Merge branch 'main' into cve-argo-workflows-44c9bd4f5066f195a39b15dfc…

…6c5f8a3

7zip.yaml

@@ -44,6 +44,9 @@ subpackages:
       - runs: |
           mkdir -p "${{targets.subpkgdir}}"/usr/share
           mv "${{targets.destdir}}"/usr/share/doc/7zip "${{targets.subpkgdir}}"/usr/share
+    test:
+      pipeline:
+        - uses: test/docs
 
 update:
   enabled: true

apache2.yaml

@@ -120,6 +120,9 @@ subpackages:
           set -x
           mkdir -p "${{targets.subpkgdir}}"/usr/share/doc/apache2
           mv "${{targets.destdir}}"/usr/share/apache2/default-site/htdocs/manual "${{targets.subpkgdir}}"/usr/share/doc/apache2/
+    test:
+      pipeline:
+        - uses: test/docs
 
   - name: ${{package.name}}-utils
     description: "Apache HTTP Server (utilities)"

apk-tools.yaml

@@ -69,6 +69,11 @@ subpackages:
       - runs: |
           mkdir -p "${{targets.subpkgdir}}"/usr
           mv "${{targets.destdir}}"/usr/lib "${{targets.subpkgdir}}"/usr/lib
+    test:
+      pipeline:
+        - uses: test/ldd-check
+          with:
+            packages: $(basename ${{targets.contextdir}})
 
 test:
   environment:

apr-util.yaml

@@ -75,13 +75,23 @@ subpackages:
           mkdir -p "${{targets.subpkgdir}}"/usr/lib
           mv "${{targets.destdir}}"/usr/lib/apr-util-1/apr_dbd_pgsql* "${{targets.subpkgdir}}"/usr/lib
     description: The Apache Portable Runtime Utility Library - Database driver for PostgreSQL
+    test:
+      pipeline:
+        - uses: test/ldd-check
+          with:
+            packages: $(basename ${{targets.contextdir}})
 
   - name: apr-util-dbd_sqlite3
     pipeline:
       - runs: |
           mkdir -p "${{targets.subpkgdir}}"/usr/lib
           mv "${{targets.destdir}}"/usr/lib/apr-util-1/apr_dbd_sqlite3* "${{targets.subpkgdir}}"/usr/lib
     description: The Apache Portable Runtime Utility Library - Database driver for SQLite3
+    test:
+      pipeline:
+        - uses: test/ldd-check
+          with:
+            packages: $(basename ${{targets.contextdir}})
 
   - name: apr-util-ldap
     pipeline:

at-spi2-core.yaml

@@ -1,6 +1,6 @@
 package:
   name: at-spi2-core
-  version: "2.55.0.1"
+  version: "2.55.2"
   epoch: 0
   description: Protocol definitions and daemon for D-Bus at-spi
   copyright:
@@ -33,7 +33,7 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://gitlab.gnome.org/GNOME/at-spi2-core
-      expected-commit: c067010874937bae7c01b316eee094fee683271b
+      expected-commit: fbd423a9446224494f91a3e722a9adb3863082da
       tag: ${{package.version}}
 
   - uses: meson/configure
@@ -87,6 +87,11 @@ subpackages:
           mv ${{targets.destdir}}/usr/lib/gtk-2.0 ${{targets.subpkgdir}}/usr/lib/
           mv ${{targets.destdir}}/usr/lib/libatk-bridge-2.0* ${{targets.subpkgdir}}/usr/lib/
     description: GTK+2.0 module that bridges ATK to D-Bus at-spi
+    test:
+      pipeline:
+        - uses: test/ldd-check
+          with:
+            packages: $(basename ${{targets.contextdir}})
 
 update:
   enabled: true

atlantis.yaml

@@ -1,7 +1,7 @@
 package:
   name: atlantis
-  version: 0.32.0
-  epoch: 1
+  version: "0.33.0"
+  epoch: 0
   description: Terraform Pull Request Automation
   copyright:
     - license: Apache-2.0
@@ -24,7 +24,7 @@ pipeline:
     with:
       repository: https://github.com/runatlantis/atlantis
       tag: v${{package.version}}
-      expected-commit: ea838accd4d83f50b75fbe968f680337381f3f15
+      expected-commit: 618d5acd4545cf3d0f8c773ca4d5e146b982466e
 
   - uses: go/build
     with:

aws-cli-2.yaml

@@ -2,7 +2,7 @@
 #nolint:documentation
 package:
   name: aws-cli-2
-  version: "2.23.10"
+  version: "2.23.12"
   epoch: 0
   description: "Universal Command Line Interface for Amazon Web Services (v2)"
   copyright:
@@ -32,7 +32,7 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/aws/aws-cli
-      expected-commit: 2ad29d381eff9f1606ea153eea1567716cb63f5d
+      expected-commit: 975a62355876d967aa364585de5c2225fb20c14b
       tag: ${{package.version}}
 
   - runs: |

aws-crt-cpp.yaml

@@ -1,6 +1,6 @@
 package:
   name: aws-crt-cpp
-  version: "0.29.10"
+  version: "0.30.1"
   epoch: 0
   description: "C++ wrapper around the aws-c-* libraries. Provides Cross-Platform Transport Protocols and SSL/TLS implementations for C++"
   copyright:
@@ -32,26 +32,21 @@ pipeline:
     with:
       repository: https://github.com/awslabs/aws-crt-cpp
       tag: v${{package.version}}
-      expected-commit: 6a55ecc055e3bcbdcae188276f562177ac86f3e9
+      expected-commit: 9a820b302264b2bfe2e3f61a443fb1c652e6bd79
 
-  - runs: |
-      if [ "$CBUILD" != "$CHOST" ]; then
-        CMAKE_CROSSOPTS="-DCMAKE_SYSTEM_NAME=Linux -DCMAKE_HOST_SYSTEM_NAME=Linux"
-      fi
-      CFLAGS="$CFLAGS -flto=auto" \
-      CXXFLAGS="$CXXFLAGS -flto=auto" \
-      cmake -B build -G Ninja \
-        -DCMAKE_INSTALL_PREFIX=/usr \
-        -DCMAKE_INSTALL_LIBDIR=/usr/lib \
+  - uses: cmake/configure
+    with:
+      opts: |
         -DBUILD_SHARED_LIBS=True \
         -DCMAKE_BUILD_TYPE=None \
         -DBUILD_DEPS=OFF \
-        -DBUILD_TESTING="OFF" \
-        $CMAKE_CROSSOPTS
-      cmake --build build
+        -DBUILD_TESTING=OFF \
+        -DCMAKE_SYSTEM_NAME=Linux \
+        -DCMAKE_HOST_SYSTEM_NAME=Linux
+
+  - uses: cmake/build
 
-  - runs: |
-      DESTDIR="${{targets.destdir}}" cmake --install build
+  - uses: cmake/install
 
   - uses: strip
 
@@ -60,9 +55,6 @@ subpackages:
     description: aws-crt-cpp dev
     pipeline:
       - uses: split/dev
-      - runs: |
-          mkdir -p "${{targets.subpkgdir}}"/usr/lib
-          mv "${{targets.destdir}}"/usr/lib/aws-crt-cpp "${{targets.subpkgdir}}"/usr/lib/
     dependencies:
       runtime:
         - aws-crt-cpp

aws-eks-pod-identity-agent.yaml

@@ -1,7 +1,7 @@
 #nolint:git-checkout-must-use-github-updates,valid-pipeline-git-checkout-tag
 package:
   name: aws-eks-pod-identity-agent
-  version: "0_git20250131"
+  version: "0_git20250202"
   epoch: 0
   description: EKS Pod Identity is a feature of Amazon EKS that simplifies the process for cluster administrators to configure Kubernetes applications with AWS IAM permissions
   copyright:

binaryen.yaml

@@ -1,6 +1,6 @@
 package:
   name: binaryen
-  version: "121"
+  version: "122"
   epoch: 0
   description: Optimizer and compiler/toolchain library for WebAssembly
   copyright:
@@ -25,7 +25,7 @@ pipeline:
     with:
       repository: https://github.com/webassembly/binaryen
       tag: version_${{package.version}}
-      expected-commit: 353b759b230dff8fb82aeb157aeb6db360d74a49
+      expected-commit: 4d415592792063877c70cc0256c064d1ea23b85a
 
   - uses: cmake/configure
     with:

bind.yaml

@@ -109,6 +109,11 @@ subpackages:
         - bind-tools
         - dns-root-hints
     description: bind dev
+    test:
+      pipeline:
+        - uses: test/ldd-check
+          with:
+            packages: $(basename ${{targets.contextdir}})
 
   - name: bind-libs
     dependencies:
@@ -129,6 +134,11 @@ subpackages:
             done
           done
     description: bind (libraries)
+    test:
+      pipeline:
+        - uses: test/ldd-check
+          with:
+            packages: $(basename ${{targets.contextdir}})
 
   - name: bind-dnssec-root
     pipeline:
@@ -178,6 +188,11 @@ subpackages:
           mkdir -p ${{targets.subpkgdir}}/usr/lib
           mv ${{targets.destdir}}/usr/lib/bind ${{targets.subpkgdir}}/usr/lib/
     description: The ISC DNS server plugins
+    test:
+      pipeline:
+        - uses: test/ldd-check
+          with:
+            packages: $(basename ${{targets.contextdir}})
 
