Merge branch 'main' into cve-opentelemetry-collector-24822774d1fcbfd4…

…fb349645af912758
wolfi-dev · Dec 13, 2024 · 2799291 · 2799291
2 parents 7dd7774 + 8417131
commit 2799291
Show file tree

Hide file tree

Showing 409 changed files with 1,424 additions and 1,542 deletions.
diff --git a/Makefile b/Makefile
@@ -25,6 +25,7 @@ MELANGE_OPTS += ${MELANGE_EXTRA_OPTS}
 
 # Enter interactive mode on failure for debug
 MELANGE_DEBUG_OPTS += --interactive
+MELANGE_DEBUG_OPTS += --debug
 MELANGE_DEBUG_OPTS += --package-append apk-tools
 MELANGE_DEBUG_OPTS += ${MELANGE_OPTS}
 

diff --git a/argo-rollouts.yaml b/argo-rollouts.yaml
@@ -1,7 +1,7 @@
 package:
   name: argo-rollouts
   version: 1.7.2
-  epoch: 1
+  epoch: 2
   description: Progressive Delivery for Kubernetes
   copyright:
     - license: Apache-2.0
@@ -15,7 +15,7 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: golang.org/x/[email protected] github.com/cloudflare/[email protected] github.com/hashicorp/[email protected] go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/[email protected] go.opentelemetry.io/contrib/instrumentation/net/http/[email protected] go.opentelemetry.io/otel/[email protected] go.opentelemetry.io/otel/exporters/otlp/otlptrace/[email protected] k8s.io/[email protected] k8s.io/[email protected] github.com/golang-jwt/jwt/[email protected]
+      deps: golang.org/x/[email protected] github.com/cloudflare/[email protected] github.com/hashicorp/[email protected] go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/[email protected] go.opentelemetry.io/contrib/instrumentation/net/http/[email protected] go.opentelemetry.io/otel/[email protected] go.opentelemetry.io/otel/exporters/otlp/otlptrace/[email protected] k8s.io/[email protected] k8s.io/[email protected] github.com/golang-jwt/jwt/[email protected] golang.org/x/[email protected]
       replaces: github.com/whilp/git-urls=github.com/chainguard-dev/[email protected]
 
   - uses: go/build
@@ -33,7 +33,7 @@ subpackages:
     pipeline:
       - uses: go/bump
         with:
-          deps: golang.org/x/[email protected] github.com/cloudflare/[email protected] github.com/hashicorp/[email protected] go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/[email protected] go.opentelemetry.io/contrib/instrumentation/net/http/[email protected] go.opentelemetry.io/otel/[email protected] go.opentelemetry.io/otel/exporters/otlp/otlptrace/[email protected] k8s.io/[email protected] k8s.io/[email protected]
+          deps: github.com/cloudflare/[email protected] github.com/hashicorp/[email protected] go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/[email protected] go.opentelemetry.io/contrib/instrumentation/net/http/[email protected] go.opentelemetry.io/otel/[email protected] go.opentelemetry.io/otel/exporters/otlp/otlptrace/[email protected] k8s.io/[email protected] k8s.io/[email protected]
           replaces: github.com/whilp/git-urls=github.com/chainguard-dev/[email protected]
       - uses: go/build
         with:

diff --git a/argo-workflows.yaml b/argo-workflows.yaml
@@ -1,7 +1,7 @@
 package:
   name: argo-workflows
   version: 3.6.2
-  epoch: 0
+  epoch: 1
   description: Workflow engine for Kubernetes.
   copyright:
     - license: Apache-2.0
@@ -40,6 +40,10 @@ pipeline:
       # Pack yarn UI into go binary
       /home/build/.cache/go/bin/staticfiles -o server/static/files.go ui/dist/app
 
+  - uses: go/bump
+    with:
+      deps: golang.org/x/[email protected]
+
   - uses: go/build
     with:
       packages: ./cmd/argo

diff --git a/atlantis.yaml b/atlantis.yaml
@@ -1,7 +1,7 @@
 package:
   name: atlantis
   version: 0.31.0
-  epoch: 0
+  epoch: 1
   description: Terraform Pull Request Automation
   copyright:
     - license: Apache-2.0
@@ -26,6 +26,11 @@ pipeline:
       tag: v${{package.version}}
       expected-commit: 245044c17fe85f7330c0a1cca919e7bf3bd52c4d
 
+  - uses: go/bump
+    with:
+      deps: golang.org/x/[email protected]
+      modroot: .
+
   - uses: go/build
     with:
       modroot: .

diff --git a/authservice.yaml b/authservice.yaml
@@ -1,7 +1,7 @@
 package:
   name: authservice
   version: 1.0.3
-  epoch: 0
+  epoch: 1
   description: Move OIDC token acquisition out of your app code and into the Istio mesh
   copyright:
     - license: Apache-2.0
@@ -17,6 +17,10 @@ pipeline:
       repository: https://github.com/istio-ecosystem/authservice
       tag: v${{package.version}}
 
+  - uses: go/bump
+    with:
+      deps: golang.org/x/[email protected]
+
   - uses: go/build
     with:
       packages: ./cmd

diff --git a/aws-c-auth.yaml b/aws-c-auth.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-c-auth
   version: 0.8.0
-  epoch: 0
+  epoch: 1
   description: "C99 library implementation of AWS client-side authentication: standard credentials providers and signing"
   copyright:
     - license: Apache-2.0
@@ -64,14 +64,10 @@ subpackages:
     description: aws-c-auth dev
 
 test:
-  environment:
-    contents:
-      packages:
-        - posix-libc-utils
   pipeline:
-    - name: "Verify shared library dependencies"
-      runs: |
-        ldd /usr/lib/libaws-c-auth.so.1.0.0
+    - uses: test/ldd-check
+      with:
+        files: /usr/lib/libaws-c-auth.so.1.0.0
 
 update:
   enabled: true

diff --git a/aws-c-cal.yaml b/aws-c-cal.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-c-cal
   version: 0.8.1
-  epoch: 0
+  epoch: 1
   description: "AWS Crypto Abstraction Layer: Cross-Platform, C99 wrapper for cryptography primitives"
   copyright:
     - license: Apache-2.0
@@ -58,14 +58,10 @@ subpackages:
     description: aws-c-cal dev
 
 test:
-  environment:
-    contents:
-      packages:
-        - posix-libc-utils
   pipeline:
-    - name: "Verify shared library dependencies"
-      runs: |
-        ldd /usr/lib/libaws-c-cal.so.1.0.0
+    - uses: test/ldd-check
+      with:
+        files: /usr/lib/libaws-c-cal.so.1.0.0
 
 update:
   enabled: true

diff --git a/aws-c-common.yaml b/aws-c-common.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-c-common
   version: 0.10.6
-  epoch: 0
+  epoch: 1
   description: Core c99 package for AWS SDK for C including cross-platform primitives, configuration, data structures, and error handling
   copyright:
     - license: Apache-2.0
@@ -57,14 +57,10 @@ subpackages:
     description: aws-c-common dev
 
 test:
-  environment:
-    contents:
-      packages:
-        - posix-libc-utils
   pipeline:
-    - name: "Verify shared library dependencies"
-      runs: |
-        ldd /usr/lib/libaws-c-common.so.1.0.0
+    - uses: test/ldd-check
+      with:
+        files: /usr/lib/libaws-c-common.so.1.0.0
 
 update:
   enabled: true

diff --git a/aws-c-compression.yaml b/aws-c-compression.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-c-compression
   version: 0.3.0
-  epoch: 0
+  epoch: 1
   description: C99 implementation of huffman encoding/decoding
   copyright:
     - license: Apache-2.0
@@ -54,14 +54,10 @@ subpackages:
     description: aws-c-compression dev
 
 test:
-  environment:
-    contents:
-      packages:
-        - posix-libc-utils
   pipeline:
-    - name: "Verify shared library dependencies"
-      runs: |
-        ldd /usr/lib/libaws-c-compression.so.1.0.0
+    - uses: test/ldd-check
+      with:
+        files: /usr/lib/libaws-c-compression.so.1.0.0
 
 update:
   enabled: true

diff --git a/aws-c-event-stream.yaml b/aws-c-event-stream.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-c-event-stream
   version: 0.5.0
-  epoch: 0
+  epoch: 1
   description: "AWS C99 implementation of the vnd.amazon.eventstream content-type"
   copyright:
     - license: Apache-2.0
@@ -62,14 +62,10 @@ subpackages:
     description: aws-c-event-stream dev
 
 test:
-  environment:
-    contents:
-      packages:
-        - posix-libc-utils
   pipeline:
-    - name: "Verify shared library dependencies"
-      runs: |
-        ldd /usr/lib/libaws-c-event-stream.so.1.0.0
+    - uses: test/ldd-check
+      with:
+        files: /usr/lib/libaws-c-event-stream.so.1.0.0
 
 update:
   enabled: true

diff --git a/aws-c-http.yaml b/aws-c-http.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-c-http
   version: 0.9.2
-  epoch: 0
+  epoch: 1
   description: AWS C99 implementation of the HTTP/1.1 and HTTP/2 specifications
   copyright:
     - license: Apache-2.0
@@ -61,14 +61,10 @@ subpackages:
     description: aws-c-http dev
 
