Merge branch 'main' into feat/xfs_populate_patches

Author: 89luca89

.github/workflows/backfill.yaml

@@ -24,7 +24,7 @@ jobs:
         with:
           project_id: "prod-images-c6e5"
 
-      - uses: chainguard-dev/setup-chainctl@8d93dcbef466d3cf3533f67084f52eb74ef9d262 # v0.2.4
+      - uses: chainguard-dev/setup-chainctl@272698817627c158bbd813cb783b62a4b9bbbc67 # v0.3.1
         with:
             # Managed here:
             # https://github.com/chainguard-dev/mono/blob/main/env/chainguard-images/iac/wolfi-os-pusher.tf
@@ -33,12 +33,6 @@ jobs:
       - name: 'Backfill packages to apk.cgr.dev'
         run: |
           set -e
-          # Populate the token here, since chainctl auth token
-          # doesn't support all of the options we need.
-          chainctl auth login --audience apk.cgr.dev \
-            --identity "720909c9f5279097d847ad02a2f24ba8f59de36a/6a26f2970f880c31"
-          echo "::add-mask::$(chainctl auth token --audience apk.cgr.dev)"
-
           for arch in "aarch64" "x86_64"; do
             echo "Processing ${arch}"
             while IFS= read -r pkg; do

.github/workflows/withdraw-packages.yaml

@@ -115,7 +115,7 @@ jobs:
           done
 
       # use public chainguard provider.
-      - uses: chainguard-dev/setup-chainctl@8d93dcbef466d3cf3533f67084f52eb74ef9d262 # v0.2.4
+      - uses: chainguard-dev/setup-chainctl@272698817627c158bbd813cb783b62a4b9bbbc67 # v0.3.1
         with:
           # Managed here:
           # https://github.com/chainguard-dev/mono/blob/main/env/chainguard-images/iac/wolfi-os-pusher.tf
@@ -124,12 +124,6 @@ jobs:
       - name: 'Withdraw packages from apk.cgr.dev'
         run: |
           set -e
-          # Populate the token here, since chainctl auth token
-          # doesn't support all of the options we need.
-          chainctl auth login --audience apk.cgr.dev \
-            --identity "720909c9f5279097d847ad02a2f24ba8f59de36a/6a26f2970f880c31"
-          echo "::add-mask::$(chainctl auth token --audience apk.cgr.dev)"
-
           for arch in "aarch64" "x86_64"; do
             while IFS= read -r pkg; do
               curl -X DELETE \

abseil-cpp.yaml

@@ -1,7 +1,7 @@
 package:
   name: abseil-cpp
   version: "20250127.1" # On update, please check if -fdelete-null-pointer-checks is still required
-  epoch: 1
+  epoch: 2
   description: Abseil Common Libraries (C++)
   copyright:
     - license: Apache-2.0

alsa-lib.yaml

@@ -1,7 +1,7 @@
 package:
   name: alsa-lib
   version: "1.2.14"
-  epoch: 0
+  epoch: 1
   description: Advanced Linux Sound Architecture (ALSA) library
   copyright:
     - license: LGPL-2.1-or-later

aom.yaml

@@ -5,7 +5,7 @@
 package:
   name: aom
   version: "3.12.1"
-  epoch: 0
+  epoch: 1
   description: Alliance for Open Media (AOM) AV1 codec SDK
   copyright:
     - license: BSD-2-Clause

apache-activemq-artemis.yaml

@@ -1,7 +1,7 @@
 package:
   name: apache-activemq-artemis
   version: "2.41.0"
-  epoch: 1
+  epoch: 3
   description: ActiveMQ Artemis is the next generation message broker from Apache ActiveMQ.
   copyright:
     - license: Apache-2.0

apache-activemq-artemis/pombump-deps.yaml

@@ -1,4 +1,7 @@
 patches:
-  - groupId: io.netty
-    artifactId: netty-handler
-    version: 4.1.118.Final
+    - groupId: io.netty
+      artifactId: netty-handler
+      version: 4.1.118.Final
+    - groupId: commons-beanutils
+      artifactId: commons-beanutils
+      version: 1.11.0

apache-nifi.yaml

@@ -1,7 +1,7 @@
 package:
   name: apache-nifi
   version: "2.4.0"
-  epoch: 0
+  epoch: 1
   description: Apache NiFi is an easy to use, powerful, and reliable system to process and distribute data.
   copyright:
     - license: Apache-2.0

apache-nifi/pombump-deps.yaml

@@ -11,3 +11,6 @@ patches:
     - groupId: wire-runtime
       artifactId: wire-runtime
       version: 5.2.0
+    - groupId: commons-beanutils
+      artifactId: commons-beanutils
+      version: 1.11.0

apicurio-registry.yaml

@@ -1,7 +1,7 @@
 package:
   name: apicurio-registry
   version: "3.0.7"
-  epoch: 1
+  epoch: 3
   description: An API/Schema registry - stores APIs and Schemas
   copyright:
     - license: Apache-2.0