Skip to content

Update stacked: 2 packages - #526

Merged
twitchyliquid64 merged 3 commits into
mainfrom
update-stacked-2026-07-27-a257ef57
Jul 27, 2026
Merged

Update stacked: 2 packages#526
twitchyliquid64 merged 3 commits into
mainfrom
update-stacked-2026-07-27-a257ef57

Conversation

@gominimal-pkgmgr-mgr

Copy link
Copy Markdown
Contributor

Update base-soup (2 packages)

Note

These packages declare replace_on_cycle in their build.ncl, so
they participate in the toolchain rebuild graph and one hash change
cascades through the set. Bundling ensures the cascading rebuild
lands as a single unit, even when only one package is bumping —
avoids back-to-back full rebuilds from singleton PRs.

Warning

1 requested member did NOT ship — each needs separate follow-up.
A member is dropped when it fails to update, has its gs:// mirror
withheld by the scan gate, or is peeled to keep the shipped set a
closed dependency closure (a survivor built against a dropped member's
old version would be a broken closure).

Package Old Target Why
sqlite 3.53.3 3.53.4 gs:// mirror withheld (scan-unavailable)

Pkgscan: clean across all bundle members — diffs against prior versions surfaced no newly-introduced suspicious patterns.

Note

Build risk — 4 dependents across the tree. Package(s) that
build- or runtime-depend on a member of this bundle may need a rebuild,
or could FTBFS on an API/ABI change. Informational (not blocking) — a
heads-up for the reviewer on what this bump can ripple into.

Bundle member Dependents
nghttp3 2 — node, node-lts
ngtcp2 2 — node, node-lts

Summary

Package Old New Source
nghttp3 1.17.0 1.18.0 github:ngtcp2/nghttp3:release-asset:operator-pinned
ngtcp2 1.24.0 1.25.0 github:ngtcp2/ngtcp2:release-asset:operator-pinned

Per-package details

nghttp3 1.17.0 → 1.18.0
  • SHA256: 9635173e703174a4...2812e9c06583fa24...
  • Size: 657 KB
  • Source: https://github.com/ngtcp2/nghttp3/releases/download/v1.17.0/nghttp3-1.17.0.tar.gzhttps://github.com/ngtcp2/nghttp3/releases/download/v1.18.0/nghttp3-1.18.0.tar.gz
  • Released: 16 hours ago (2026-07-26)
  • License: MIT (source: GitHub + tarball)
  • Auto-applied:
    • Rewrote the GitHub release-download tag to v1.18.0 (the upstream tag for 1.18.0); the previous tag did not track the version and would 404 at build time.
ngtcp2 1.24.0 → 1.25.0
  • SHA256: be7bf725d0108cf6...1c0843076528a87b...
  • Size: 1.2 MB
  • Source: https://github.com/ngtcp2/ngtcp2/releases/download/v1.24.0/ngtcp2-1.24.0.tar.gzhttps://github.com/ngtcp2/ngtcp2/releases/download/v1.25.0/ngtcp2-1.25.0.tar.gz
  • Released: 15 hours ago (2026-07-26)
  • License: MIT (source: GitHub + tarball)
  • Auto-applied:
    • Rewrote the GitHub release-download tag to v1.25.0 (the upstream tag for 1.25.0); the previous tag did not track the version and would 404 at build time.

Created by pkgmgr

@twitchyliquid64
twitchyliquid64 added this pull request to the merge queue Jul 27, 2026
Merged via the queue into main with commit d3456eb Jul 27, 2026
9 checks passed
@twitchyliquid64
twitchyliquid64 deleted the update-stacked-2026-07-27-a257ef57 branch July 27, 2026 05:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant