Merge branch 'main' into go-1.22.3-batch-11

Signed-off-by: Ajay Kemparaj <ajaykemparaj@gmail.com>
wolfi-dev · May 9, 2024 · 53b69b3 · 53b69b3
2 parents 5fb911a + 85537dc
commit 53b69b3
Show file tree

Hide file tree

Showing 216 changed files with 358 additions and 376 deletions.
diff --git a/.github/actions/docker-run/action.yaml b/.github/actions/docker-run/action.yaml
@@ -6,7 +6,7 @@ inputs:
     required: true
   image:
     description: "The image to use"
-    default: "ghcr.io/wolfi-dev/sdk:latest@sha256:420bc33eb98b6c9fb2d785d7d9dfd6ed2084fa7eb8768a5114cc4d6723e5f1da"
+    default: "ghcr.io/wolfi-dev/sdk:latest@sha256:27f084dad6ddabeb5a4b370d5f6c19665cd7ba467473a4f00431395ace56c2a5"
     required: false
   workdir:
     description: "The images working directory"

diff --git a/.github/workflows/build-beta.yaml b/.github/workflows/build-beta.yaml
@@ -152,7 +152,7 @@ jobs:
 
     container:
       # NOTE: This step only signs and uploads, so it doesn't need any privileges
-      image: ghcr.io/wolfi-dev/sdk:latest@sha256:420bc33eb98b6c9fb2d785d7d9dfd6ed2084fa7eb8768a5114cc4d6723e5f1da
+      image: ghcr.io/wolfi-dev/sdk:latest@sha256:27f084dad6ddabeb5a4b370d5f6c19665cd7ba467473a4f00431395ace56c2a5
 
     steps:
       - name: Harden Runner

diff --git a/.github/workflows/build-old.yaml b/.github/workflows/build-old.yaml
@@ -26,7 +26,7 @@ jobs:
       contents: read
 
     container:
-      image: ghcr.io/wolfi-dev/sdk:latest@sha256:420bc33eb98b6c9fb2d785d7d9dfd6ed2084fa7eb8768a5114cc4d6723e5f1da
+      image: ghcr.io/wolfi-dev/sdk:latest@sha256:27f084dad6ddabeb5a4b370d5f6c19665cd7ba467473a4f00431395ace56c2a5
       # TODO: Deprivilege
       options: |
         --cap-add NET_ADMIN --cap-add SYS_ADMIN --device /dev/fuse --security-opt seccomp=unconfined --security-opt apparmor:unconfined
@@ -139,7 +139,7 @@ jobs:
 
     container:
       # NOTE: This step only signs and uploads, so it doesn't need any privileges
-      image: ghcr.io/wolfi-dev/sdk:latest@sha256:420bc33eb98b6c9fb2d785d7d9dfd6ed2084fa7eb8768a5114cc4d6723e5f1da
+      image: ghcr.io/wolfi-dev/sdk:latest@sha256:27f084dad6ddabeb5a4b370d5f6c19665cd7ba467473a4f00431395ace56c2a5
 
     steps:
       - name: Harden Runner
@@ -262,7 +262,7 @@ jobs:
 
     container:
       # NOTE: This step only signs and uploads, so it doesn't need any privileges
-      image: ghcr.io/wolfi-dev/sdk:latest@sha256:420bc33eb98b6c9fb2d785d7d9dfd6ed2084fa7eb8768a5114cc4d6723e5f1da
+      image: ghcr.io/wolfi-dev/sdk:latest@sha256:27f084dad6ddabeb5a4b370d5f6c19665cd7ba467473a4f00431395ace56c2a5
 
     steps:
       - name: Harden Runner

diff --git a/.github/workflows/build-world.yaml b/.github/workflows/build-world.yaml
@@ -27,7 +27,7 @@ jobs:
     # permissions:
 
     container:
-      image: ghcr.io/wolfi-dev/sdk:latest@sha256:420bc33eb98b6c9fb2d785d7d9dfd6ed2084fa7eb8768a5114cc4d6723e5f1da
+      image: ghcr.io/wolfi-dev/sdk:latest@sha256:27f084dad6ddabeb5a4b370d5f6c19665cd7ba467473a4f00431395ace56c2a5
       # TODO: Deprivilege
       options: |
         --cap-add NET_ADMIN --cap-add SYS_ADMIN --device /dev/fuse --security-opt seccomp=unconfined --security-opt apparmor:unconfined

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -29,7 +29,7 @@ jobs:
       contents: read
 
     container:
-      image: ghcr.io/wolfi-dev/sdk:latest@sha256:420bc33eb98b6c9fb2d785d7d9dfd6ed2084fa7eb8768a5114cc4d6723e5f1da
+      image: ghcr.io/wolfi-dev/sdk:latest@sha256:27f084dad6ddabeb5a4b370d5f6c19665cd7ba467473a4f00431395ace56c2a5
       # TODO: Deprivilege
       options: |
         --cap-add NET_ADMIN --cap-add SYS_ADMIN --device /dev/fuse --security-opt seccomp=unconfined --security-opt apparmor:unconfined
@@ -170,7 +170,7 @@ jobs:
 
     container:
       # NOTE: This step only signs and uploads, so it doesn't need any privileges
-      image: ghcr.io/wolfi-dev/sdk:latest@sha256:420bc33eb98b6c9fb2d785d7d9dfd6ed2084fa7eb8768a5114cc4d6723e5f1da
+      image: ghcr.io/wolfi-dev/sdk:latest@sha256:27f084dad6ddabeb5a4b370d5f6c19665cd7ba467473a4f00431395ace56c2a5
 
     steps:
       - name: Harden Runner
@@ -293,7 +293,7 @@ jobs:
 
     container:
       # NOTE: This step only signs and uploads, so it doesn't need any privileges
-      image: ghcr.io/wolfi-dev/sdk:latest@sha256:420bc33eb98b6c9fb2d785d7d9dfd6ed2084fa7eb8768a5114cc4d6723e5f1da
+      image: ghcr.io/wolfi-dev/sdk:latest@sha256:27f084dad6ddabeb5a4b370d5f6c19665cd7ba467473a4f00431395ace56c2a5
 
     steps:
       - name: Harden Runner

diff --git a/.github/workflows/lint-world.yaml b/.github/workflows/lint-world.yaml
@@ -32,7 +32,7 @@ jobs:
       group: wolfi-os-builder-${{ matrix.arch }}
 
     container:
-      image: ghcr.io/wolfi-dev/sdk:latest@sha256:420bc33eb98b6c9fb2d785d7d9dfd6ed2084fa7eb8768a5114cc4d6723e5f1da
+      image: ghcr.io/wolfi-dev/sdk:latest@sha256:27f084dad6ddabeb5a4b370d5f6c19665cd7ba467473a4f00431395ace56c2a5
 
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1

diff --git a/Makefile b/Makefile
@@ -188,7 +188,7 @@ dev-container:
 	    -v "${PWD}:${PWD}" \
 	    -w "${PWD}" \
 	    -e SOURCE_DATE_EPOCH=0 \
-	    ghcr.io/wolfi-dev/sdk:latest@sha256:420bc33eb98b6c9fb2d785d7d9dfd6ed2084fa7eb8768a5114cc4d6723e5f1da
+	    ghcr.io/wolfi-dev/sdk:latest@sha256:27f084dad6ddabeb5a4b370d5f6c19665cd7ba467473a4f00431395ace56c2a5
 
 PACKAGES_CONTAINER_FOLDER ?= /work/packages
 TMP_REPOSITORIES_DIR := $(shell mktemp -d)
@@ -253,6 +253,6 @@ dev-container-wolfi:
 		--mount type=bind,source="${PWD}/local-melange.rsa.pub",destination="/etc/apk/keys/local-melange.rsa.pub",readonly \
 		--mount type=bind,source="$(TMP_REPOSITORIES_FILE)",destination="/etc/apk/repositories",readonly \
 		-w "$(PACKAGES_CONTAINER_FOLDER)" \
-		ghcr.io/wolfi-dev/sdk:latest@sha256:420bc33eb98b6c9fb2d785d7d9dfd6ed2084fa7eb8768a5114cc4d6723e5f1da
+		ghcr.io/wolfi-dev/sdk:latest@sha256:27f084dad6ddabeb5a4b370d5f6c19665cd7ba467473a4f00431395ace56c2a5
 	@rm "$(TMP_REPOSITORIES_FILE)"
 	@rmdir "$(TMP_REPOSITORIES_DIR)"
diff --git a/aactl.yaml b/aactl.yaml
@@ -1,7 +1,7 @@
 package:
   name: aactl
   version: 0.4.12
-  epoch: 11
+  epoch: 12
   description: Google Container Analysis data import utility, supports OSS vulnerability scanner reports, SLSA provenance and sigstore attestations.
   copyright:
     - license: Apache-2.0

diff --git a/actions-runner-controller.yaml b/actions-runner-controller.yaml
@@ -1,7 +1,7 @@
 package:
   name: actions-runner-controller
   version: 0.9.1
-  epoch: 1
+  epoch: 2
   description: Kubernetes controller for GitHub Actions self-hosted runners
   copyright:
     - license: Apache-2.0

diff --git a/addon-resizer.yaml b/addon-resizer.yaml
@@ -1,7 +1,7 @@
 package:
   name: addon-resizer
   version: 1.8.20
-  epoch: 1
+  epoch: 2
   description: Autoscaling components for Kubernetes
   copyright:
     - license: Apache-2.0

diff --git a/amass.yaml b/amass.yaml
@@ -1,7 +1,7 @@
 package:
   name: amass
   version: 4.2.0
-  epoch: 5
+  epoch: 6
   description: "attack surfaces and external asset discovery tools set"
   copyright:
     - license: Apache-2.0

diff --git a/amazon-corretto-crypto-provider.yaml b/amazon-corretto-crypto-provider.yaml
@@ -1,7 +1,7 @@
 package:
   name: amazon-corretto-crypto-provider
   version: 2.3.3
-  epoch: 2
+  epoch: 3
   description: |
     The Amazon Corretto Crypto Provider (ACCP) is a collection of high-performance cryptographic implementations exposed via the standard JCA/JCE interfaces.
   copyright:

diff --git a/apko.yaml b/apko.yaml
@@ -1,7 +1,7 @@
 package:
   name: apko
-  version: 0.14.0
-  epoch: 8
+  version: 0.14.1
+  epoch: 0
   description: Build OCI images using APK directly without Dockerfile
   copyright:
     - license: Apache-2.0
@@ -22,11 +22,7 @@ pipeline:
     with:
       repository: https://github.com/chainguard-dev/apko
       tag: v${{package.version}}
-      expected-commit: 85f7b1292dd9d6dea58726ebc5e52e217898589c
-
-  - uses: go/bump
-    with:
-      deps: gopkg.in/go-jose/go-jose.v2@v2.6.3 github.com/docker/docker@v24.0.9 github.com/sigstore/cosign/v2@v2.2.4 golang.org/x/net@v0.23.0
+      expected-commit: 91e5c5e1baf31e19f6d3af3b0b6b81f849ce81da
 
   - runs: |
       make apko

diff --git a/argo-cd-2.10.yaml b/argo-cd-2.10.yaml
@@ -1,7 +1,7 @@
 package:
   name: argo-cd-2.10
   version: 2.10.9
-  epoch: 0
+  epoch: 1
   description: Declarative continuous deployment for Kubernetes.
   copyright:
     - license: Apache-2.0

diff --git a/argo-workflows.yaml b/argo-workflows.yaml
@@ -1,7 +1,7 @@
 package:
   name: argo-workflows
   version: 3.5.6
-  epoch: 0
+  epoch: 1
   description: Workflow engine for Kubernetes.
   copyright:
     - license: Apache-2.0

diff --git a/atlantis.yaml b/atlantis.yaml
@@ -1,7 +1,7 @@
 package:
   name: atlantis
   version: 0.27.3
-  epoch: 0
+  epoch: 1
   description: Terraform Pull Request Automation
   copyright:
     - license: Apache-2.0

diff --git a/aws-c-cal.yaml b/aws-c-cal.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-c-cal
-  version: 0.6.12
-  epoch: 1
+  version: 0.6.13
+  epoch: 0
   description: "AWS Crypto Abstraction Layer: Cross-Platform, C99 wrapper for cryptography primitives"
   copyright:
     - license: Apache-2.0
@@ -20,7 +20,7 @@ environment:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: 3dcc6ffcf321d5a5d43c1da079d7762ea5637277
+      expected-commit: 45f82ed8508752f01627bd08073282e427fad8c0
       repository: https://github.com/awslabs/aws-c-cal
       tag: v${{package.version}}
 

diff --git a/aws-c-common.yaml b/aws-c-common.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-c-common
-  version: 0.9.17
-  epoch: 1
+  version: 0.9.18
+  epoch: 0
   description: Core c99 package for AWS SDK for C including cross-platform primitives, configuration, data structures, and error handling
   copyright:
     - license: Apache-2.0
@@ -19,7 +19,7 @@ environment:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: 5038bc131178ef0ad7e1ef0bc2a8dc4425943c59
+      expected-commit: 24e23967895201639d7781651b217c8726977d1b
       repository: https://github.com/awslabs/aws-c-common
       tag: v${{package.version}}
 

diff --git a/aws-cli-v2.yaml b/aws-cli-v2.yaml
@@ -2,7 +2,7 @@
 #nolint:documentation
 package:
   name: aws-cli-v2
-  version: 2.15.45
+  version: 2.15.46
   epoch: 0
   description: "Universal Command Line Interface for Amazon Web Services (v2)"
   copyright:
@@ -30,7 +30,7 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/aws/aws-cli
-      expected-commit: e31612ef0c01959bf9ed689128a64043871d402d
+      expected-commit: 93ded8131972ccb6445ec32c9ba07da9dfdd51fa
       tag: ${{package.version}}
 
