From 37bf873ca51a0432a8e6079104be259f7c89dc16 Mon Sep 17 00:00:00 2001 From: nicodes Date: Thu, 29 Oct 2026 16:03:18 -0600 Subject: [PATCH 1/2] Move to komizo 0.2.6 0.2.6 builds the gate proxy's Caddy with golang.org/x/net 0.62.0 (GO-2026-6860, GO-2026-6866) and verifies nested dependency repairs. Relocked with the attested v0.2.6 release; setup/run action pins move to its source commit. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/cd.yml | 2 +- .github/workflows/ci.yml | 4 ++-- .github/workflows/dependency-policy.yml | 2 +- komizo.lock | 6 +++--- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 5d3fc39..8afbfb6 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -26,7 +26,7 @@ jobs: - name: Check out source uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - name: Set up locked komizo - uses: nicodes/komizo/setup@40086036977a5fc0119d6c4c1d5eb6ae3ab3b4b9 + uses: nicodes/komizo/setup@54da2b6d20fda9febf3cd02039424a1a8249cffb env: GH_TOKEN: ${{ github.token }} - name: Validate and build the redirect diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a43775e..1c37795 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -27,7 +27,7 @@ jobs: with: persist-credentials: false - name: Set up locked komizo - uses: nicodes/komizo/setup@40086036977a5fc0119d6c4c1d5eb6ae3ab3b4b9 + uses: nicodes/komizo/setup@54da2b6d20fda9febf3cd02039424a1a8249cffb env: GH_TOKEN: ${{ github.token }} timeout-minutes: 5 @@ -52,7 +52,7 @@ jobs: retention-days: 7 include-hidden-files: true - name: Check project - uses: nicodes/komizo/run@40086036977a5fc0119d6c4c1d5eb6ae3ab3b4b9 + uses: nicodes/komizo/run@54da2b6d20fda9febf3cd02039424a1a8249cffb with: target: check - name: Upload artifacts diff --git a/.github/workflows/dependency-policy.yml b/.github/workflows/dependency-policy.yml index ac4a432..5d2731a 100644 --- a/.github/workflows/dependency-policy.yml +++ b/.github/workflows/dependency-policy.yml @@ -45,7 +45,7 @@ jobs: ref: main timeout-minutes: 3 - name: Set up locked komizo - uses: nicodes/komizo/setup@40086036977a5fc0119d6c4c1d5eb6ae3ab3b4b9 + uses: nicodes/komizo/setup@54da2b6d20fda9febf3cd02039424a1a8249cffb env: GH_TOKEN: ${{ github.token }} timeout-minutes: 5 diff --git a/komizo.lock b/komizo.lock index dcb4ed7..bff6754 100644 --- a/komizo.lock +++ b/komizo.lock @@ -1,8 +1,8 @@ { "version": 1, - "platform": "0.2.4", - "platform_revision": "40086036977a5fc0119d6c4c1d5eb6ae3ab3b4b9", + "platform": "0.2.6", + "platform_revision": "54da2b6d20fda9febf3cd02039424a1a8249cffb", "manifest_sha256": "f605f9b8126a0fdab262650c7812be90cbba5c472cdb335c8ef527dc2407888e", - "runtime_sha256": "000c1991c455b7e1269646e40c05ebf4a1b0717197c34838d2b7669430b3e862", + "runtime_sha256": "d4aee3bbfbc8c9253d1e1663790d58fd88374f61da2a68a7e558b5127bfb67fb", "recipe_sha256": "33ac62cab7dbea38c303cabc99c60ac1adf33ef21bd0b2b5c62bcb22fcac2235" } From 8099f3d56a0b29c4d45d554d62efc37c915be592 Mon Sep 17 00:00:00 2001 From: nicodes Date: Thu, 29 Oct 2026 16:35:51 -0600 Subject: [PATCH 2/2] Move to komizo 0.2.7 0.2.7 also builds the gate proxy's Caddy with go-jose 4.1.6 (CVE-2026-116587). Relocked with the attested v0.2.7 release; setup/run action pins move to its source commit. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/cd.yml | 2 +- .github/workflows/ci.yml | 4 ++-- .github/workflows/dependency-policy.yml | 2 +- komizo.lock | 6 +++--- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 8afbfb6..e8bdfeb 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -26,7 +26,7 @@ jobs: - name: Check out source uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - name: Set up locked komizo - uses: nicodes/komizo/setup@54da2b6d20fda9febf3cd02039424a1a8249cffb + uses: nicodes/komizo/setup@1b740f28682948a2d5eb4613744bb262d2056e6c env: GH_TOKEN: ${{ github.token }} - name: Validate and build the redirect diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1c37795..cdce577 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -27,7 +27,7 @@ jobs: with: persist-credentials: false - name: Set up locked komizo - uses: nicodes/komizo/setup@54da2b6d20fda9febf3cd02039424a1a8249cffb + uses: nicodes/komizo/setup@1b740f28682948a2d5eb4613744bb262d2056e6c env: GH_TOKEN: ${{ github.token }} timeout-minutes: 5 @@ -52,7 +52,7 @@ jobs: retention-days: 7 include-hidden-files: true - name: Check project - uses: nicodes/komizo/run@54da2b6d20fda9febf3cd02039424a1a8249cffb + uses: nicodes/komizo/run@1b740f28682948a2d5eb4613744bb262d2056e6c with: target: check - name: Upload artifacts diff --git a/.github/workflows/dependency-policy.yml b/.github/workflows/dependency-policy.yml index 5d2731a..ab0aa85 100644 --- a/.github/workflows/dependency-policy.yml +++ b/.github/workflows/dependency-policy.yml @@ -45,7 +45,7 @@ jobs: ref: main timeout-minutes: 3 - name: Set up locked komizo - uses: nicodes/komizo/setup@54da2b6d20fda9febf3cd02039424a1a8249cffb + uses: nicodes/komizo/setup@1b740f28682948a2d5eb4613744bb262d2056e6c env: GH_TOKEN: ${{ github.token }} timeout-minutes: 5 diff --git a/komizo.lock b/komizo.lock index bff6754..6a851a4 100644 --- a/komizo.lock +++ b/komizo.lock @@ -1,8 +1,8 @@ { "version": 1, - "platform": "0.2.6", - "platform_revision": "54da2b6d20fda9febf3cd02039424a1a8249cffb", + "platform": "0.2.7", + "platform_revision": "1b740f28682948a2d5eb4613744bb262d2056e6c", "manifest_sha256": "f605f9b8126a0fdab262650c7812be90cbba5c472cdb335c8ef527dc2407888e", - "runtime_sha256": "d4aee3bbfbc8c9253d1e1663790d58fd88374f61da2a68a7e558b5127bfb67fb", + "runtime_sha256": "e85ed5057a15b6432600b5596aacbc967179122757378b61dc4247a101db8f9b", "recipe_sha256": "33ac62cab7dbea38c303cabc99c60ac1adf33ef21bd0b2b5c62bcb22fcac2235" }