 test:
-  environment:
-    contents:
-      packages:
-        - posix-libc-utils
   pipeline:
-    - name: "Verify shared library dependencies"
-      runs: |
-        ldd /usr/lib/libaws-c-http.so.1.0.0
+    - uses: test/ldd-check
+      with:
+        files: /usr/lib/libaws-c-http.so.1.0.0
 
 update:
   enabled: true

diff --git a/aws-c-mqtt.yaml b/aws-c-mqtt.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-c-mqtt
   version: 0.11.0
-  epoch: 0
+  epoch: 1
   description: AWS C99 implementation of the MQTT 3.1.1 specification
   copyright:
     - license: Apache-2.0
@@ -79,12 +79,11 @@ test:
         - aws-c-io-dev
         - build-base
         - gcc
-        - posix-libc-utils
         - aws-c-mqtt-dev
   pipeline:
-    - name: "Verify shared library dependencies"
-      runs: |
-        ldd /usr/lib/libaws-c-mqtt.so.1.0.0
+    - uses: test/ldd-check
+      with:
+        files: /usr/lib/libaws-c-mqtt.so.1.0.0
     - name: "Compile simple MQTT test program"
       runs: |
         cat << 'EOF' > test.c

diff --git a/aws-c-s3.yaml b/aws-c-s3.yaml
@@ -74,14 +74,10 @@ subpackages:
     description: aws-c-s3 dev
 
 test:
-  environment:
-    contents:
-      packages:
-        - posix-libc-utils
   pipeline:
-    - name: "Verify shared library dependencies"
-      runs: |
-        ldd /usr/lib/libaws-c-s3.so.1.0.0
+    - uses: test/ldd-check
+      with:
+        files: /usr/lib/libaws-c-s3.so.1.0.0
 
 update:
   enabled: true

diff --git a/aws-c-sdkutils.yaml b/aws-c-sdkutils.yaml
@@ -57,14 +57,10 @@ subpackages:
     description: aws-c-sdkutils dev
 
 test:
-  environment:
-    contents:
-      packages:
-        - posix-libc-utils
   pipeline:
-    - name: "Verify shared library dependencies"
-      runs: |
-        ldd /usr/lib/libaws-c-sdkutils.so.1.0.0
+    - uses: test/ldd-check
+      with:
+        files: /usr/lib/libaws-c-sdkutils.so.1.0.0
 
 update:
   enabled: true

diff --git a/aws-checksums.yaml b/aws-checksums.yaml
@@ -57,14 +57,10 @@ subpackages:
     description: aws-checksums dev
 
 test:
-  environment:
-    contents:
-      packages:
-        - posix-libc-utils
   pipeline:
-    - name: "Verify shared library dependencies"
-      runs: |
-        ldd /usr/lib/libaws-checksums.so.1.0.0
+    - uses: test/ldd-check
+      with:
+        files: /usr/lib/libaws-checksums.so.1.0.0
 
 update:
   enabled: true

diff --git a/aws-cli-2.yaml b/aws-cli-2.yaml
@@ -2,7 +2,7 @@
 #nolint:documentation
 package:
   name: aws-cli-2
-  version: 2.22.16
+  version: 2.22.17
   epoch: 0
   description: "Universal Command Line Interface for Amazon Web Services (v2)"
   copyright:
@@ -31,7 +31,7 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/aws/aws-cli
-      expected-commit: c9d20e55a17c4b489dc6ccc58f64425165c9447f
+      expected-commit: 4e337a888b85cbcc2c7c211df0cc41e0b9f02798
       tag: ${{package.version}}
 
   - runs: |

diff --git a/aws-efs-csi-driver.yaml b/aws-efs-csi-driver.yaml
@@ -1,6 +1,6 @@
 package:
   name: aws-efs-csi-driver
-  version: 2.1.1
+  version: 2.1.2
   epoch: 0
   description: CSI driver for Amazon EFS.
   copyright:
@@ -20,7 +20,7 @@ pipeline:
     with:
       repository: https://github.com/kubernetes-sigs/aws-efs-csi-driver
       tag: v${{package.version}}
-      expected-commit: 28144460b084dd4a1bd5d81ad75ae41c55e84a65
+      expected-commit: b141622fe6b19c7d8c3d8b10289788a5994ffef0
 
   - uses: go/build
     with:

diff --git a/aws-eks-pod-identity-agent.yaml b/aws-eks-pod-identity-agent.yaml
@@ -1,7 +1,7 @@
 #nolint:git-checkout-must-use-github-updates,valid-pipeline-git-checkout-tag
 package:
   name: aws-eks-pod-identity-agent
-  version: 0_git20241212
+  version: 0_git20241213
   epoch: 0
   description: EKS Pod Identity is a feature of Amazon EKS that simplifies the process for cluster administrators to configure Kubernetes applications with AWS IAM permissions
   copyright: