From a1a54d15ac1a97dd58e6fb12e9b7f6d7386c67a4 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Wed, 21 Oct 2026 10:07:42 +0000 Subject: [PATCH] chore: update upstream versions and review evidence --- CHANGELOG.md | 2 ++ images/base/Dockerfile | 12 +++---- scripts/remote-dev-context7-device-login.py | 4 +-- .../test-remote-dev-context7-device-login.py | 4 +-- third_party/antigravity-cli-candidate.json | 20 ++++++------ third_party/inventory.json | 8 ++--- .../standalone-artifact-inspection.json | 32 +++++++++---------- third_party/standalone-artifact-inspection.md | 4 +-- versions.env | 16 +++++----- 9 files changed, 52 insertions(+), 50 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 97e9949..a905ee3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,6 +10,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), +- 2026-10-21 — GitHub CLI 2.102.0 → 2.102.1; mise 2026.10.13 → 2026.10.17; Context7 CLI (transient) 0.8.0 → 0.8.1. + - 2026-10-18 — mise 2026.10.12 → 2026.10.13. - 2026-10-17 — Codex CLI 0.162.1 → 0.163.0; mise 2026.10.8 → 2026.10.12; Node.js 24.21.0 → 24.22.0; npm 12.2.0 → 12.2.1; uv 0.13.0 → 0.13.1; Context7 CLI (transient) 0.6.0 → 0.8.0. diff --git a/images/base/Dockerfile b/images/base/Dockerfile index cfdfb99..18e60a1 100644 --- a/images/base/Dockerfile +++ b/images/base/Dockerfile @@ -8,15 +8,15 @@ ARG UBUNTU_VERSION ARG UBUNTU_DIGEST ARG TARGETARCH ARG BASE_VERSION=0.1.1-dev -ARG GH_VERSION=2.102.0 -ARG GH_AMD64_SHA256=bb766f710eef8ede859c18578c72c327597cd4c8a85b06001b1f3843c6019386 -ARG GH_ARM64_SHA256=7862c86c72f43df3a2d93ddde6f473285b4e2af61b494849846827e513ef6484 +ARG GH_VERSION=2.102.1 +ARG GH_AMD64_SHA256=77b9e297e94c50336823d0f84de7ef1be60cba704601fa0d98f129f47a94987b +ARG GH_ARM64_SHA256=5019b3cc6e8a03bb4d88600f8dbda2add8e6407705c159b0c63151036e77a1af ARG TTYD_VERSION=1.7.7 ARG TTYD_AMD64_SHA256=8a217c968aba172e0dbf3f34447218dc015bc4d5e59bf51db2f2cd12b7be4f55 ARG TTYD_ARM64_SHA256=b38acadd89d1d396a0f5649aa52c539edbad07f4bc7348b27b4f4b7219dd4165 -ARG MISE_VERSION=2026.10.13 -ARG MISE_AMD64_SHA256=94c45523c7b6760b7da704f16051171ca32e8447a849a02266a439a4455e9a12 -ARG MISE_ARM64_SHA256=983fabf36625566f216400b907b33b4daca99adb5bc3d3cdab123b5e791575b2 +ARG MISE_VERSION=2026.10.17 +ARG MISE_AMD64_SHA256=fe6dd17e68e09682b31d2e7bb7bb755d22636ac1af5d94621e300f2ca9e9fe8a +ARG MISE_ARM64_SHA256=e90904144ba4377c5fbe385f429830282c68f3b4f9c690bf6c5a2ae9b74a809b ARG PYTHON_VERSION=3.14.8 ARG PYTHON_315_VERSION=3.15.0 ARG NODE_VERSION=24.22.0 diff --git a/scripts/remote-dev-context7-device-login.py b/scripts/remote-dev-context7-device-login.py index fa04c20..1b50f76 100644 --- a/scripts/remote-dev-context7-device-login.py +++ b/scripts/remote-dev-context7-device-login.py @@ -28,9 +28,9 @@ CONTEXT7_CLI_NAME = "ctx7" CONTEXT7_KEY_PREFIX = "ctx7sk-" CONTEXT7_CREDENTIALS_RELATIVE = Path("context7") / "credentials.json" -REVIEWED_CONTEXT7_CLI_VERSION = "0.8.0" +REVIEWED_CONTEXT7_CLI_VERSION = "0.8.1" REVIEWED_CONTEXT7_CLI_INTEGRITY = ( - "sha512-iEhY9CS2aujMLbSh6WqFPiZgUTUuU+RRvANoNlX+PYUuwlpup83joVjVoI3Xvok6nlHeESYiqH4AhoDmiYiukA==" + "sha512-Co+cXpXk34FdknwUaCah88xSsjSSC7fy77Uz9mPjvdjFmho5F6qxG2X0TaxgqFDh9qAaSFS9Nn50j30C8rwRGg==" ) EXPECTED_PACKAGE_LICENSE = "MIT" NPM_REGISTRY = "https://registry.npmjs.org/" diff --git a/scripts/test-remote-dev-context7-device-login.py b/scripts/test-remote-dev-context7-device-login.py index d06f0d0..d6d906d 100644 --- a/scripts/test-remote-dev-context7-device-login.py +++ b/scripts/test-remote-dev-context7-device-login.py @@ -101,9 +101,9 @@ def write_mise_config(path: Path, node_version: str = "24.19.0") -> None: def assert_reviewed_version_contract(module) -> None: - if module.REVIEWED_CONTEXT7_CLI_VERSION != "0.8.0": + if module.REVIEWED_CONTEXT7_CLI_VERSION != "0.8.1": raise AssertionError("Context7 reviewed CLI version drifted unexpectedly") - if module.reviewed_cli_version() != "0.8.0": + if module.reviewed_cli_version() != "0.8.1": raise AssertionError("reviewed Context7 CLI version was not resolved") if module.reviewed_cli_integrity() != module.REVIEWED_CONTEXT7_CLI_INTEGRITY: raise AssertionError("reviewed Context7 CLI integrity was not resolved") diff --git a/third_party/antigravity-cli-candidate.json b/third_party/antigravity-cli-candidate.json index d9e8157..451b3bd 100644 --- a/third_party/antigravity-cli-candidate.json +++ b/third_party/antigravity-cli-candidate.json @@ -1,11 +1,11 @@ { "archive": { "content_type": "application/x-tar", - "final_url": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.2-4835981233356800/linux-x64/cli_linux_x64.tar.gz", + "final_url": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.4-4783783166214144/linux-x64/cli_linux_x64.tar.gz", "member": "antigravity", - "sha512": "4a393afc1369cee94e817c1b430c9128d02b12ebd4d5703ace5cd47b2333e216d673fb0097cbf7195f757b110163ba9850e9eea3fdbbaddd4b25668b82c03f05", - "size": 63937290, - "source": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.2-4835981233356800/linux-x64/cli_linux_x64.tar.gz" + "sha512": "7ce149d350344c1046c7b59b6659bcc5d659f351bf3a07c6c085887d93427ceb89d927752e4ccd0844b53ffb91d33d6a49f72835ceb276c7cffdd13cfb8023b8", + "size": 64706544, + "source": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.4-4783783166214144/linux-x64/cli_linux_x64.tar.gz" }, "blocking_findings": [], "installer": { @@ -21,17 +21,17 @@ "manifest": { "content_type": "application/json", "final_url": "https://antigravity-cli-auto-updater-974169037036.us-central1.run.app/manifests/linux_amd64.json", - "payload_sha512": "4a393afc1369cee94e817c1b430c9128d02b12ebd4d5703ace5cd47b2333e216d673fb0097cbf7195f757b110163ba9850e9eea3fdbbaddd4b25668b82c03f05", - "payload_url": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.2-4835981233356800/linux-x64/cli_linux_x64.tar.gz", - "sha256": "7942274fb64e30a5106669af06e09a64e3fa7a1e8bb854d7a9e044a3773b69d2", + "payload_sha512": "7ce149d350344c1046c7b59b6659bcc5d659f351bf3a07c6c085887d93427ceb89d927752e4ccd0844b53ffb91d33d6a49f72835ceb276c7cffdd13cfb8023b8", + "payload_url": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.4-4783783166214144/linux-x64/cli_linux_x64.tar.gz", + "sha256": "6500c4633117a1b921beb5d8d2bc7a8e3c4563cd676b9071d651dad43c7896f1", "size": 301, "source": "https://antigravity-cli-auto-updater-974169037036.us-central1.run.app/manifests/linux_amd64.json", - "version": "1.4.2" + "version": "1.4.4" }, "payload": { "path": ".local/bin/agy", - "sha256": "085f43e0d0628a8a8dabe1e547067818fa2c0adc86cfac98a3c4492918f455ef", - "size": 221286656 + "sha256": "337dcde668441a2828968644d7982829c2d2a5e0c4144f346e1f3fc6abb3cdc7", + "size": 223494376 }, "schema_version": 2 } diff --git a/third_party/inventory.json b/third_party/inventory.json index a822ce1..89fd301 100644 --- a/third_party/inventory.json +++ b/third_party/inventory.json @@ -42,14 +42,14 @@ "name": "GitHub CLI", "image_scope": "both", "version_key": "GH_VERSION", - "version": "2.102.0", + "version": "2.102.1", "source": "https://github.com/cli/cli", "license": "MIT", "notices": [ { "path": "components/github-cli/LICENSE", "source": "repository", - "reviewed_from": "https://raw.githubusercontent.com/cli/cli/v2.102.0/LICENSE" + "reviewed_from": "https://raw.githubusercontent.com/cli/cli/v2.102.1/LICENSE" } ] }, @@ -94,14 +94,14 @@ "name": "mise", "image_scope": "both", "version_key": "MISE_VERSION", - "version": "2026.10.13", + "version": "2026.10.17", "source": "https://github.com/jdx/mise", "license": "MIT", "notices": [ { "path": "components/mise/LICENSE", "source": "repository", - "reviewed_from": "https://raw.githubusercontent.com/jdx/mise/v2026.10.13/LICENSE" + "reviewed_from": "https://raw.githubusercontent.com/jdx/mise/v2026.10.17/LICENSE" } ] }, diff --git a/third_party/standalone-artifact-inspection.json b/third_party/standalone-artifact-inspection.json index aff3cf9..573b614 100644 --- a/third_party/standalone-artifact-inspection.json +++ b/third_party/standalone-artifact-inspection.json @@ -4,7 +4,7 @@ "components": [ { "id": "github-cli", - "version": "2.102.0", + "version": "2.102.1", "packaging": "tar.gz", "repository_notices": [ { @@ -16,13 +16,13 @@ "architecture_legal_sets_equal": true, "architectures": { "amd64": { - "asset_url": "https://github.com/cli/cli/releases/download/v2.102.0/gh_2.102.0_linux_amd64.tar.gz", - "asset_sha256": "bb766f710eef8ede859c18578c72c327597cd4c8a85b06001b1f3843c6019386", - "asset_size": 15319960, + "asset_url": "https://github.com/cli/cli/releases/download/v2.102.1/gh_2.102.1_linux_amd64.tar.gz", + "asset_sha256": "77b9e297e94c50336823d0f84de7ef1be60cba704601fa0d98f129f47a94987b", + "asset_size": 15327429, "archive_member_count": 231, "legal_members": [ { - "path": "gh_2.102.0_linux_amd64/LICENSE", + "path": "gh_2.102.1_linux_amd64/LICENSE", "sha256": "6da4adc42392c8485e40b4251c7e332fc3352df1947c9ffade71dd60b14a7a4f", "size": 1068, "matches_repository_notice": "third_party/components/github-cli/LICENSE" @@ -30,13 +30,13 @@ ] }, "arm64": { - "asset_url": "https://github.com/cli/cli/releases/download/v2.102.0/gh_2.102.0_linux_arm64.tar.gz", - "asset_sha256": "7862c86c72f43df3a2d93ddde6f473285b4e2af61b494849846827e513ef6484", - "asset_size": 13917794, + "asset_url": "https://github.com/cli/cli/releases/download/v2.102.1/gh_2.102.1_linux_arm64.tar.gz", + "asset_sha256": "5019b3cc6e8a03bb4d88600f8dbda2add8e6407705c159b0c63151036e77a1af", + "asset_size": 13922552, "archive_member_count": 231, "legal_members": [ { - "path": "gh_2.102.0_linux_arm64/LICENSE", + "path": "gh_2.102.1_linux_arm64/LICENSE", "sha256": "6da4adc42392c8485e40b4251c7e332fc3352df1947c9ffade71dd60b14a7a4f", "size": 1068, "matches_repository_notice": "third_party/components/github-cli/LICENSE" @@ -144,7 +144,7 @@ }, { "id": "mise", - "version": "2026.10.13", + "version": "2026.10.17", "packaging": "raw-binary", "repository_notices": [ { @@ -156,16 +156,16 @@ "architecture_legal_sets_equal": true, "architectures": { "amd64": { - "asset_url": "https://github.com/jdx/mise/releases/download/v2026.10.13/mise-v2026.10.13-linux-x64", - "asset_sha256": "94c45523c7b6760b7da704f16051171ca32e8447a849a02266a439a4455e9a12", - "asset_size": 167691024, + "asset_url": "https://github.com/jdx/mise/releases/download/v2026.10.17/mise-v2026.10.17-linux-x64", + "asset_sha256": "fe6dd17e68e09682b31d2e7bb7bb755d22636ac1af5d94621e300f2ca9e9fe8a", + "asset_size": 