   - name: bind-tools
     dependencies:

binutils.yaml

@@ -1,8 +1,8 @@
 #nolint:git-checkout-must-use-github-updates
 package:
   name: binutils
-  version: 2.43.1
-  epoch: 2
+  version: "2.44"
+  epoch: 0
   description: "GNU binutils"
   copyright:
     - license: GPL-3.0-or-later
@@ -35,7 +35,7 @@ pipeline:
     with:
       repository: https://sourceware.org/git/binutils-gdb.git
       tag: binutils-${{vars.underscore-package-version}}
-      expected-commit: beb2cdbcda911764b2bed5e57921fe90493260bd
+      expected-commit: 815d9a14cbbb3b81843f7566222c87fb22e7255d
 
   - name: 'Configure binutils'
     runs: |

brew.yaml

@@ -1,6 +1,6 @@
 package:
   name: brew
-  version: "4.4.19"
+  version: "4.4.20"
   epoch: 0
   description: "The homebrew package manager"
   copyright:
@@ -48,7 +48,7 @@ pipeline:
       repository: https://github.com/Homebrew/brew
       tag: ${{package.version}}
       destination: ./brew
-      expected-commit: 23facb219df8615680636ef12103bb3313f44e2a
+      expected-commit: 47ef1a3b0b742a78be35c016df6a0279d6035ebb
 
   - runs: |
       set -x

buildah.yaml

@@ -1,6 +1,6 @@
 package:
   name: buildah
-  version: "1.38.1"
+  version: "1.39.0"
   description: "A tool that facilitates building OCI images"
   epoch: 0
   copyright:
@@ -23,13 +23,7 @@ pipeline:
     with:
       repository: https://github.com/containers/buildah
       tag: v${{package.version}}
-      expected-commit: a07dde1b8d12cd35717aae96ecda38cb6911e9c3
-
-  - uses: go/bump
-    with:
-      deps: |-
-        golang.org/x/[email protected]
-        golang.org/x/[email protected]
+      expected-commit: c15ab104a18def9dc812fe31bf1fc02f6d0a571b
 
   - runs: |
       make

bun-bootstrap.yaml

@@ -1,6 +1,6 @@
 package:
   name: bun-bootstrap
-  version: "1.2.1"
+  version: "1.2.2"
   epoch: 0
   description: "Bun requires itself to bootstrap."
   copyright:
@@ -23,13 +23,13 @@ pipeline:
         uses: fetch
         with:
           uri: "https://github.com/oven-sh/bun/releases/download/bun-v${{package.version}}/bun-linux-aarch64.zip"
-          expected-sha256: "8b789aa2fa9e1fd54031b6fd00f5bb9462f6bf0dc191aa4e6a48a08a67dd280c"
+          expected-sha256: "d1dbaa3e9af24549fad92bdbe4fb21fa53302cd048a8f004e85a240984c93d4d"
           extract: false
       - if: ${{build.arch}} == 'x86_64'
         uses: fetch
         with:
           uri: "https://github.com/oven-sh/bun/releases/download/bun-v${{package.version}}/bun-linux-x64.zip"
-          expected-sha256: "4380e39854cb4c8aadf237c8f5d27025649a2b49705da91ce33066de959d52e8"
+          expected-sha256: "3f4efb8afd1f84ac2a98c04661c898561d1d35527d030cb4571e99b7c85f5079"
           extract: false
 
   - runs: |

bun.yaml

@@ -1,6 +1,6 @@
 package:
   name: bun
-  version: "1.2.1"
+  version: "1.2.2"
   epoch: 0
   description: "Incredibly fast JavaScript runtime, bundler, test runner, and package manager - all in one"
   copyright:
@@ -58,7 +58,7 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/oven-sh/bun
-      expected-commit: ce532901ceb43e94f9aa0f5b19a19b8b8b404ae1
+      expected-commit: c1708ea6ab529a4c747a8282a24d125dc20b0a63
       tag: bun-v${{package.version}}
 
   - runs: |

cassandra-5.0.yaml

@@ -1,7 +1,7 @@
 package:
   name: cassandra-5.0
-  version: 5.0.2
-  epoch: 1
+  version: "5.0.3"
+  epoch: 0
   description: Open Source NoSQL Database
   copyright:
     - license: Apache-2.0
@@ -42,7 +42,7 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/apache/cassandra
-      expected-commit: f278f6774fc76465c182041e081982105c3e7dbb
+      expected-commit: b0226c8ea122c3e5ea8680efb0744d33924fd732
       tag: cassandra-${{package.version}}
 
   - runs: |

cassandra-reaper.yaml

@@ -1,7 +1,7 @@
 package:
   name: cassandra-reaper
-  version: 3.7.1
-  epoch: 2
+  version: "3.8.0"
+  epoch: 1
   description: Automated Repair Awesomeness for Apache Cassandra
   copyright:
     - license: Apache-2.0
@@ -33,7 +33,7 @@ pipeline:
     with:
       repository: https://github.com/thelastpickle/cassandra-reaper
       tag: ${{package.version}}
-      expected-commit: 667667cc38c3fda18af3215b0c413f8390e6e130
+      expected-commit: 6547a9872bb10030c03382df03fa37f97262a5ca
 
   - uses: maven/pombump
     working-directory: src/server