gominimal · twitchyliquid64 · Jul 23, 2026 · Jul 23, 2026 · Jul 23, 2026 · Jul 23, 2026
diff --git a/packages/capy/build.ncl b/packages/capy/build.ncl
@@ -6,7 +6,7 @@ let ca-certificates = import "../ca-certificates/build.ncl" in
 let git = import "../git/build.ncl" in
 let node-lts = import "../node-lts/build.ncl" in
 
-let version = "0.8.0" in
+let version = "0.9.0" in
 {
   name = "capy",
   build_deps = [
@@ -16,7 +16,7 @@ let version = "0.8.0" in
     # into this registry.
     {
       url = "https://github.com/capysc/capy-cli/archive/refs/tags/v%{version}.tar.gz",
-      sha256 = "979a9e73d4db3f17a3c9b04fc76f637e20068dc2ff152ad0fd39e18c1a995565",
+      sha256 = "3257d7d0652d1df2e5d61cc1ed0e7313ac1e4d45a9ce62df4d2bc5e558f2de6a",
       extract = true,
       strip_prefix = "capy-cli-%{version}",
     } | Source,
@@ -44,7 +44,11 @@ let version = "0.8.0" in
 
   outputs = {
     capy = { glob = "usr/bin/capy" } | OutputBin,
-    node_modules = { glob = "usr/lib/node_modules/**" } | OutputData,
+    # allow_executable: @capysc/cli (>= this release) depends on
+    # @napi-rs/keyring, which ships native `.node` ELF libraries inside
+    # node_modules — real loadable code, so an inert-data claim fails the
+    # output-types checker on both arches. Same shape as cf's node_modules.
+    node_modules = { glob = "usr/lib/node_modules/**", allow_executable = true } | OutputData,
   },
   attrs =
     {

diff --git a/packages/claude-code/build.ncl b/packages/claude-code/build.ncl
@@ -11,9 +11,9 @@ let ripgrep = import "../ripgrep/build.ncl" in
 
 let { version, amd64_sha256, arm64_sha256, gcs_bucket } = {
   gcs_bucket = "https://storage.googleapis.com/claude-code-dist-86c565f3-f756-42ad-8dfa-d59b1c096819/claude-code-releases",
-  version = "2.1.216",
-  amd64_sha256 = "74deca45220b8080ec75ab099bd5a5980e41a2b5879846a008fb115d436de085",
-  arm64_sha256 = "9e3a6aecc5164f607e1183aea2092c7d7705d146e504a6207df291776996a8ea",
+  version = "2.1.218",
+  amd64_sha256 = "e12071751a9336b8af1012c103358ff04ac18f9aaff4a738cff7ba5cdfaf63f2",
+  arm64_sha256 = "295fd30481bd03b38450fdec2a6e25bb6472c2074f04b0c4a566cd5988f230bf",
 }
 in
 

diff --git a/packages/codex/build.ncl b/packages/codex/build.ncl
@@ -12,14 +12,14 @@ let glibc = import "../glibc/build.ncl" in
 let openssl = import "../openssl/build.ncl" in
 let git = import "../git/build.ncl" in
 
-let version = "0.144.6" in
+let version = "0.145.0" in
 {
   name = "codex",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "https://github.com/openai/codex/archive/refs/tags/rust-v%{version}.tar.gz",
-      sha256 = "f2e8395538dc15fa6092a135d577be50a295faf3116a2248033631001c75c705",
+      sha256 = "7126822e9148f20297434f0e302b811f5eea8700879686a5960d4a6444c2e369",
       extract = true,
       strip_prefix = "codex-rust-v%{version}",
     } | Source,

diff --git a/packages/kubectl/build.ncl b/packages/kubectl/build.ncl
@@ -2,7 +2,7 @@ let { Attrs, BuildSpec, Local, OutputBin, Source, Test, .. } = import "minimal.n
 let bash = import "../bash/build.ncl" in
 let go = import "../go/build.ncl" in
 
-let version = "1.36.2" in
+let version = "1.36.3" in
 
 {
   name = "kubectl",
@@ -11,7 +11,7 @@ let version = "1.36.2" in
     { file = "build.sh" } | Local,
     {
       url = "https://github.com/kubernetes/kubernetes/archive/refs/tags/v%{version}.tar.gz",
-      sha256 = "ffbc46612cf32ad08a3b606de064b63afc350ae1dd1a691e99b5cd127d716c26",
+      sha256 = "950f7dd65b64b18ca065a08ae73dd5f61ff72b48c8778c5bfceacc84eaaf10ed",
       extract = true,
       strip_prefix = "kubernetes-%{version}",
     } | Source,

diff --git a/packages/probe-rs/build.ncl b/packages/probe-rs/build.ncl
@@ -5,15 +5,15 @@ let glibc = import "../glibc/build.ncl" in
 let rust = import "../rust/build.ncl" in
 let toolchain = import "../toolchain/build.ncl" in
 
-let version = "0.31.0" in
+let version = "0.32.0" in
 {
   name = "probe-rs",
 
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "https://github.com/probe-rs/probe-rs/archive/refs/tags/v%{version}.tar.gz",
-      sha256 = "7a5022d6956daaa8dba96bb3aedf2ace0b5a76a60729d93971c9dab439ac045e",
+      sha256 = "9c4ba2046d4709f6a07e47933b1aa7edaf72a4d0a9f482b81d81798879070229",
       extract = true,
       strip_prefix = "probe-rs-%{version}",
     } | Source,

diff --git a/packages/sops/build.ncl b/packages/sops/build.ncl
@@ -5,14 +5,14 @@ let base = import "../base/build.ncl" in
 let go = import "../go/build.ncl" in
 let toolchain = import "../toolchain/build.ncl" in
 let glibc = import "../glibc/build.ncl" in
-let version = "3.13.2" in
+let version = "3.13.3" in
 {
   name = "sops",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "gs://minimal-staging-archives/getsops/sops/v%{version}.tar.gz",
-      sha256 = "79560b53814e20031d094a293d6c169314eaaf97efd6e95a6d765e61e881db2c",
+      sha256 = "49811c5ed80f6b4d4e98cef98e3f7378406aa692fd773dfb72ad1b4dfb940448",
       extract = true,
       strip_prefix = "sops-%{version}",
     } | Source,

diff --git a/packages/syft/build.ncl b/packages/syft/build.ncl
@@ -4,14 +4,14 @@ let go = import "../go/build.ncl" in
 let toolchain = import "../toolchain/build.ncl" in
 let glibc = import "../glibc/build.ncl" in
 
-let version = "1.48.0" in
+let version = "1.49.0" in
 {
   name = "syft",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "gs://minimal-staging-archives/anchore/syft/v%{version}.tar.gz",
-      sha256 = "ee757ade3c9804fde1bdd76474c720d0bb96029df310b12e45d8551545592aa0",
+      sha256 = "7fa1d225a50be61a17c86a0d523412d60b3d8678a1864839217769d3472a8700",
       extract = true,
       strip_prefix = "syft-%{version}",
     } | Source,

diff --git a/packages/uv/build.ncl b/packages/uv/build.ncl
@@ -6,14 +6,14 @@ let make = import "../make/build.ncl" in
 let rust = import "../rust/build.ncl" in
 let toolchain = import "../toolchain/build.ncl" in
 
-let version = "0.11.30" in
+let version = "0.11.31" in
 {
   name = "uv",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "gs://minimal-staging-archives/uv-%{version}.tar.gz",
-      sha256 = "ff895fff1c218fcad67b5b7de829df6d868e677ff34a39d3d0c49a9754247db6"
+      sha256 = "57a268b4178270ee0339ec1d5a8961082978ab5ad75ff8de3b25b726e92deda3"
     } | Source,
     base,
     make,