170281952, "archive_member_count": null, "legal_members": [] }, "arm64": { - "asset_url": "https://github.com/jdx/mise/releases/download/v2026.10.13/mise-v2026.10.13-linux-arm64", - "asset_sha256": "983fabf36625566f216400b907b33b4daca99adb5bc3d3cdab123b5e791575b2", - "asset_size": 145861248, + "asset_url": "https://github.com/jdx/mise/releases/download/v2026.10.17/mise-v2026.10.17-linux-arm64", + "asset_sha256": "e90904144ba4377c5fbe385f429830282c68f3b4f9c690bf6c5a2ae9b74a809b", + "asset_size": 147035304, "archive_member_count": null, "legal_members": [] } diff --git a/third_party/standalone-artifact-inspection.md b/third_party/standalone-artifact-inspection.md index 6f30501..cc77ac0 100644 --- a/third_party/standalone-artifact-inspection.md +++ b/third_party/standalone-artifact-inspection.md @@ -4,11 +4,11 @@ This is a bounded inspection of the exact AMD64 and ARM64 release assets pinned | Component | Version | Packaging | Legal files inside asset | Repository notices | |---|---:|---|---|---| -| github-cli | `2.102.0` | tar.gz | LICENSE | LICENSE | +| github-cli | `2.102.1` | tar.gz | LICENSE | LICENSE | | codex-cli | `rust-v0.163.0` | tar.gz | None | LICENSE, NOTICE | | codex-code-mode-host | `rust-v0.163.0` | tar.gz | None | LICENSE, NOTICE | | ttyd | `1.7.7` | raw-binary | None | LICENSE | -| mise | `2026.10.13` | raw-binary | None | LICENSE | +| mise | `2026.10.17` | raw-binary | None | LICENSE | | uv | `0.13.4` | tar.gz | None | LICENSE-APACHE-2.0, LICENSE-MIT | | yq | `4.54.1` | raw-binary | None | LICENSE | | shfmt | `3.14.1` | raw-binary | None | LICENSE | diff --git a/versions.env b/versions.env index 7bdacbf..a463b8d 100644 --- a/versions.env +++ b/versions.env @@ -11,17 +11,17 @@ CODEX_ARM64_SHA256=a7261e65f4a96d8f4ca65a069c6cf2dc2c33defc341e48078acefda9461ff CODEX_CODE_MODE_HOST_AMD64_SHA256=314263128ba6592e7e807c265deeaf928a692b72dcbfeb5e0b20c9423b703529 CODEX_CODE_MODE_HOST_ARM64_SHA256=284356aefb197f00b76b912efdfdbae8ccf3ea1f89b976dde064b7ccb43214ef # Reviewed metadata for transient online authentication only; not distributed in the image. -CONTEXT7_CLI_VERSION=0.8.0 -CONTEXT7_CLI_SRI_SHA512=sha512-iEhY9CS2aujMLbSh6WqFPiZgUTUuU+RRvANoNlX+PYUuwlpup83joVjVoI3Xvok6nlHeESYiqH4AhoDmiYiukA== -GH_VERSION=2.102.0 -GH_AMD64_SHA256=bb766f710eef8ede859c18578c72c327597cd4c8a85b06001b1f3843c6019386 -GH_ARM64_SHA256=7862c86c72f43df3a2d93ddde6f473285b4e2af61b494849846827e513ef6484 +CONTEXT7_CLI_VERSION=0.8.1 +CONTEXT7_CLI_SRI_SHA512=sha512-Co+cXpXk34FdknwUaCah88xSsjSSC7fy77Uz9mPjvdjFmho5F6qxG2X0TaxgqFDh9qAaSFS9Nn50j30C8rwRGg== +GH_VERSION=2.102.1 +GH_AMD64_SHA256=77b9e297e94c50336823d0f84de7ef1be60cba704601fa0d98f129f47a94987b +GH_ARM64_SHA256=5019b3cc6e8a03bb4d88600f8dbda2add8e6407705c159b0c63151036e77a1af TTYD_VERSION=1.7.7 TTYD_AMD64_SHA256=8a217c968aba172e0dbf3f34447218dc015bc4d5e59bf51db2f2cd12b7be4f55 TTYD_ARM64_SHA256=b38acadd89d1d396a0f5649aa52c539edbad07f4bc7348b27b4f4b7219dd4165 -MISE_VERSION=2026.10.13 -MISE_AMD64_SHA256=94c45523c7b6760b7da704f16051171ca32e8447a849a02266a439a4455e9a12 -MISE_ARM64_SHA256=983fabf36625566f216400b907b33b4daca99adb5bc3d3cdab123b5e791575b2 +MISE_VERSION=2026.10.17 +MISE_AMD64_SHA256=fe6dd17e68e09682b31d2e7bb7bb755d22636ac1af5d94621e300f2ca9e9fe8a +MISE_ARM64_SHA256=e90904144ba4377c5fbe385f429830282c68f3b4f9c690bf6c5a2ae9b74a809b PYTHON_VERSION=3.14.8 # Bundled in parallel; explicitly selected by compatible projects, never the default. PYTHON_315_VERSION=3.15.0