chore: upgrade app to 2.44.1 and git to v2.54.0 #9

Open
autonomic-bot wants to merge 3 commits from upgrade-a34432c into main
Owner

Upgrade image pins to the newest stable releases in the same tag scheme.

service file current new
app compose.yml joseluisq/static-web-server:2.43.0 joseluisq/static-web-server:2.44.1
git compose.git-pull.yml alpine/git:v2.52.0 alpine/git:v2.54.0

Upstream release notes: app static-web-server 2.43.0→2.44.1: https://github.com/static-web-server/static-web-server/releases/tag/v2.44.0 and https://github.com/static-web-server/static-web-server/releases/tag/v2.44.1
Upstream release notes: git alpine/git v2.52.0→v2.54.0: https://github.com/git/git/tree/v2.54.0/Documentation/RelNotes

Operator Action Required

  • No mandatory migration or compose change. The app command already pins -a/-p/-g/-d explicitly.
  • static-web-server v2 is now LTS; v3 is the future major. 2.44.0 adds an opt-in --use-relative-root; 2.44.1 tightens metrics + directory-archive behaviour.
  • Security in this window: 1 CVE (CVE-2026-75601, medium, GHSA-97q6-jph8-rxgm — metrics auth-order bypass, fixed 2.44.0), plus several GHSA-only moderate/low advice (2.44.0: GHSA-cg27-w6jh-934r, GHSA-cx3m-fg6q-xf3v, GHSA-4wf2-76p9-xrmx; 2.44.1: GHSA-cw5g-jrq8-536j, GHSA-3p6p-6r38-h33v).
  • The git sidecar is only in the optional compose.git-pull.yml overlay; it does a plain clone/pull and is unaffected by git 2.54 CLI changes.

The recipe version label is intentionally not bumped here. After merge, publish with:

abra recipe release custom-html-tiny -y

(minor bump: app moved 2.43 → 2.44; 2.44.0 carries a new feature alongside the fixes.)

Not merged — for operator review.

Upgrade image pins to the newest stable releases in the same tag scheme. | service | file | current | new | |---------|------|---------|-----| | app | `compose.yml` | `joseluisq/static-web-server:2.43.0` | `joseluisq/static-web-server:2.44.1` | | git | `compose.git-pull.yml` | `alpine/git:v2.52.0` | `alpine/git:v2.54.0` | **Upstream release notes:** app static-web-server 2.43.0→2.44.1: https://github.com/static-web-server/static-web-server/releases/tag/v2.44.0 and https://github.com/static-web-server/static-web-server/releases/tag/v2.44.1 **Upstream release notes:** git alpine/git v2.52.0→v2.54.0: https://github.com/git/git/tree/v2.54.0/Documentation/RelNotes ### Operator Action Required - No mandatory migration or compose change. The app command already pins `-a/-p/-g/-d` explicitly. - static-web-server v2 is now **LTS**; v3 is the future major. 2.44.0 adds an opt-in `--use-relative-root`; 2.44.1 tightens metrics + directory-archive behaviour. - Security in this window: **1 CVE** (CVE-2026-75601, medium, GHSA-97q6-jph8-rxgm — metrics auth-order bypass, fixed 2.44.0), plus several GHSA-only moderate/low advice (2.44.0: GHSA-cg27-w6jh-934r, GHSA-cx3m-fg6q-xf3v, GHSA-4wf2-76p9-xrmx; 2.44.1: GHSA-cw5g-jrq8-536j, GHSA-3p6p-6r38-h33v). - The `git` sidecar is only in the optional `compose.git-pull.yml` overlay; it does a plain clone/pull and is unaffected by git 2.54 CLI changes. The recipe version label is intentionally **not** bumped here. After merge, publish with: `abra recipe release custom-html-tiny -y` (minor bump: app moved 2.43 → 2.44; 2.44.0 carries a new feature alongside the fixes.) Not merged — for operator review.
autonomic-bot added 1 commit 2026-06-22 20:58:17 +00:00
autonomic-bot requested review from trav 2026-06-22 20:58:17 +00:00
autonomic-bot requested review from notplants 2026-06-22 20:58:17 +00:00
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-ci — custom-html-tiny @ a34432c5 ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `a34432c5` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/947/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/947) [![level](https://ci.commoninternet.net/runs/947/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/947) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/947) · [dashboard](https://ci.commoninternet.net/)
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-ci — custom-html-tiny @ a34432c5 ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `a34432c5` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/959/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/959) [![level](https://ci.commoninternet.net/runs/959/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/959) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/959) · [dashboard](https://ci.commoninternet.net/)
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-ci — custom-html-tiny @ a34432c5 ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `a34432c5` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/971/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/971) [![level](https://ci.commoninternet.net/runs/971/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/971) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/971) · [dashboard](https://ci.commoninternet.net/)
Author
Owner

!testme

!testme
autonomic-bot changed title from chore: upgrade git to v2.54.0 to chore: upgrade app to 2.44.0 2026-08-03 21:08:40 +00:00
autonomic-bot added 1 commit 2026-08-03 21:08:42 +00:00
chore: upgrade app to 2.44.0
cc-ci/testme cc-ci passed (bridge-bypass)
bf60c8254e
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-ci — custom-html-tiny @ bf60c825 ✅ passed (bridge-bypasswatcher)

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `bf60c825` ✅ **passed** (bridge-bypasswatcher) [![cc-ci result card](https://ci.commoninternet.net/runs/1159/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1159) [![level](https://ci.commoninternet.net/runs/1159/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1159) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1159) · [dashboard](https://ci.commoninternet.net/)
autonomic-bot changed title from chore: upgrade app to 2.44.0 to chore: upgrade app to 2.44.1 2026-10-09 02:17:12 +00:00
autonomic-bot added 1 commit 2026-10-09 02:17:14 +00:00
chore: upgrade app to 2.44.1
cc-ci/testme cc-ci: success
4b0036dae6
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-ci — custom-html-tiny @ 4b0036da ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `4b0036da` ✅ **passed** [![cc-ci result card](https://ci.autonomic.zone/runs/42/summary.png)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/42) [![level](https://ci.autonomic.zone/runs/42/badge.svg)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/42) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/42) · [dashboard](https://ci.autonomic.zone/)
autonomic-bot changed title from chore: upgrade app to 2.44.1 to chore: upgrade app to 2.44.1 and git to v2.54.0 2026-10-23 02:31:34 +00:00
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-ci — custom-html-tiny @ 4b0036da ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `custom-html-tiny` @ `4b0036da` ✅ **passed** [![cc-ci result card](https://ci.autonomic.zone/runs/74/summary.png)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/74) [![level](https://ci.autonomic.zone/runs/74/badge.svg)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/74) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/74) · [dashboard](https://ci.autonomic.zone/)
All checks were successful
cc-ci/testme cc-ci: success
You are not authorized to merge this pull request.
This pull request can be merged automatically.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin upgrade-a34432c:upgrade-a34432c
git checkout upgrade-a34432c
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/custom-html-tiny#9