiler-options
       - openssl-dev
       - s2n-tls-dev
       - samurai
-Original file line number
+Diff line change
@@ Expand Up / @@ -17,7 +17,6 @@ environment: @@
           - R-dev
           - R-proxy
           - busybox
-          - openssf-compiler-options
     var-transforms:
       - from: ${{package.version}}
@@ Expand Down @@