chore: upgrade app to 2.44.0 #9

Open

autonomic-bot wants to merge 2 commits from upgrade-a34432c into main

pull from: upgrade-a34432c

merge into: :main

:main

:upgrade-sws-2.44.0

:upgrade-a34432c

:ci/regall-sweep

:upgrade-1.2.0+2.43.0

:regression-bad-image

:v4-red-verify

:regression-bad-tag

:regression-v4

:upgrade-1.1.0+2.42.0

:serve-hidden-files

:already-in-upstream-v7

Conversation 9 Commits 2 Files Changed 2

+2 -2

autonomic-bot commented 2026-06-22 20:58:16 +00:00

Owner

Copy Link

Copy Source

Upgrades joseluisq/static-web-server (app service) from 2.43.0 → 2.44.0.

Image-tag changes

service	image	current	new
app	joseluisq/static-web-server	2.43.0	2.44.0

The git sidecar service (alpine/git, compose.git-pull.yml overlay) is already up-to-date at v2.54.0 (rides in the prior commit on this evolving PR — intentionally left alone here).

Upstream release notes

Upstream release notes: app joseluisq/static-web-server 2.43.0→2.44.0: https://github.com/static-web-server/static-web-server/releases/tag/v2.44.0
Full changelog: https://github.com/static-web-server/static-web-server/compare/v2.43.0...v2.44.0

Highlight: bug fixes + security update (v2 is now LTS; only bug/security fixes will land on the 2.x line going forward).

• Security advisories (please update):
  • Pre-compressed (Moderate) — GHSA-cg27-w6jh-934r
  • Metrics (Moderate) — GHSA-97q6-jph8-rxgm
  • Basic authentication (Low) — GHSA-cx3m-fg6q-xf3v
  • Markdown (Low) — GHSA-4wf2-76p9-xrmx
• Fixes: pre-compressed variant body truncation; query-string preservation on URL redirects; metrics endpoint authentication order bypass; dependency + Alpine 3.23.5 / Debian 13.6 base bumps.
• New opt-in feature: --use-relative-root (resolve webroot at request time) — not used by this recipe; no compose change required.

Operator action required

None — defaults preserve current behaviour for the recipe's existing flags. No compose.yml, compose.git-pull.yml, environment, or volume change is needed.

Recipe version / release

This PR intentionally leaves the coop-cloud.${STACK_NAME}.version label untouched — the operator bumps + tags + publishes with a single abra recipe release after the PR merges.

Recommended semver bump: minor (-y) — matches the recipe's prior cadence (2.42.0→2.43.0 bumped the recipe label minor 1.1.0→1.2.0); upstream 2.44 ships security fixes + one new opt-in feature with no breaking changes for this recipe. Resulting label: 1.3.0+2.44.0.

Recommended release command (operator, after PR merges):

