chore: upgrade static-web-server to 2.44.0 #10

Closed
autonomic-bot wants to merge 1 commits from upgrade-sws-2.44.0 into main
Owner

Upgrade: static-web-server 2.43.0 → 2.44.0

Bumps the app service image (joseluisq/static-web-server) from 2.43.0 to 2.44.0. Static-web-server-only PR — does not touch the git service (the git v2.54.0 bump is tracked separately on PR #9).

Image tag table

service image current new
app joseluisq/static-web-server 2.43.0 2.44.0

Upstream release notes: app 2.43.0→2.44.0: https://github.com/static-web-server/static-web-server/releases/tag/v2.44.0

What changed upstream (v2.44.0)

  • Security: GHSA-cg27-w6jh-934r (pre-compressed, Moderate), GHSA-97q6-jph8-rxgm (metrics, Moderate), GHSA-cx3m-fg6q-xf3v (basic-auth, Low), GHSA-4wf2-76p9-xrmx (markdown, Low).
  • Fixes: pre-compressed variant body truncation; query-string preserved on URL redirects; metrics-endpoint auth order; dependency updates; Alpine 3.23.5 / Debian 13.6 base images.
  • New opt-in: --use-relative-root (https://static-web-server.net/v2/features/use-relative-root).
  • v2 is now LTS — no impact on this recipe (stays on the 2.x line).

Operator action required

None — the new feature is opt-in; defaults preserve current behaviour. No compose/config change required.

Recommended release command (after merge)

abra recipe release custom-html-tiny -y

(yields 1.3.0+2.44.0 — minor bump, matching the prior 2.42→2.43 minor pattern; security fixes + new opt-in feature.)

Verification

  • Deployed WIP with --chaos on the cc-ci swarm under dev-custom-html-tiny.ci.commoninternet.net: served HTTP 200 with joseluisq/static-web-server:2.44.0; torn down.
  • !testme (cc-ci recipe CI) — see results below / PR comments.

NOT merged — for operator review.

cc @trav @notplants

## Upgrade: static-web-server 2.43.0 → 2.44.0 Bumps the `app` service image (`joseluisq/static-web-server`) from `2.43.0` to `2.44.0`. Static-web-server-only PR — does **not** touch the `git` service (the git v2.54.0 bump is tracked separately on PR #9). ### Image tag table | service | image | current | new | |---------|-------|---------|-----| | app | joseluisq/static-web-server | 2.43.0 | 2.44.0 | **Upstream release notes:** app 2.43.0→2.44.0: https://github.com/static-web-server/static-web-server/releases/tag/v2.44.0 ### What changed upstream (v2.44.0) - **Security:** GHSA-cg27-w6jh-934r (pre-compressed, Moderate), GHSA-97q6-jph8-rxgm (metrics, Moderate), GHSA-cx3m-fg6q-xf3v (basic-auth, Low), GHSA-4wf2-76p9-xrmx (markdown, Low). - **Fixes:** pre-compressed variant body truncation; query-string preserved on URL redirects; metrics-endpoint auth order; dependency updates; Alpine 3.23.5 / Debian 13.6 base images. - **New opt-in:** `--use-relative-root` (https://static-web-server.net/v2/features/use-relative-root). - **v2 is now LTS** — no impact on this recipe (stays on the 2.x line). ### Operator action required None — the new feature is opt-in; defaults preserve current behaviour. No compose/config change required. ### Recommended release command (after merge) ``` abra recipe release custom-html-tiny -y ``` (yields `1.3.0+2.44.0` — minor bump, matching the prior 2.42→2.43 minor pattern; security fixes + new opt-in feature.) ### Verification - Deployed WIP with `--chaos` on the cc-ci swarm under `dev-custom-html-tiny.ci.commoninternet.net`: served HTTP 200 with `joseluisq/static-web-server:2.44.0`; torn down. - `!testme` (cc-ci recipe CI) — see results below / PR comments. NOT merged — for operator review. cc @trav @notplants
autonomic-bot added 1 commit 2026-08-03 22:24:03 +00:00
autonomic-bot requested review from trav 2026-08-03 22:24:03 +00:00
autonomic-bot requested review from notplants 2026-08-03 22:24:03 +00:00
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-cicustom-html-tiny @ da7ec03 passed

cc-ci result card

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `da7ec03` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/1162/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1162) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1162) · [dashboard](https://ci.commoninternet.net/)
Author
Owner

Closing — superseded by #9, which is a strict superset.

Both bump static-web-server 2.43.0 → 2.44.0 in compose.yml. #9 additionally bumps alpine/git v2.52.0 → v2.54.0 in compose.git-pull.yml, so merging #9 delivers everything this PR does and more. Both are green and current with main.

Closed by /cc-ci-cleanup. Reopen if you would rather take the narrower change — in which case close #9 instead.

**Closing — superseded by #9, which is a strict superset.** Both bump `static-web-server` 2.43.0 → 2.44.0 in `compose.yml`. #9 additionally bumps `alpine/git` v2.52.0 → v2.54.0 in `compose.git-pull.yml`, so merging #9 delivers everything this PR does and more. Both are green and current with `main`. Closed by `/cc-ci-cleanup`. **Reopen if** you would rather take the narrower change — in which case close #9 instead.
autonomic-bot closed this pull request 2026-08-11 19:20:24 +00:00

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/custom-html-tiny#10