chore: upgrade app to discourse/discourse:2026.7.4 #12

Closed
autonomic-bot wants to merge 0 commits from upgrade-5906ec9 into main
Owner

Upgrade the app image on the ESR line from discourse/discourse:2026.7.3 to 2026.7.4 (a security/patch release, published 2026-10-23).

Images

service current new
app (+ in-container sidekiq) discourse/discourse:2026.7.3 discourse/discourse:2026.7.4
db discourse/postgres:pg18 unchanged
redis redis:8.10-alpine unchanged

Upstream release notes

Operator action required

None for this patch bump. The official image runs Rails migrations automatically on boot; no env/config/migration change is needed by 2026.7.4. The postgres major is intentionally not bumped.

The recipe version label is deliberately left at 1.1.2+2026.7.3. After this PR merges, publish with:

abra recipe release discourse -z

(expected 1.1.3+2026.7.4; patch bump — security/patch release on the same ESR line)

Verification

  • Direct --chaos dev deploy on cc-ci at dev-discourse.ci.commoninternet.net: app/db/redis all 1/1; GET /srv/status -> ok; GET /about.json reports version 2026.7.4; GET / -> 200. Dev deploy torn down (0 leftover stacks/volumes).
  • abra recipe lint discourse -C -n: all error rules satisfied; only pre-existing warnings (non-semver pg18, long smtp_password secret).
  • Advisory scan 2026.7.3 -> 2026.7.4: 5 GHSA security advisories fixed (no CVE ids assigned); 1 low CVE-2025-53016 left STILL-UNKNOWN (no published fix version); no failed sources.

Nothing is merged. This PR is for operator review.

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

Upgrade the app image on the ESR line from `discourse/discourse:2026.7.3` to `2026.7.4` (a security/patch release, published 2026-10-23). ## Images | service | current | new | |---|---|---| | app (+ in-container sidekiq) | `discourse/discourse:2026.7.3` | `discourse/discourse:2026.7.4` | | db | `discourse/postgres:pg18` | unchanged | | redis | `redis:8.10-alpine` | unchanged | ## Upstream release notes - app `discourse/discourse` 2026.7.3 -> 2026.7.4: https://releases.discourse.org/changelog/v2026.7.4/ - full diff: https://github.com/discourse/discourse/compare/v2026.7.3...v2026.7.4 (47 commits, incl. 5 security fixes) - db `discourse/postgres` pg18: unchanged (non-semver tag; already newest major) - redis `redis:8.10-alpine`: unchanged (already newest line) ## Operator action required None for this patch bump. The official image runs Rails migrations automatically on boot; no env/config/migration change is needed by 2026.7.4. The postgres major is intentionally not bumped. The recipe version label is deliberately left at `1.1.2+2026.7.3`. After this PR merges, publish with: abra recipe release discourse -z (expected `1.1.3+2026.7.4`; patch bump — security/patch release on the same ESR line) ## Verification - Direct `--chaos` dev deploy on cc-ci at `dev-discourse.ci.commoninternet.net`: app/db/redis all 1/1; `GET /srv/status` -> `ok`; `GET /about.json` reports version `2026.7.4`; `GET /` -> 200. Dev deploy torn down (0 leftover stacks/volumes). - `abra recipe lint discourse -C -n`: all error rules satisfied; only pre-existing warnings (non-semver `pg18`, long `smtp_password` secret). - Advisory scan 2026.7.3 -> 2026.7.4: 5 GHSA security advisories fixed (no CVE ids assigned); 1 low CVE-2025-53016 left STILL-UNKNOWN (no published fix version); no failed sources. Nothing is merged. This PR is for operator review. Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants
autonomic-bot added 1 commit 2026-10-30 02:33:02 +00:00
chore: upgrade app to discourse/discourse:2026.7.4
cc-ci/testme cc-ci: success
continuous-integration/drone/pr Build was killed
5906ec9269
autonomic-bot requested review from trav 2026-10-30 02:33:02 +00:00
autonomic-bot requested review from notplants 2026-10-30 02:33:02 +00:00
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-ci — discourse @ 5906ec92 ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `discourse` @ `5906ec92` ✅ **passed** [![cc-ci result card](https://ci.autonomic.zone/runs/102/summary.png)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/102) [![level](https://ci.autonomic.zone/runs/102/badge.svg)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/102) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/102) · [dashboard](https://ci.autonomic.zone/)
Author
Owner

Upstreamed to git.coopcloud.tech/coop-cloud/discourse and released as 1.1.3+2026.7.4: https://git.coopcloud.tech/coop-cloud/discourse/src/tag/1.1.3+2026.7.4 — closing.

Upstreamed to git.coopcloud.tech/coop-cloud/discourse and released as `1.1.3+2026.7.4`: https://git.coopcloud.tech/coop-cloud/discourse/src/tag/1.1.3+2026.7.4 — closing.
autonomic-bot closed this pull request 2026-11-02 19:33:11 +00:00

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/discourse#12