abra recipe release custom-html-tiny -y

Upgrades `joseluisq/static-web-server` (app service) from **2.43.0** → **2.44.0**. ## Image-tag changes | service | image | current | new | |---------|--------------------------------|---------|---------| | app | joseluisq/static-web-server | 2.43.0 | 2.44.0 | The `git` sidecar service (`alpine/git`, `compose.git-pull.yml` overlay) is already up-to-date at `v2.54.0` (rides in the prior commit on this evolving PR — intentionally left alone here). ## Upstream release notes **Upstream release notes:** app `joseluisq/static-web-server` 2.43.0→2.44.0: https://github.com/static-web-server/static-web-server/releases/tag/v2.44.0 Full changelog: https://github.com/static-web-server/static-web-server/compare/v2.43.0...v2.44.0 Highlight: **bug fixes + security update** (v2 is now LTS; only bug/security fixes will land on the `2.x` line going forward). - **Security advisories (please update):** - Pre-compressed (Moderate) — [GHSA-cg27-w6jh-934r](https://github.com/static-web-server/static-web-server/security/advisories/GHSA-cg27-w6jh-934r) - Metrics (Moderate) — [GHSA-97q6-jph8-rxgm](https://github.com/static-web-server/static-web-server/security/advisories/GHSA-97q6-jph8-rxgm) - Basic authentication (Low) — [GHSA-cx3m-fg6q-xf3v](https://github.com/static-web-server/static-web-server/security/advisories/GHSA-cx3m-fg6q-xf3v) - Markdown (Low) — [GHSA-4wf2-76p9-xrmx](https://github.com/static-web-server/static-web-server/security/advisories/GHSA-4wf2-76p9-xrmx) - **Fixes:** pre-compressed variant body truncation; query-string preservation on URL redirects; metrics endpoint authentication order bypass; dependency + Alpine `3.23.5` / Debian `13.6` base bumps. - **New opt-in feature:** `--use-relative-root` (resolve webroot at request time) — not used by this recipe; no compose change required. ## Operator action required None — defaults preserve current behaviour for the recipe's existing flags. No `compose.yml`, `compose.git-pull.yml`, environment, or volume change is needed. ## Recipe version / release This PR intentionally leaves the `coop-cloud.${STACK_NAME}.version` label untouched — the operator bumps + tags + publishes with a single `abra recipe release` after the PR merges. Recommended semver bump: **minor** (`-y`) — matches the recipe's prior cadence (`2.42.0`→`2.43.0` bumped the recipe label minor `1.1.0`→`1.2.0`); upstream 2.44 ships security fixes + one new opt-in feature with no breaking changes for this recipe. Resulting label: `1.3.0+2.44.0`. **Recommended release command (operator, after PR merges):** ``` abra recipe release custom-html-tiny -y ```

autonomic-bot added 1 commit 2026-06-22 20:58:17 +00:00

chore: upgrade git to v2.54.0 a34432c505

autonomic-bot requested review from trav 2026-06-22 20:58:17 +00:00

autonomic-bot requested review from notplants 2026-06-22 20:58:17 +00:00

autonomic-bot commented 2026-06-22 20:58:25 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-06-22 20:58:33 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — custom-html-tiny @ a34432c5 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `a34432c5` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/947) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/947) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/947) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot commented 2026-06-26 03:45:18 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-06-26 03:45:31 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — custom-html-tiny @ a34432c5 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `a34432c5` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/959) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/959) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/959) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot commented 2026-07-03 02:39:27 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-07-03 02:39:48 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — custom-html-tiny @ a34432c5 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `a34432c5` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/971) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/971) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/971) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot commented 2026-07-13 17:29:27 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot changed title from chore: upgrade git to v2.54.0 to chore: upgrade app to 2.44.0 2026-08-03 21:08:40 +00:00

autonomic-bot added 1 commit 2026-08-03 21:08:42 +00:00

chore: upgrade app to 2.44.0 bf60c8254e

autonomic-bot commented 2026-08-03 21:08:58 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-08-03 21:45:25 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — custom-html-tiny @ bf60c825 ✅ passed (bridge-bypasswatcher)

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `bf60c825` ✅ **passed** (bridge-bypasswatcher) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1159) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1159) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1159) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot referenced this pull request 2026-08-03 22:24:03 +00:00

chore: upgrade static-web-server to 2.44.0 #10

autonomic-bot referenced this pull request 2026-08-11 19:20:24 +00:00

chore: upgrade static-web-server to 2.44.0 #10

All checks were successful

Hide all checks

cc-ci/testme cc-ci passed (bridge-bypass)

Details

You are not authorized to merge this pull request.

This pull request can be merged automatically.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin upgrade-a34432c:upgrade-a34432c

git checkout upgrade-a34432c

Sign in to join this conversation.

Reviewers

No Reviewers

notplants

trav

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

autonomic autonomic-bot kawaiipunk (KawaiiPunk) notplants trav (Trav Fryer)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: recipe-maintainers/custom-html-tiny#9