recipe-maintainers/custom-html-tiny
0
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

chore: upgrade app to 2.44.2 #11

Open
autonomic-bot wants to merge 1 commits from upgrade-c61011f into main
pull from: upgrade-c61011f
merge into: :main
Conversation 2 Commits 1 Files Changed 1
+1 -1
autonomic-bot commented 2026-11-13 03:32:01 +00:00
Owner
Copy Link
Copy Source

Recipe upgrade: custom-html-tiny joseluisq/static-web-server 2.44.1 → 2.44.2

Single patch bump of the app image. One commit, based on current upstream main.

Image changes

service image current new
app joseluisq/static-web-server 2.44.1 2.44.2
git (optional compose.git-pull.yml overlay) alpine/git v2.54.0 unchanged (already current)

Upstream release notes: app (static-web-server) 2.44.1→2.44.2: https://github.com/static-web-server/static-web-server/releases/tag/v2.44.2

What changed upstream (2.44.2)

  • Bug-fix / security release. Upstream flags security updates to basic authentication, HTTP OPTIONS request handling, and the ignore-hidden-files feature and says detailed advisories will follow "in the next few days" (so they are not yet in the advisory databases — see scan note below).
  • Dependency updates; Alpine bumped to 3.24.4 / Debian to 13.7 in upstream images.
  • Release binaries/Docker images no longer include the experimental Cargo feature set: an [advanced.memory-cache] config section still loads but is ignored (files served from disk). This recipe does not use memory-cache, so there is no behaviour change here.

Compose / config changes required

None. The recipe already pins -a 0.0.0.0 -p 80 -d /var/www/http/$HTTP_SUBDIR explicitly, so it does not depend on any SWS defaults (root dir / host / port). No migration step required.

Advisory scan (deterministic)

advisory-scan.py custom-html-tiny --from 2.44.1 --to 2.44.2 reports 0 CVEs version-classified as fixed by this window. Caveat: the v2.44.2 release notes explicitly announce security fixes whose advisories are not yet published, so the deterministic number is a floor for this release; the upgrade is taken for those fixes. Scan sources checked: 8 (no failed sources).

Verification

  • abra recipe lint: no errors (only the pre-existing R002 healthcheck warning; recipe has no healthcheck by design).
  • Direct WIP deploy on cc-ci (dev-custom-html-tiny, --chaos): deployed from this branch head, 1/1 running, served a test file successfully, no crash-loop or config error; dev deploy torn down afterwards.
  • CI: !testme on this PR.

Operator action required

This PR intentionally does not bump coop-cloud.${STACK_NAME}.version. After merging, publish with:

abra recipe release custom-html-tiny -z

(patch bump: 1.2.1 → 1.2.2; no compose/config change, bug/security fix only)

NOT merged — for operator review.

CI verification is run against this one-commit PR head. NOT merged — for operator review.

cc @trav @notplants

## Recipe upgrade: custom-html-tiny `joseluisq/static-web-server` 2.44.1 → 2.44.2 Single patch bump of the app image. One commit, based on current upstream `main`. ### Image changes | service | image | current | new | |---------|-------|---------|-----| | app | joseluisq/static-web-server | 2.44.1 | **2.44.2** | | git (optional `compose.git-pull.yml` overlay) | alpine/git | v2.54.0 | unchanged (already current) | **Upstream release notes:** app (static-web-server) 2.44.1→2.44.2: https://github.com/static-web-server/static-web-server/releases/tag/v2.44.2 ### What changed upstream (2.44.2) - Bug-fix / security release. Upstream flags **security updates to basic authentication, HTTP `OPTIONS` request handling, and the ignore-hidden-files feature** and says detailed advisories will follow "in the next few days" (so they are not yet in the advisory databases — see scan note below). - Dependency updates; Alpine bumped to 3.24.4 / Debian to 13.7 in upstream images. - Release binaries/Docker images no longer include the `experimental` Cargo feature set: an `[advanced.memory-cache]` config section still loads but is ignored (files served from disk). This recipe does not use `memory-cache`, so there is no behaviour change here. ### Compose / config changes required None. The recipe already pins `-a 0.0.0.0 -p 80 -d /var/www/http/$HTTP_SUBDIR` explicitly, so it does not depend on any SWS defaults (root dir / host / port). No migration step required. ### Advisory scan (deterministic) `advisory-scan.py custom-html-tiny --from 2.44.1 --to 2.44.2` reports **0 CVEs version-classified as fixed by this window**. Caveat: the v2.44.2 release notes explicitly announce security fixes whose advisories are not yet published, so the deterministic number is a floor for this release; the upgrade is taken for those fixes. Scan sources checked: 8 (no failed sources). ### Verification - `abra recipe lint`: no errors (only the pre-existing `R002` healthcheck warning; recipe has no healthcheck by design). - Direct WIP deploy on cc-ci (`dev-custom-html-tiny`, `--chaos`): deployed from this branch head, 1/1 running, served a test file successfully, no crash-loop or config error; dev deploy torn down afterwards. - CI: `!testme` on this PR. ### Operator action required This PR intentionally does **not** bump `coop-cloud.${STACK_NAME}.version`. After merging, publish with: ``` abra recipe release custom-html-tiny -z ``` (patch bump: 1.2.1 → 1.2.2; no compose/config change, bug/security fix only) NOT merged — for operator review. CI verification is run against this one-commit PR head. NOT merged — for operator review. cc @trav @notplants
autonomic-bot added 1 commit 2026-11-13 03:32:01 +00:00
chore: upgrade app to 2.44.2
cc-ci/testme cc-ci: success
Details
2a559ee259
autonomic-bot requested review from trav 2026-11-13 03:32:01 +00:00
autonomic-bot requested review from notplants 2026-11-13 03:32:01 +00:00
autonomic-bot commented 2026-11-13 03:32:15 +00:00
Author
Owner
Copy Link
Copy Source

!testme

!testme
autonomic-bot commented 2026-11-13 03:32:26 +00:00
Author
Owner
Copy Link
Copy Source

🌻 cc-ci — custom-html-tiny @ 2a559ee2 ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `2a559ee2` ✅ **passed** [![cc-ci result card](https://ci.autonomic.zone/runs/143/summary.png)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/143) [![level](https://ci.autonomic.zone/runs/143/badge.svg)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/143) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/143) · [dashboard](https://ci.autonomic.zone/)
All checks were successful
cc-ci/testme cc-ci: success
Details
You are not authorized to merge this pull request.
This pull request can be merged automatically.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin upgrade-c61011f:upgrade-c61011f
git checkout upgrade-c61011f
Sign in to join this conversation.
Reviewers
No Reviewers
trav
notplants
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
aadil (alizeh) autonomic autonomic-bot kawaiipunk (KawaiiPunk) notplants spacehobo (Nick Moffitt) trav (Trav Fryer)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/custom-html-tiny#11