chore: upgrade app to 0.4.5037 #5

Open
autonomic-bot wants to merge 3 commits from upgrade-589d490 into main
Owner

Upgrade: bluesky-pds app 0.4.5036 → 0.4.5037

Extends this existing upgrade PR (its branch was at 0.4.5036) to the newest available
bluesky-social/pds tag. abra recipe upgrade bluesky-pds -m reports candidates
["0.4.5037","0.4.5036","0.4.5034"]; this takes the newest, 0.4.5037. The branch is
fast-forwarded on top of the previous 0.4.5036 commit — no force-push, one evolving upgrade PR.
Cumulative PR window: 0.4.5027 → 0.4.5037.

service image current new
app ghcr.io/bluesky-social/pds 0.4.5036 0.4.5037
caddy caddy 2 2 (unchanged)

Image-tag mapping: 0.4.5NNN == @atproto/pds 0.5.NN, so this step is
@atproto/pds 0.5.36 → 0.5.37 (cumulative 0.5.27 → 0.5.37).

Upstream release notes: app 0.4.5036→0.4.5037 (@atproto/pds 0.5.36→0.5.37):
https://github.com/bluesky-social/atproto/blob/main/packages/pds/CHANGELOG.md

Operator Action Required

None. 0.5.37 is a non-breaking patch release: the recipe's env interface is unchanged
(same PDS_* set + the same three secrets), no data migration is required, and the health
endpoint GET /xrpc/_health is unchanged. Notable upstream items: since/startCursor added
to getTimeline/getListFeed, improved actor-store resource management, and MSTs referencing
the same node are now rejected (VisitedCidError; importRepo → InvalidRequest).

Advisory scan

Deterministic scanner (cc-ci-plan/advisory-scan.py bluesky-pds --from 0.4.5027 --to 0.4.5037):
0 CVEs fixed by this upgrade; 14 advisories seen but not version-classified (they belong to
other images / fall outside this window). --adjudicate produced no open cases, and the
release-note read found no CVEs either. Union count: 0.

Verification

  • abra recipe lint bluesky-pds -C -n: only pre-existing warnings (README metadata, caddy
    healthcheck, long secret names), unrelated to this bump.
  • Direct --chaos deploy on cc-ci (dev-bluesky-pds.ci.commoninternet.net, --server default)
    performed a live 0.4.5036 → 0.4.5037 upgrade: converged 1/1, healthcheck returned 200, and
    public GET /xrpc/_health returned {"version":"0.4.5037"}. The dev deploy was torn down
    afterwards (no stack, volumes, or secrets left behind).
  • !testme results are posted below.

Release

This PR deliberately does not bump the coop-cloud.${STACK_NAME}.version label. After
merge, the operator runs:

abra recipe release bluesky-pds -z

(no --dry-run; -z patch — a non-breaking upstream patch bump). The recipe version bump +
tag + publish are the operator's final step.

NOT merged — for operator review.

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

## Upgrade: bluesky-pds app `0.4.5036` → `0.4.5037` Extends this existing upgrade PR (its branch was at `0.4.5036`) to the newest available `bluesky-social/pds` tag. `abra recipe upgrade bluesky-pds -m` reports candidates `["0.4.5037","0.4.5036","0.4.5034"]`; this takes the newest, `0.4.5037`. The branch is fast-forwarded on top of the previous `0.4.5036` commit — no force-push, one evolving upgrade PR. Cumulative PR window: `0.4.5027` → `0.4.5037`. | service | image | current | new | |---------|-------|---------|-----| | app | `ghcr.io/bluesky-social/pds` | `0.4.5036` | `0.4.5037` | | caddy | `caddy` | `2` | `2` (unchanged) | Image-tag mapping: `0.4.5NNN` == `@atproto/pds` `0.5.NN`, so this step is `@atproto/pds` **0.5.36 → 0.5.37** (cumulative **0.5.27 → 0.5.37**). **Upstream release notes:** app 0.4.5036→0.4.5037 (`@atproto/pds` 0.5.36→0.5.37): https://github.com/bluesky-social/atproto/blob/main/packages/pds/CHANGELOG.md ### Operator Action Required None. `0.5.37` is a non-breaking patch release: the recipe's env interface is unchanged (same `PDS_*` set + the same three secrets), no data migration is required, and the health endpoint `GET /xrpc/_health` is unchanged. Notable upstream items: `since`/`startCursor` added to `getTimeline`/`getListFeed`, improved actor-store resource management, and MSTs referencing the same node are now rejected (`VisitedCidError`; `importRepo` → `InvalidRequest`). ### Advisory scan Deterministic scanner (`cc-ci-plan/advisory-scan.py bluesky-pds --from 0.4.5027 --to 0.4.5037`): **0 CVEs fixed by this upgrade**; 14 advisories seen but not version-classified (they belong to other images / fall outside this window). `--adjudicate` produced no open cases, and the release-note read found no CVEs either. Union count: **0**. ### Verification - `abra recipe lint bluesky-pds -C -n`: only pre-existing warnings (README metadata, caddy healthcheck, long secret names), unrelated to this bump. - Direct `--chaos` deploy on cc-ci (`dev-bluesky-pds.ci.commoninternet.net`, `--server default`) performed a live **0.4.5036 → 0.4.5037** upgrade: converged `1/1`, healthcheck returned 200, and public `GET /xrpc/_health` returned `{"version":"0.4.5037"}`. The dev deploy was torn down afterwards (no stack, volumes, or secrets left behind). - `!testme` results are posted below. ### Release This PR deliberately does **not** bump the `coop-cloud.${STACK_NAME}.version` label. After merge, the operator runs: abra recipe release bluesky-pds -z (no `--dry-run`; `-z` patch — a non-breaking upstream patch bump). The recipe version bump + tag + publish are the operator's final step. NOT merged — for operator review. Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants
autonomic-bot added 1 commit 2026-09-11 02:17:17 +00:00
autonomic-bot requested review from trav 2026-09-11 02:17:17 +00:00
autonomic-bot requested review from notplants 2026-09-11 02:17:17 +00:00
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-ci — bluesky-pds @ 589d490b ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `589d490b` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/1346/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1346) [![level](https://ci.commoninternet.net/runs/1346/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1346) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1346) · [dashboard](https://ci.commoninternet.net/)
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-ci — bluesky-pds @ 589d490b ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `589d490b` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/1362/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1362) [![level](https://ci.commoninternet.net/runs/1362/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1362) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1362) · [dashboard](https://ci.commoninternet.net/)
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-ci — bluesky-pds @ 589d490b ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `589d490b` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/1376/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1376) [![level](https://ci.commoninternet.net/runs/1376/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1376) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1376) · [dashboard](https://ci.commoninternet.net/)
autonomic-bot changed title from chore: upgrade app to 0.4.5034 to chore: upgrade bluesky-social/pds to 0.4.5034 2026-09-28 20:21:37 +00:00
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-ci — bluesky-pds @ 589d490b ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `589d490b` ✅ **passed** [![cc-ci result card](https://ci.autonomic.zone/runs/14/summary.png)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/14) [![level](https://ci.autonomic.zone/runs/14/badge.svg)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/14) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/14) · [dashboard](https://ci.autonomic.zone/)
autonomic-bot changed title from chore: upgrade bluesky-social/pds to 0.4.5034 to chore: upgrade app to 0.4.5036 2026-10-02 02:16:30 +00:00
autonomic-bot added 1 commit 2026-10-02 02:16:30 +00:00
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-ci — bluesky-pds @ 1a51596f ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `1a51596f` ✅ **passed** [![cc-ci result card](https://ci.autonomic.zone/runs/23/summary.png)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/23) [![level](https://ci.autonomic.zone/runs/23/badge.svg)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/23) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/23) · [dashboard](https://ci.autonomic.zone/)
autonomic-bot changed title from chore: upgrade app to 0.4.5036 to chore: upgrade app to 0.4.5037 2026-10-09 02:11:57 +00:00
autonomic-bot added 1 commit 2026-10-09 02:11:58 +00:00
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-ci — bluesky-pds @ 7ed391b9 ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `7ed391b9` ✅ **passed** [![cc-ci result card](https://ci.autonomic.zone/runs/41/summary.png)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/41) [![level](https://ci.autonomic.zone/runs/41/badge.svg)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/41) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/41) · [dashboard](https://ci.autonomic.zone/)
All checks were successful
cc-ci/testme cc-ci: success
You are not authorized to merge this pull request.
This pull request can be merged automatically.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin upgrade-589d490:upgrade-589d490
git checkout upgrade-589d490
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/bluesky-pds#5