chore: upgrade bluesky-social/pds to 0.4.5027 #3

Open
autonomic-bot wants to merge 5 commits from upgrade-0.3.1+v0.4.5001 into main
Owner

Upgrade: bluesky-social/pds 0.4.219 → 0.4.5027

service image current new
app ghcr.io/bluesky-social/pds 0.4.219 0.4.5027
caddy caddy:2 2 2 (no change)

Changes

  • compose.yml: image tag 0.4.2190.4.5027
  • entrypoint.sh.tmpl: index.jsindex.ts (required for 0.4.5001+ tags — Node 24, TypeScript service restructure)
  • abra.sh: ENTRYPOINT_VERSION=v1v2 (forces config refresh)
  • Version label left at 0.3.0+v0.4.219 — operator bumps at release time.

Operator action required

  • The entrypoint must exec index.ts (not index.js) for 0.4.5001+ tags. This is handled by the recipe change.
  • No data migrations required. Env interface unchanged across 0.4.x.
  • Node.js base image bumped to 24.18 (from 24.15) fixing 5 CVEs: CVE-2026-48618 (HIGH), CVE-2026-48933 (HIGH), CVE-2026-48928/48930/48934 (MEDIUM), CVE-2026-48619 (MEDIUM). See https://nodejs.org/en/blog/vulnerability/june-2026-security-releases

Upstream release notes

  • app 0.4.219→0.4.5027: https://github.com/bluesky-social/pds/tags (no formal GitHub Releases; tag commits)
    • v0.4.5001 (May 30, 2026): Complete restructure — Node 20→24, service runs TypeScript directly (index.ts), new tag scheme 0.4.<minor><patch> (= @atproto/pds 0.5.1+)
    • v0.4.5006 (Jun 22, 2026): minor update
    • v0.4.5009 (Jun 25, 2026): minor update
    • Node 24.18 bump (Jul 6, 2026): Security — fixes CVE-2026-48618 (HIGH), CVE-2026-48933 (HIGH), CVE-2026-48928/48930/48934 (MEDIUM), CVE-2026-48619 (MEDIUM)
    • pnpm 10 upgrade (Jul 8, 2026)
    • v0.4.5026 (Aug 7, 2026): @atproto/pds 0.5.26, monitoring config, blob limit → 300M
    • v0.4.5027 (Aug 11, 2026): latest
  • caddy 2: no change (abra confirms up-to-date)

Recommended release

abra recipe release bluesky-pds -y

Tested on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

## Upgrade: bluesky-social/pds 0.4.219 → 0.4.5027 | service | image | current | new | |---------|-------|---------|-----| | app | ghcr.io/bluesky-social/pds | 0.4.219 | 0.4.5027 | | caddy | caddy:2 | 2 | 2 (no change) | ### Changes - `compose.yml`: image tag `0.4.219` → `0.4.5027` - `entrypoint.sh.tmpl`: `index.js` → `index.ts` (required for 0.4.5001+ tags — Node 24, TypeScript service restructure) - `abra.sh`: `ENTRYPOINT_VERSION=v1` → `v2` (forces config refresh) - Version label left at `0.3.0+v0.4.219` — operator bumps at release time. ### Operator action required - The entrypoint must exec `index.ts` (not `index.js`) for 0.4.5001+ tags. This is handled by the recipe change. - No data migrations required. Env interface unchanged across 0.4.x. - Node.js base image bumped to 24.18 (from 24.15) fixing 5 CVEs: CVE-2026-48618 (HIGH), CVE-2026-48933 (HIGH), CVE-2026-48928/48930/48934 (MEDIUM), CVE-2026-48619 (MEDIUM). See https://nodejs.org/en/blog/vulnerability/june-2026-security-releases ### Upstream release notes - **app** 0.4.219→0.4.5027: https://github.com/bluesky-social/pds/tags (no formal GitHub Releases; tag commits) - v0.4.5001 (May 30, 2026): Complete restructure — Node 20→24, service runs TypeScript directly (`index.ts`), new tag scheme `0.4.<minor><patch>` (= @atproto/pds 0.5.1+) - v0.4.5006 (Jun 22, 2026): minor update - v0.4.5009 (Jun 25, 2026): minor update - Node 24.18 bump (Jul 6, 2026): Security — fixes CVE-2026-48618 (HIGH), CVE-2026-48933 (HIGH), CVE-2026-48928/48930/48934 (MEDIUM), CVE-2026-48619 (MEDIUM) - pnpm 10 upgrade (Jul 8, 2026) - v0.4.5026 (Aug 7, 2026): @atproto/pds 0.5.26, monitoring config, blob limit → 300M - v0.4.5027 (Aug 11, 2026): latest - **caddy** 2: no change (abra confirms up-to-date) ### Recommended release ``` abra recipe release bluesky-pds -y ``` Tested on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants
autonomic-bot added 1 commit 2026-06-17 00:33:47 +00:00
chore: upgrade to 0.3.1+v0.4.5001
cc-ci/testme cc-ci: success
dcf933813d
Bump ghcr.io/bluesky-social/pds 0.4.219 -> 0.4.5001 (atproto/pds 0.2.19 -> 0.5.1).
Upstream renamed the service entrypoint from index.js to index.ts (ESM, type:
module, Node base image 20 -> 24), so update entrypoint.sh.tmpl to exec index.ts
and bump ENTRYPOINT_VERSION v1 -> v2 so the new swarm config is applied.
autonomic-bot requested review from trav 2026-06-17 00:33:48 +00:00
autonomic-bot requested review from notplants 2026-06-17 00:33:48 +00:00
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-cibluesky-pds @ dcf93381 passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `dcf93381` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/753/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/753) [![level](https://ci.commoninternet.net/runs/753/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/753) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/753) · [dashboard](https://ci.commoninternet.net/)
autonomic-bot changed title from chore: upgrade to 0.3.1+v0.4.5001 to chore: upgrade app to 0.4.5006 2026-06-22 20:48:55 +00:00
autonomic-bot added 1 commit 2026-06-22 20:48:56 +00:00
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-cibluesky-pds @ 17b5c093 passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `17b5c093` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/946/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/946) [![level](https://ci.commoninternet.net/runs/946/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/946) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/946) · [dashboard](https://ci.commoninternet.net/)
autonomic-bot changed title from chore: upgrade app to 0.4.5006 to chore: upgrade pds to 0.4.5009 2026-06-26 03:22:56 +00:00
autonomic-bot added 1 commit 2026-06-26 03:22:57 +00:00
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-cibluesky-pds @ a562c6ec passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `a562c6ec` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/957/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/957) [![level](https://ci.commoninternet.net/runs/957/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/957) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/957) · [dashboard](https://ci.commoninternet.net/)
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-cibluesky-pds @ a562c6ec passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `a562c6ec` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/970/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/970) [![level](https://ci.commoninternet.net/runs/970/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/970) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/970) · [dashboard](https://ci.commoninternet.net/)
Author
Owner

!testme

!testme
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-cibluesky-pds @ a562c6ec passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `a562c6ec` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/1131/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1131) [![level](https://ci.commoninternet.net/runs/1131/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1131) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1131) · [dashboard](https://ci.commoninternet.net/)
autonomic-bot changed title from chore: upgrade pds to 0.4.5009 to chore: upgrade bluesky-social/pds to 0.4.5009 2026-08-03 21:17:48 +00:00
autonomic-bot added 1 commit 2026-08-03 21:17:50 +00:00
Author
Owner

!testme

!testme
Author
Owner

!testme

!testme
Author
Owner

!testme

!testme
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-cibluesky-pds @ 4619810e passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `4619810e` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/1160/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1160) [![level](https://ci.commoninternet.net/runs/1160/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1160) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1160) · [dashboard](https://ci.commoninternet.net/)
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-cibluesky-pds @ 4619810e passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `4619810e` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/1205/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1205) [![level](https://ci.commoninternet.net/runs/1205/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1205) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1205) · [dashboard](https://ci.commoninternet.net/)
autonomic-bot added 1 commit 2026-08-14 02:19:47 +00:00
autonomic-bot changed title from chore: upgrade bluesky-social/pds to 0.4.5009 to chore: upgrade bluesky-social/pds to 0.4.5027 2026-08-14 02:20:23 +00:00
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-cibluesky-pds @ c13a5f72 failurehttps://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1257

(summary card unavailable — see the run for details.) full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `c13a5f72` ❌ **failure** → https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1257 _(summary card unavailable — see the run for details.)_ [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1257) · [dashboard](https://ci.commoninternet.net/)
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-cibluesky-pds @ c13a5f72 failurehttps://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1259

(summary card unavailable — see the run for details.) full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `c13a5f72` ❌ **failure** → https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1259 _(summary card unavailable — see the run for details.)_ [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1259) · [dashboard](https://ci.commoninternet.net/)
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-cibluesky-pds @ c13a5f72 passedhttps://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1260

(summary card unavailable — see the run for details.) full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `c13a5f72` ✅ **passed** → https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1260 _(summary card unavailable — see the run for details.)_ [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1260) · [dashboard](https://ci.commoninternet.net/)
All checks were successful
cc-ci/testme cc-ci: success
You are not authorized to merge this pull request.
This pull request can be merged automatically.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin upgrade-0.3.1+v0.4.5001:upgrade-0.3.1+v0.4.5001
git checkout upgrade-0.3.1+v0.4.5001
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/bluesky-pds#3