Skip to content

Update stacked: 2 packages - #489

Merged
twitchyliquid64 merged 3 commits into
mainfrom
update-stacked-2026-07-21-671200e1
Jul 21, 2026
Merged

Update stacked: 2 packages#489
twitchyliquid64 merged 3 commits into
mainfrom
update-stacked-2026-07-21-671200e1

Conversation

@gominimal-pkgmgr-mgr

Copy link
Copy Markdown
Contributor

Update base-soup (2 packages)

Note

These packages declare replace_on_cycle in their build.ncl, so
they participate in the toolchain rebuild graph and one hash change
cascades through the set. Bundling ensures the cascading rebuild
lands as a single unit, even when only one package is bumping —
avoids back-to-back full rebuilds from singleton PRs.

Warning

1 requested member did NOT ship — each needs separate follow-up.
A member is dropped when it fails to update, has its gs:// mirror
withheld by the scan gate, or is peeled to keep the shipped set a
closed dependency closure (a survivor built against a dropped member's
old version would be a broken closure).

Package Old Target Why
graphviz 14.1.1 15.1.0 update failed: invalid GCS path (path traversal rejected): /graphviz-15.1.0.tar.bz2

Pkgscan: clean across all bundle members — diffs against prior versions surfaced no newly-introduced suspicious patterns.

Note

Build risk — 2 dependents across the tree. Package(s) that
build- or runtime-depend on a member of this bundle may need a rebuild,
or could FTBFS on an API/ABI change. Informational (not blocking) — a
heads-up for the reviewer on what this bump can ripple into.

Bundle member Dependents
libsigsegv 1 — maude
libsodium 1 — zeromq

Summary

Package Old New Source
libsigsegv 2.14 2.15 gnu:libsigsegv:operator-pinned
libsodium 1.0.21 1.0.22 github:jedisct1/libsodium:operator-pinned

Per-package details

libsigsegv 2.14 → 2.15
  • SHA256: cdac3941803364cf...036855660225cb38...
  • Size: 465 KB → 494 KB
  • Source: gs://minimal-staging-archives/libsigsegv-2.14.tar.gzgs://minimal-staging-archives/libsigsegv-2.15.tar.gz
  • Released: 448 days ago (2025-04-28)
  • License: GPL-2.0-only (source: tarball)
libsodium 1.0.21 → 1.0.22
  • SHA256: 9e4285c7a419e82d...adbdd8f16149e81a...
  • Size: 2.0 MB
  • Source: https://github.com/jedisct1/libsodium/releases/download/1.0.21-RELEASE/libsodium-1.0.21.tar.gzhttps://github.com/jedisct1/libsodium/releases/download/1.0.22-RELEASE/libsodium-1.0.22.tar.gz
  • Released: unknown (non-GitHub source or tag-only fallback)
  • License: ISC (source: tarball)

Created by pkgmgr

@twitchyliquid64
twitchyliquid64 added this pull request to the merge queue Jul 21, 2026
Merged via the queue into main with commit ee289a5 Jul 21, 2026
9 checks passed
@twitchyliquid64
twitchyliquid64 deleted the update-stacked-2026-07-21-671200e1 branch July 21, 2026 16:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant