recipe-maintainers/lasuite-meet
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: upgrade to 1.36.2 (meet v1.36.0 -> v1.36.2, nginx 1.31.7 -> 1.31.8) #12

Closed
autonomic-bot wants to merge 0 commits from upgrade-1.36.2 into main
pull from: upgrade-1.36.2
merge into: :main
Conversation 4 Commits - Files Changed -
+4 -4
autonomic-bot commented 2026-10-23 03:38:01 +00:00
Owner
Copy Link
Copy Source

lasuite-meet upgrade: meet v1.36.0 -> v1.36.2, nginx 1.31.7 -> 1.31.8

service image current new
app lasuite/meet-frontend v1.36.0 v1.36.2
backend lasuite/meet-backend v1.36.0 v1.36.2
celery lasuite/meet-backend v1.36.0 v1.36.2
web nginx 1.31.7 1.31.8
db pgautoupgrade/pgautoupgrade 18-debian unchanged
redis redis 8.10.2 unchanged
livekit livekit/livekit-server v1.13.10 unchanged

Upstream release notes: meet (app/backend/celery) v1.36.0->v1.36.2: https://github.com/suitenumerique/meet/blob/v1.36.2/CHANGELOG.md
Upstream release notes: nginx (web) 1.31.7->1.31.8: https://nginx.org/en/CHANGES

What changed

  • meet v1.36.1: upgrade Pillow to 13.0.0 to fix CVE-2026-112403; distrust compromised eMudhra emSign G3 CA roots.
  • meet v1.36.2: Node 22.23.4 / 24.22.1 security releases.
  • nginx 1.31.8: bugfix-only (internal JSON parser API, working_directory path semantics, HTTP/3 SIGBUS, kTLS alerts); no new CVE.
  • No compose/env/config changes are required. redis, livekit and db stay as-is: abra reports them already current, and the meet v1.36.0->v1.36.2 notes require no newer livekit.

Operator Action Required

None. (For awareness: v1.36.1 distrusts the compromised eMudhra emSign G3 CA roots; review only if this deployment explicitly pins that chain out of band.)

Release command (operator, after merge — nothing was released here)

abra recipe release lasuite-meet -z

Verification

Direct dev-lasuite-meet chaos deploy on cc-ci converged: all 7 services 1/1, backend Django migrations applied, celery ready, web served HTTP 200, livekit started cleanly. The dev deploy was torn down and verified with no leaked stack, volumes, secrets or configs. !testme results are posted below.

NOT merged — for operator review.

cc @trav @notplants

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

## lasuite-meet upgrade: meet v1.36.0 -> v1.36.2, nginx 1.31.7 -> 1.31.8 | service | image | current | new | |---|---|---|---| | app | lasuite/meet-frontend | v1.36.0 | v1.36.2 | | backend | lasuite/meet-backend | v1.36.0 | v1.36.2 | | celery | lasuite/meet-backend | v1.36.0 | v1.36.2 | | web | nginx | 1.31.7 | 1.31.8 | | db | pgautoupgrade/pgautoupgrade | 18-debian | unchanged | | redis | redis | 8.10.2 | unchanged | | livekit | livekit/livekit-server | v1.13.10 | unchanged | **Upstream release notes:** meet (app/backend/celery) v1.36.0->v1.36.2: https://github.com/suitenumerique/meet/blob/v1.36.2/CHANGELOG.md **Upstream release notes:** nginx (web) 1.31.7->1.31.8: https://nginx.org/en/CHANGES ### What changed - meet v1.36.1: upgrade Pillow to 13.0.0 to fix CVE-2026-112403; distrust compromised eMudhra emSign G3 CA roots. - meet v1.36.2: Node 22.23.4 / 24.22.1 security releases. - nginx 1.31.8: bugfix-only (internal JSON parser API, working_directory path semantics, HTTP/3 SIGBUS, kTLS alerts); no new CVE. - No compose/env/config changes are required. redis, livekit and db stay as-is: abra reports them already current, and the meet v1.36.0->v1.36.2 notes require no newer livekit. ### Operator Action Required None. (For awareness: v1.36.1 distrusts the compromised eMudhra emSign G3 CA roots; review only if this deployment explicitly pins that chain out of band.) ### Release command (operator, after merge — nothing was released here) `abra recipe release lasuite-meet -z` ### Verification Direct `dev-lasuite-meet` chaos deploy on cc-ci converged: all 7 services 1/1, backend Django migrations applied, celery ready, web served HTTP 200, livekit started cleanly. The dev deploy was torn down and verified with no leaked stack, volumes, secrets or configs. `!testme` results are posted below. NOT merged — for operator review. cc @trav @notplants Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants
autonomic-bot added 1 commit 2026-10-23 03:38:01 +00:00
chore: upgrade to 1.36.2 (meet v1.36.0 -> v1.36.2, nginx 1.31.7 -> 1.31.8)
cc-ci/testme cc-ci: success
Details
e44a00a00e
autonomic-bot requested review from trav 2026-10-23 03:38:01 +00:00
autonomic-bot requested review from notplants 2026-10-23 03:38:01 +00:00
autonomic-bot commented 2026-10-23 03:38:06 +00:00
Author
Owner
Copy Link
Copy Source

!testme

!testme
autonomic-bot commented 2026-10-23 03:38:08 +00:00
Author
Owner
Copy Link
Copy Source

🌻 cc-ci — lasuite-meet @ e44a00a0 ❌ failure

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `lasuite-meet` @ `e44a00a0` ❌ **failure** [![cc-ci result card](https://ci.autonomic.zone/runs/80/summary.png)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/80) [![level](https://ci.autonomic.zone/runs/80/badge.svg)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/80) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/80) · [dashboard](https://ci.autonomic.zone/)
autonomic-bot commented 2026-10-23 03:39:54 +00:00
Author
Owner
Copy Link
Copy Source

!testme

!testme
autonomic-bot commented 2026-10-23 03:40:21 +00:00
Author
Owner
Copy Link
Copy Source

🌻 cc-ci — lasuite-meet @ e44a00a0 ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `lasuite-meet` @ `e44a00a0` ✅ **passed** [![cc-ci result card](https://ci.autonomic.zone/runs/81/summary.png)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/81) [![level](https://ci.autonomic.zone/runs/81/badge.svg)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/81) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/81) · [dashboard](https://ci.autonomic.zone/)
notplants closed this pull request 2026-10-26 16:32:20 +00:00

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
trav
notplants
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
aadil (alizeh) autonomic autonomic-bot kawaiipunk (KawaiiPunk) notplants spacehobo (Nick Moffitt) trav (Trav Fryer)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/lasuite-meet#12