mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 05:25:14 +09:00
Aleksei Sviridkin
cac799518c
Refreshes the core/talos asset/profile layer onto current upstream to clear the published advisories the scanner flagged in the stale pinned images. - profiles: regenerated by hack/gen-profiles.sh v1.13.5, moving the base installer and every system extension to the v1.13.5 line (installer v1.13.0 -> v1.13.5; amdgpu/i915/drbd/zfs to their -v1.13.5 builds; amd-ucode and the firmware blobs to the 20260519/20260512 snapshots). v1.13.5 rebuilds the installer on the Go 1.26.4 toolchain and current runtime (kernel, containerd, runc, OpenSSL), clearing the Go and libcrypto advisories compiled into the stale v1.13.0 installer. - matchbox: base image quay.io/poseidon/matchbox v0.10.0 -> v0.11.0, clearing the libcrypto3 advisories in the matchbox runtime. cozy-talos ships no runtime templates -- it drives the node image / installer / matchbox asset builds. The Talos installer and matchbox images are rebuilt from these sources by the release asset pipeline (the privileged imager build), which also re-pins the generated matchbox digest; this change is the source bump. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Aleksei Sviridkin <f@lex.la>