chore: upgrade app to 2.44.1 #9

Open

autonomic-bot wants to merge 3 commits from upgrade-a34432c into main

pull from: upgrade-a34432c

merge into: :main

:main

:upgrade-a34432c

:upgrade-sws-2.44.0

:ci/regall-sweep

:upgrade-1.2.0+2.43.0

:regression-bad-image

:v4-red-verify

:regression-bad-tag

:regression-v4

:upgrade-1.1.0+2.42.0

:serve-hidden-files

:already-in-upstream-v7

Conversation 11 Commits 3 Files Changed 2

+2 -2

autonomic-bot commented 2026-06-22 20:58:16 +00:00

Owner

Copy Link

Copy Source

Recipe upgrade — custom-html-tiny

Extends this existing upgrade PR with the next app patch release.
The branch already carried the git bump (v2.52.0 → v2.54.0) and the
app bump to 2.44.0; this commit adds static-web-server 2.44.0 → 2.44.1.

Image tag table

service	image	current	new	notes
app	joseluisq/static-web-server	2.44.0	2.44.1	patch: bug fixes + security improvements (metrics / directory-listing download) + dependency updates. No breaking changes.
git	alpine/git	v2.52.0	v2.54.0	(already on this PR — unchanged by this commit)

Required compose/config changes

• compose.yml: app image joseluisq/static-web-server:2.44.0 → 2.44.1.
• No env/volume/label changes; recipe version label left untouched (operator releases).

Upstream release notes

Upstream release notes: app (static-web-server) 2.44.0→2.44.1: https://github.com/static-web-server/static-web-server/releases/tag/v2.44.1

Key items in v2.44.1:

• Security improvements in the metrics and directory-listing download features.
• Fix: apply file-type cache headers only to 2xx/304 (else no-cache).
• Fix: rounding errors when parsing HTTP Accept-Encoding quality values.
• Fix: restore nested path matching for {**} glob captures in URL rewrites/redirects.
• Dependency updates (incl. async-std, RUSTSEC-2025-0052); HTTP/2 restricted to TLS.

Operator action required

None. Pure patch image-tag bump on a plain-semver image; defaults preserve current behaviour for the recipe's existing flags (-d, HTTP_SUBDIR).

Advisory scan (deterministic)

advisory-scan.py custom-html-tiny --from 2.44.0 --to 2.44.1 → 0 CVEs version-classified as fixed by this window (33 seen but unjudgeable in-window, being advisories for the sidecar git image). Source checked: 8 (5 registry URLs + advisory APIs). ADDITIVE to the release-note read above.

Recommended release command (operator, after merge)

abra recipe release custom-html-tiny -y

The PR does not bump the version label. The label is still 1.2.0+2.43.0; the merged PR aggregates the 2.43.0 → 2.44.1 app bump (2.44.0 added an opt-in feature → minor) plus the git bump, so a minor release bump is appropriate.

