chore: upgrade app to 0.4.5037 #5

Open

autonomic-bot wants to merge 3 commits from upgrade-589d490 into main

pull from: upgrade-589d490

merge into: :main

:main

:upgrade-0.4.5046

:upgrade-589d490

:upgrade-0.3.1+v0.4.5001

:ci/warm-routing-alias

:upgrade-0.3.0+v0.4.219

:pr-20260518-155337

Conversation 14 Commits 3 Files Changed 1

+1 -1

autonomic-bot commented 2026-09-11 02:17:16 +00:00

Owner

Copy Link

Copy Source

Upgrade: bluesky-pds app 0.4.5027 → 0.4.5037

Bump the app image to the newest available bluesky-social/pds tag.
abra recipe upgrade bluesky-pds -m reports candidates ["0.4.5037","0.4.5036","0.4.5034"];
this takes the newest, 0.4.5037. caddy is unchanged (abra confirms 2 is latest).

service	image	current	new
app	ghcr.io/bluesky-social/pds	0.4.5027	0.4.5037
caddy	caddy	2	2 (unchanged)

Image-tag mapping: 0.4.5NNN == @atproto/pds 0.5.NN, so this step is
@atproto/pds 0.5.36 → 0.5.37 (cumulative 0.5.27 → 0.5.37).

Upstream release notes: app 0.4.5027→0.4.5037 (@atproto/pds 0.5.27→0.5.37):
https://github.com/bluesky-social/atproto/blob/main/packages/pds/CHANGELOG.md

Operator Action Required

None. Every release in the window (@atproto/pds 0.5.27 → 0.5.37) is a non-breaking patch:
the recipe's env interface is unchanged (same PDS_* set + the same three secrets), no data
migration is required, and the health endpoint GET /xrpc/_health is unchanged. Notable
upstream items: since/startCursor added to getTimeline/getListFeed, improved actor-store
resource management, and MSTs referencing the same node are now rejected (VisitedCidError;
importRepo → InvalidRequest).

Advisory scan

Deterministic scanner (cc-ci-plan/advisory-scan.py bluesky-pds --from 0.4.5027 --to 0.4.5037):
0 CVEs fixed by this upgrade; 15 advisories seen but not version-classified (they belong to
other images / fall outside this window). --adjudicate produced no open cases, and the
release-note read found no CVEs either. Union count: 0.

Verification

• abra recipe lint bluesky-pds -C -n: only pre-existing warnings (R002 healthcheck, R007
  README metadata, R015 secret-name length), unrelated to this bump.
• Direct --chaos deploy on cc-ci (dev-bluesky-pds.ci.commoninternet.net, --server default)
  performed a live deploy of the new tag: converged 1/1 on
  ghcr.io/bluesky-social/pds:0.4.5037; logs starting→started; public
  GET /xrpc/_health returned {"version":"0.4.5037"} (HTTP 200). The dev deploy was torn down
  afterwards (no stack, volumes, or secrets left behind).
• !testme results are posted below.

Release

This PR deliberately does not bump the coop-cloud.${STACK_NAME}.version label. After
merge, the operator runs:

abra recipe release bluesky-pds -z

(no --dry-run; -z patch — a non-breaking upstream patch bump). The recipe version bump +
tag + publish are the operator's final step.

NOT merged — for operator review.

cc @trav @notplants

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

## Upgrade: bluesky-pds app `0.4.5027` → `0.4.5037` Bump the `app` image to the newest available `bluesky-social/pds` tag. `abra recipe upgrade bluesky-pds -m` reports candidates `["0.4.5037","0.4.5036","0.4.5034"]`; this takes the newest, `0.4.5037`. `caddy` is unchanged (abra confirms `2` is latest). | service | image | current | new | |---------|-------|---------|-----| | app | `ghcr.io/bluesky-social/pds` | `0.4.5027` | `0.4.5037` | | caddy | `caddy` | `2` | `2` (unchanged) | Image-tag mapping: `0.4.5NNN` == `@atproto/pds` `0.5.NN`, so this step is `@atproto/pds` **0.5.36 → 0.5.37** (cumulative **0.5.27 → 0.5.37**). **Upstream release notes:** app 0.4.5027→0.4.5037 (`@atproto/pds` 0.5.27→0.5.37): https://github.com/bluesky-social/atproto/blob/main/packages/pds/CHANGELOG.md ### Operator Action Required None. Every release in the window (`@atproto/pds` 0.5.27 → 0.5.37) is a non-breaking patch: the recipe's env interface is unchanged (same `PDS_*` set + the same three secrets), no data migration is required, and the health endpoint `GET /xrpc/_health` is unchanged. Notable upstream items: `since`/`startCursor` added to `getTimeline`/`getListFeed`, improved actor-store resource management, and MSTs referencing the same node are now rejected (`VisitedCidError`; `importRepo` → `InvalidRequest`). ### Advisory scan Deterministic scanner (`cc-ci-plan/advisory-scan.py bluesky-pds --from 0.4.5027 --to 0.4.5037`): **0 CVEs fixed by this upgrade**; 15 advisories seen but not version-classified (they belong to other images / fall outside this window). `--adjudicate` produced no open cases, and the release-note read found no CVEs either. Union count: **0**. ### Verification - `abra recipe lint bluesky-pds -C -n`: only pre-existing warnings (R002 healthcheck, R007 README metadata, R015 secret-name length), unrelated to this bump. - Direct `--chaos` deploy on cc-ci (`dev-bluesky-pds.ci.commoninternet.net`, `--server default`) performed a live deploy of the new tag: converged `1/1` on `ghcr.io/bluesky-social/pds:0.4.5037`; logs `starting`→`started`; public `GET /xrpc/_health` returned `{"version":"0.4.5037"}` (HTTP 200). The dev deploy was torn down afterwards (no stack, volumes, or secrets left behind). - `!testme` results are posted below. ### Release This PR deliberately does **not** bump the `coop-cloud.${STACK_NAME}.version` label. After merge, the operator runs: abra recipe release bluesky-pds -z (no `--dry-run`; `-z` patch — a non-breaking upstream patch bump). The recipe version bump + tag + publish are the operator's final step. NOT merged — for operator review. cc @trav @notplants Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants

autonomic-bot added 1 commit 2026-09-11 02:17:17 +00:00

chore: upgrade app to 0.4.5034 589d490b93

autonomic-bot requested review from trav 2026-09-11 02:17:17 +00:00

autonomic-bot requested review from notplants 2026-09-11 02:17:17 +00:00

autonomic-bot commented 2026-09-11 02:17:31 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-09-11 02:17:48 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — bluesky-pds @ 589d490b ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `589d490b` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1346) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1346) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1346) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot commented 2026-09-18 02:19:38 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-09-18 02:19:39 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — bluesky-pds @ 589d490b ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `589d490b` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1362) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1362) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1362) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot commented 2026-09-21 16:41:04 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-09-21 16:41:33 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — bluesky-pds @ 589d490b ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `589d490b` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1376) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1376) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1376) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot changed title from chore: upgrade app to 0.4.5034 to chore: upgrade bluesky-social/pds to 0.4.5034 2026-09-28 20:21:37 +00:00

autonomic-bot commented 2026-09-28 20:21:43 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-09-28 20:21:52 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — bluesky-pds @ 589d490b ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `589d490b` ✅ **passed** [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/14) [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/14) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/14) · [dashboard](https://ci.autonomic.zone/)

autonomic-bot changed title from chore: upgrade bluesky-social/pds to 0.4.5034 to chore: upgrade app to 0.4.5036 2026-10-02 02:16:30 +00:00

autonomic-bot added 1 commit 2026-10-02 02:16:30 +00:00

chore: upgrade app to 0.4.5036 1a51596f4c

autonomic-bot commented 2026-10-02 02:16:38 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-10-02 02:16:39 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — bluesky-pds @ 1a51596f ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `1a51596f` ✅ **passed** [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/23) [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/23) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/23) · [dashboard](https://ci.autonomic.zone/)

autonomic-bot changed title from chore: upgrade app to 0.4.5036 to chore: upgrade app to 0.4.5037 2026-10-09 02:11:57 +00:00

autonomic-bot added 1 commit 2026-10-09 02:11:58 +00:00

chore: upgrade app to 0.4.5037 7ed391b97b

autonomic-bot commented 2026-10-09 02:12:07 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-10-09 02:12:23 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — bluesky-pds @ 7ed391b9 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `7ed391b9` ✅ **passed** [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/41) [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/41) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/41) · [dashboard](https://ci.autonomic.zone/)

autonomic-bot commented 2026-10-16 02:16:29 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-10-16 02:16:56 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — bluesky-pds @ 7ed391b9 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `bluesky-pds` @ `7ed391b9` ✅ **passed** [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/53) [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/53) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/53) · [dashboard](https://ci.autonomic.zone/)

autonomic-bot referenced this pull request 2026-10-23 02:24:53 +00:00

chore: upgrade app to 0.4.5046 #6

All checks were successful

Hide all checks

cc-ci/testme cc-ci: success

Details

You are not authorized to merge this pull request.

This pull request can be merged automatically.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin upgrade-589d490:upgrade-589d490

git checkout upgrade-589d490

Sign in to join this conversation.

Reviewers

No Reviewers

trav

notplants

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

aadil (Aadil Ayub) autonomic autonomic-bot kawaiipunk (KawaiiPunk) notplants trav (Trav Fryer)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: recipe-maintainers/bluesky-pds#5