   - runs: |

diff --git a/aws-ebs-csi-driver.yaml b/aws-ebs-csi-driver.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-ebs-csi-driver
   version: 1.30.0
-  epoch: 0
+  epoch: 1
   description: CSI driver for Amazon EBS.
   copyright:
     - license: Apache-2.0

diff --git a/aws-efs-csi-driver.yaml b/aws-efs-csi-driver.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-efs-csi-driver
   version: 2.0.2
-  epoch: 0
+  epoch: 1
   description: CSI driver for Amazon EFS.
   copyright:
     - license: Apache-2.0

diff --git a/aws-flb-cloudwatch.yaml b/aws-flb-cloudwatch.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-flb-cloudwatch
   version: 1.9.4
-  epoch: 8
+  epoch: 9
   description: A Fluent Bit output plugin for CloudWatch Logs
   copyright:
     - license: Apache-2.0

diff --git a/aws-flb-firehose.yaml b/aws-flb-firehose.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-flb-firehose
   version: 1.7.2
-  epoch: 8
+  epoch: 9
   description: A Fluent Bit output plugin for Amazon Kinesis Data Firehose
   copyright:
     - license: Apache-2.0

diff --git a/aws-flb-kinesis.yaml b/aws-flb-kinesis.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-flb-kinesis
   version: 1.10.2
-  epoch: 9
+  epoch: 10
   description: A Fluent Bit output plugin for Kinesis Streams.
   copyright:
     - license: Apache-2.0

diff --git a/aws-load-balancer-controller.yaml b/aws-load-balancer-controller.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-load-balancer-controller
   version: 2.7.2
-  epoch: 2
+  epoch: 3
   description: A Kubernetes controller for Elastic Load Balancers
   copyright:
     - license: Apache-2.0

diff --git a/aws-network-policy-agent.yaml b/aws-network-policy-agent.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-network-policy-agent
   version: 1.1.1
-  epoch: 0
+  epoch: 1
   description: Amazon EKS Network Policy Agent is a daemonset that is responsible for enforcing configured network policies on the cluster.
   copyright:
     - license: Apache-2.0

diff --git a/bank-vaults.yaml b/bank-vaults.yaml
@@ -1,7 +1,7 @@
 package:
   name: bank-vaults
   version: 1.20.4
-  epoch: 12
+  epoch: 13
   description: A Vault swiss-army knife. A CLI tool to init, unseal and configure Vault (auth methods, secret engines).
   copyright:
     - license: Apache-2.0

diff --git a/bazel-7.yaml b/bazel-7.yaml
@@ -1,7 +1,7 @@
 package:
   name: bazel-7
-  version: 7.1.1
-  epoch: 1
+  version: 7.1.2
+  epoch: 0
   description: Bazel is an open-source build and test tool
   dependencies:
     provides:
@@ -25,7 +25,7 @@ environment:
 pipeline:
   - uses: fetch
     with:
-      expected-sha256: 6abce7c537fe25af7375607756618fed98aa41a66f4baf366d9816b8918622ba
+      expected-sha256: 9cf6ed2319c816919d97015eef6d0c5942cd1aed48e03c73ba0815d953ed61ab
       uri: https://github.com/bazelbuild/bazel/releases/download/${{package.version}}/bazel-${{package.version}}-dist.zip
       extract: false
       delete: false

diff --git a/bazelisk.yaml b/bazelisk.yaml
@@ -1,7 +1,7 @@
 package:
   name: bazelisk
   version: 1.19.0
-  epoch: 2
+  epoch: 3
   description: A user-friendly launcher for Bazel.
   copyright:
     - license: Apache-2.0

diff --git a/bincapz.yaml b/bincapz.yaml
@@ -1,7 +1,7 @@
 package:
   name: bincapz
   version: 0.11.0
-  epoch: 0
+  epoch: 1
   description: enumerate binary capabilities, including malicious behaviors
   copyright:
     - license: Apache-2.0

diff --git a/bom.yaml b/bom.yaml
@@ -1,7 +1,7 @@
 package:
   name: bom
   version: 0.6.0
-  epoch: 4
+  epoch: 5
   description: A utility to generate SPDX-compliant Bill of Materials manifests
   copyright:
     - license: Apache-2.0

diff --git a/boring-registry.yaml b/boring-registry.yaml
@@ -1,7 +1,7 @@
 package:
   name: boring-registry
   version: 0.14.0
-  epoch: 0
+  epoch: 1
   description: Terraform Provider and Module Registry
   copyright:
     - license: MIT

diff --git a/buf.yaml b/buf.yaml
@@ -1,7 +1,7 @@
 package:
   name: buf
   version: 1.31.0
-  epoch: 0
+  epoch: 1
   description: A new way of working with Protocol Buffers.
   copyright:
     - license: Apache-2.0