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

## Recipe upgrade — custom-html-tiny Extends this existing upgrade PR with the next `app` patch release. The branch already carried the `git` bump (`v2.52.0 → v2.54.0`) and the `app` bump to `2.44.0`; this commit adds `static-web-server 2.44.0 → 2.44.1`. ### Image tag table | service | image | current | new | notes | |---------|-----------------------------|---------|---------|-------| | app | joseluisq/static-web-server | 2.44.0 | 2.44.1 | patch: bug fixes + security improvements (metrics / directory-listing download) + dependency updates. No breaking changes. | | git | alpine/git | v2.52.0 | v2.54.0 | (already on this PR — unchanged by this commit) | ### Required compose/config changes - `compose.yml`: `app` image `joseluisq/static-web-server:2.44.0` → `2.44.1`. - No env/volume/label changes; recipe version label left untouched (operator releases). ### Upstream release notes **Upstream release notes:** app (static-web-server) 2.44.0→2.44.1: https://github.com/static-web-server/static-web-server/releases/tag/v2.44.1 Key items in v2.44.1: - Security improvements in the **metrics** and **directory-listing download** features. - Fix: apply file-type cache headers only to `2xx`/`304` (else `no-cache`). - Fix: rounding errors when parsing HTTP `Accept-Encoding` quality values. - Fix: restore nested path matching for `{**}` glob captures in URL rewrites/redirects. - Dependency updates (incl. `async-std`, RUSTSEC-2025-0052); HTTP/2 restricted to TLS. ### Operator action required None. Pure patch image-tag bump on a plain-semver image; defaults preserve current behaviour for the recipe's existing flags (`-d`, `HTTP_SUBDIR`). ### Advisory scan (deterministic) `advisory-scan.py custom-html-tiny --from 2.44.0 --to 2.44.1` → **0 CVEs** version-classified as fixed by this window (33 seen but unjudgeable in-window, being advisories for the sidecar `git` image). Source checked: 8 (5 registry URLs + advisory APIs). ADDITIVE to the release-note read above. ### Recommended release command (operator, after merge) ``` abra recipe release custom-html-tiny -y ``` The PR does **not** bump the version label. The label is still `1.2.0+2.43.0`; the merged PR aggregates the `2.43.0 → 2.44.1` app bump (2.44.0 added an opt-in feature → minor) plus the `git` bump, so a minor release bump is appropriate. Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants

autonomic-bot added 1 commit 2026-06-22 20:58:17 +00:00

chore: upgrade git to v2.54.0 a34432c505

autonomic-bot requested review from trav 2026-06-22 20:58:17 +00:00

autonomic-bot requested review from notplants 2026-06-22 20:58:17 +00:00

autonomic-bot commented 2026-06-22 20:58:25 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-06-22 20:58:33 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — custom-html-tiny @ a34432c5 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `a34432c5` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/947) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/947) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/947) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot commented 2026-06-26 03:45:18 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-06-26 03:45:31 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — custom-html-tiny @ a34432c5 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `a34432c5` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/959) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/959) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/959) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot commented 2026-07-03 02:39:27 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-07-03 02:39:48 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — custom-html-tiny @ a34432c5 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `a34432c5` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/971) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/971) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/971) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot commented 2026-07-13 17:29:27 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot changed title from chore: upgrade git to v2.54.0 to chore: upgrade app to 2.44.0 2026-08-03 21:08:40 +00:00

autonomic-bot added 1 commit 2026-08-03 21:08:42 +00:00

chore: upgrade app to 2.44.0 bf60c8254e

autonomic-bot commented 2026-08-03 21:08:58 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-08-03 21:45:25 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — custom-html-tiny @ bf60c825 ✅ passed (bridge-bypasswatcher)

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `bf60c825` ✅ **passed** (bridge-bypasswatcher) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1159) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1159) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1159) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot referenced this pull request 2026-08-03 22:24:03 +00:00

chore: upgrade static-web-server to 2.44.0 #10

autonomic-bot referenced this pull request 2026-08-11 19:20:24 +00:00

chore: upgrade static-web-server to 2.44.0 #10

autonomic-bot changed title from chore: upgrade app to 2.44.0 to chore: upgrade app to 2.44.1 2026-10-09 02:17:12 +00:00

autonomic-bot added 1 commit 2026-10-09 02:17:14 +00:00

chore: upgrade app to 2.44.1 4b0036dae6

autonomic-bot commented 2026-10-09 02:17:23 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-10-09 02:17:47 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — custom-html-tiny @ 4b0036da ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `4b0036da` ✅ **passed** [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/42) [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/42) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/42) · [dashboard](https://ci.autonomic.zone/)

All checks were successful

Hide all checks

cc-ci/testme cc-ci: success

Details

You are not authorized to merge this pull request.

This pull request can be merged automatically.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin upgrade-a34432c:upgrade-a34432c

git checkout upgrade-a34432c

Sign in to join this conversation.

Reviewers

No Reviewers

trav

notplants

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

autonomic autonomic-bot kawaiipunk (KawaiiPunk) notplants trav (Trav Fryer)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: recipe-maintainers/custom-html-tiny#9