Skip to content

Update stacked: 3 packages - #551

Merged
twitchyliquid64 merged 3 commits into
mainfrom
update-stacked-2026-08-01-e4888952
Aug 2, 2026
Merged

Update stacked: 3 packages#551
twitchyliquid64 merged 3 commits into
mainfrom
update-stacked-2026-08-01-e4888952

Conversation

@gominimal-pkgmgr-mgr

Copy link
Copy Markdown
Contributor

Update base-soup (3 packages)

Note

These packages declare replace_on_cycle in their build.ncl, so
they participate in the toolchain rebuild graph and one hash change
cascades through the set. Bundling ensures the cascading rebuild
lands as a single unit, even when only one package is bumping —
avoids back-to-back full rebuilds from singleton PRs.

Warning

1 requested member did NOT ship — each needs separate follow-up.
A member is dropped when it fails to update, has its gs:// mirror
withheld by the scan gate, or is peeled to keep the shipped set a
closed dependency closure (a survivor built against a dropped member's
old version would be a broken closure).

Package Old Target Why
charon 0.1.223 0.1.232 update failed: no upstream tarball URL available

Pkgscan: clean across all bundle members — diffs against prior versions surfaced no newly-introduced suspicious patterns.

Note

Build risk — 8 dependents across the tree. Package(s) that
build- or runtime-depend on a member of this bundle may need a rebuild,
or could FTBFS on an API/ABI change. Informational (not blocking) — a
heads-up for the reviewer on what this bump can ripple into.

Bundle member Dependents
harfbuzz 5 — chromium-bin, chromium-headless-shell-bin, ffmpeg, libass, pango
mesa 2 — chromium-bin, chromium-headless-shell-bin
libarchive 1 — diffoscope

Summary

Package Old New Source
harfbuzz 14.2.1 14.3.0 github:harfbuzz/harfbuzz:release-asset:operator-pinned
mesa 26.1.5 26.1.6 override:mesa:operator-pinned
libarchive 3.8.1 3.8.9 github:libarchive/libarchive:release-asset:operator-pinned

Warning

1 known vulnerabilities still affect this bundle after update. Run pkgmgr vulns for details.

Per-package details

harfbuzz 14.2.1 → 14.3.0
  • SHA256: a54a5d8e9380a41f...16070d77cfc4ba1f...
  • Size: 19.6 MB → 19.8 MB
  • Source: gs://minimal-staging-archives/harfbuzz-14.2.1.tar.xzgs://minimal-staging-archives/harfbuzz-14.3.0.tar.xz
  • Released: 1 days ago (2026-07-31)
  • License: MIT-Modern-Variant (source: tarball)
mesa 26.1.5 → 26.1.6
  • SHA256: 79e421c7ce18cd9e...5296b88a0f1e012e...
  • Size: 77.7 MB → 77.8 MB
  • Source: gs://minimal-staging-archives/mesa-26.1.5.tar.xzgs://minimal-staging-archives/mesa-26.1.6.tar.xz
  • Released: unknown (non-GitHub source or tag-only fallback)
libarchive 3.8.1 → 3.8.9
  • SHA256: bde832a5e3344dc7...f5a6539059cf5e59...
  • Size: 8.2 MB → 9.1 MB
  • Source: gs://minimal-staging-archives/libarchive-3.8.1.tar.gzgs://minimal-staging-archives/libarchive-3.8.9.tar.gz
  • Released: 4 days ago (2026-07-28)

Created by pkgmgr

@twitchyliquid64
twitchyliquid64 added this pull request to the merge queue Aug 2, 2026
Merged via the queue into main with commit 1e4c3f0 Aug 2, 2026
9 checks passed
@twitchyliquid64
twitchyliquid64 deleted the update-stacked-2026-08-01-e4888952 branch August 2, 2026 00:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant