Skip to content

Bump Alpine version 3.24.3 → 3.24.4 - #151

Merged
jandubois merged 2 commits into
lima-vm:mainfrom
AkihiroSuda:dev
Nov 6, 2026
Merged

jandubois merged 2 commits into
lima-vm:mainfrom
AkihiroSuda:dev

Conversation

@AkihiroSuda

@AkihiroSuda AkihiroSuda commented Nov 5, 2026 •

Copy link
Copy Markdown
Member

What This PR Changes

The title explains

Linked Issue (Required in most cases)

https://alpinelinux.org/posts/alpine-3.21.10-3.22.8-3.23.8-3.24.4-released/

How I Tested This

CI will test this

AI Usage

NONE

@jandubois

Copy link
Copy Markdown
Member

New aports tag does not exist yet.

Note that none of this really matters as the build pulls everything from the apk repos. So it will have the new version, if it has been released to apk, regardless of which version of the build script from apk is being used. We are not rebuilding the kernel or the packages.

@AkihiroSuda

Copy link
Copy Markdown
Member Author

What can we do now to pull in the "*sshole" (https://sshhole.com) fix?
https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/

@AkihiroSuda

Copy link
Copy Markdown
Member Author

The tag exists on their gitlab https://gitlab.alpinelinux.org/alpine/aports/-/tags/v3.24.4 , but apparently not synced to github yet

@jandubois

Copy link
Copy Markdown
Member

We should probably just wait a couple of hours to see if the tag has synced by then. It is still very new.

We can also just create a new tag on the repo, which will trigger a new build. It will have the updated package, but still be named 3.24.3, which is not ideal. So this should only be a fallback if the tag doesn't appear soon.

Or we could switch the aports submodule to gitlab?

@jandubois

Copy link
Copy Markdown
Member

The mirroring from GitLab seems to be stuck. Normally each push is mirrored directly, but GitHub hasn't been updated in 8 days now, so unless somebody unblocks it, nothing will happen.

So we should pick one of the fallbacks: (a) rebuild with the fixed package, but a 3.24.3 name, or (b) move the submodule to GitLab.

@AkihiroSuda

Copy link
Copy Markdown
Member Author

(b) move the submodule to GitLab.

Done

Switch from the mirror https://github.com/alpinelinux/aports.git
to the upstream https://git.alpinelinux.org/aports.git
as the GitHub mirror is out of sync.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>

@jandubois jandubois left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, LGTM

@jandubois
jandubois merged commit 70febb4 into lima-vm:main Nov 6, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants