wolfi-dev · joshrwolf · May 4, 2023 · May 4, 2023
diff --git a/apko.yaml b/apko.yaml
@@ -1,7 +1,7 @@
 package:
   name: apko
   version: 0.8.0
-  epoch: 0
+  epoch: 1
   description: Build OCI images using APK directly without Dockerfile
   copyright:
     - license: Apache-2.0

diff --git a/argo-cd.yaml b/argo-cd.yaml
@@ -1,7 +1,7 @@
 package:
   name: argo-cd
   version: 2.7.1
-  epoch: 0
+  epoch: 1
   description: Declarative continuous deployment for Kubernetes.
   copyright:
     - license: Apache-2.0

diff --git a/argo-workflows.yaml b/argo-workflows.yaml
@@ -1,7 +1,7 @@
 package:
   name: argo-workflows
   version: 3.4.7
-  epoch: 0
+  epoch: 1
   description: Workflow engine for Kubernetes.
   copyright:
     - license: Apache-2.0

diff --git a/aws-ebs-csi-driver.yaml b/aws-ebs-csi-driver.yaml
@@ -2,7 +2,7 @@ package:
   name: aws-ebs-csi-driver
   # When bumping the version check if the GHSA mitigations below can be removed.
   version: 1.18.0
-  epoch: 0
+  epoch: 1
   description: CSI driver for Amazon EBS.
   copyright:
     - license: Apache-2.0

diff --git a/aws-efs-csi-driver.yaml b/aws-efs-csi-driver.yaml
@@ -1,7 +1,7 @@
 package:
   name: aws-efs-csi-driver
   version: 1.5.4
-  epoch: 0
+  epoch: 1
   description: CSI driver for Amazon EFS.
   copyright:
     - license: Apache-2.0

diff --git a/bom.yaml b/bom.yaml
@@ -1,7 +1,7 @@
 package:
   name: bom
   version: 0.5.1
-  epoch: 0
+  epoch: 1
   description: A utility to generate SPDX-compliant Bill of Materials manifests
   copyright:
     - license: Apache-2.0

diff --git a/cadvisor.yaml b/cadvisor.yaml
@@ -1,7 +1,7 @@
 package:
   name: cadvisor
   version: 0.47.1
-  epoch: 0
+  epoch: 1
   description: Analyzes resource usage and performance characteristics of running containers.
   copyright:
     - license: Apache-2.0

diff --git a/calicoctl.yaml b/calicoctl.yaml
@@ -1,7 +1,7 @@
 package:
   name: calicoctl
   version: 3.25.1
-  epoch: 1
+  epoch: 2
   description: "CLI tool that allows management of Calico API resources"
   copyright:
     - license: Apache-2.0
@@ -21,7 +21,7 @@ pipeline:
     with:
       repository: https://github.com/projectcalico/calico
       tag: v${{package.version}}
-      expected-commit: 82dadbce194ac671508c71574a0e59eb82c911f9
+      expected-commit: 9ce0d6eae6f4c132526722d51821e2948aeaca25
       destination: calico
 
   - runs: |

diff --git a/cert-manager.yaml b/cert-manager.yaml
@@ -1,7 +1,7 @@
 package:
   name: cert-manager
   version: 1.11.1
-  epoch: 1
+  epoch: 2
   description: Automatically provision and manage TLS certificates in Kubernetes
   copyright:
     - license: Apache-2.0

diff --git a/chartmuseum.yaml b/chartmuseum.yaml
@@ -1,7 +1,7 @@
 package:
   name: chartmuseum
   version: 0.15.0
-  epoch: 1
+  epoch: 2
   description: helm chart repository server
   copyright:
     - license: Apache-2.0

diff --git a/cluster-autoscaler.yaml b/cluster-autoscaler.yaml
@@ -1,7 +1,7 @@
 package:
   name: cluster-autoscaler
   version: 9.28.0
-  epoch: 0
+  epoch: 1
   description: Autoscaling components for Kubernetes
   copyright:
     - license: Apache-2.0

diff --git a/consul.yaml b/consul.yaml
@@ -2,7 +2,7 @@ package:
   name: consul
   version: 1.15.2
   # When bumping the version check if the CVE/GHSA mitigations below can be removed.
-  epoch: 1
+  epoch: 2
   description: Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.
   copyright:
     - license: MPL-2.0

diff --git a/cortex.yaml b/cortex.yaml
@@ -1,7 +1,7 @@
 package:
   name: cortex
   version: 1.15.1
-  epoch: 0
+  epoch: 1
   description:
   copyright:
     - license: Apache-2.0

diff --git a/cosign.yaml b/cosign.yaml
@@ -1,7 +1,7 @@
 package:
   name: cosign
   version: 2.0.2
-  epoch: 0
+  epoch: 1
   description: Container Signing
   copyright:
     - license: Apache-2.0

diff --git a/crane.yaml b/crane.yaml
@@ -1,7 +1,7 @@
 package:
   name: crane
   version: 0.14.0
-  epoch: 1
+  epoch: 2
   description: Tool for interacting with remote images and registries.
   copyright:
     - license: Apache-2.0
@@ -34,4 +34,4 @@ update:
   enabled: true
   github:
     identifier: google/go-containerregistry
-    strip-prefix: V
+    strip-prefix: v
diff --git a/ctop.yaml b/ctop.yaml
@@ -1,7 +1,7 @@
 package:
   name: ctop
   version: 0.7.7
-  epoch: 1
+  epoch: 2
   description: Top-like interface for container metrics
   target-architecture:
     - all

diff --git a/cue.yaml b/cue.yaml
@@ -1,7 +1,7 @@
 package:
   name: cue
   version: 0.5.0
-  epoch: 0
+  epoch: 1
   description: The home of the CUE language! Validate and define text-based and dynamic configuration
   copyright:
     - license: Apache-2.0

diff --git a/dataplaneapi.yaml b/dataplaneapi.yaml
@@ -1,7 +1,7 @@
 package:
   name: dataplaneapi
   version: 2.7.3
-  epoch: 0
+  epoch: 1
   description: HAProxy Data Plane API
   copyright:
     - license: Apache-2.0

diff --git a/delve.yaml b/delve.yaml
@@ -1,7 +1,7 @@
 package:
   name: delve
   version: 1.20.2
-  epoch: 0
+  epoch: 1
   description: Delve is a debugger for the Go programming language.
   copyright:
     - license: MIT

diff --git a/dex.yaml b/dex.yaml
@@ -2,7 +2,7 @@ package:
   name: dex
   # When bumping the version check if the GHSA mitigations below can be removed.
   version: 2.36.0
-  epoch: 1
+  epoch: 2
   description: OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
   copyright:
     - license: Apache-2.0

diff --git a/dgraph.yaml b/dgraph.yaml
@@ -1,7 +1,7 @@
 package:
   name: dgraph
   version: 22.0.2
-  epoch: 0
+  epoch: 1
   description: The GitOps Toolkit Helm reconciler, for declarative Helming
   copyright:
     - license: Apache-2.0

diff --git a/docker-credential-ecr-login.yaml b/docker-credential-ecr-login.yaml
@@ -1,7 +1,7 @@
 package:
   name: docker-credential-ecr-login
   version: 0.7.0
-  epoch: 0
+  epoch: 1
   description: Credential helper for Docker to use the AWS Elastic Container Registry
   copyright:
     - license: Apache-2.0

diff --git a/docs/DEVELOPMENT.md b/docs/DEVELOPMENT.md
@@ -62,3 +62,16 @@ docker context create remote-wolfi-os-dev --docker "host=ssh://compute.${INSTANC
 ```
 
 From there, initialize the dev container as you would for a local setup. The connection will respect the current `docker context`, and spawn the container on the remote machine.
+
+## FAQ
+
+Collection of random FAQs that may or may not be helpful when dealing with everyday `os` development and maintenance.
+
+Q: How do I bump the epoch of all packages that depend on a certain package?
+
+A: Any of the following should work:
+
+```bash
+# Bump the epoch of all packages that depend on the latest version of go
+grep -l " - go$" *.yaml | xargs wolfictl bump
+```
diff --git a/etcd.yaml b/etcd.yaml
@@ -2,7 +2,7 @@ package:
   name: etcd
   version: 3.5.8
   # When bumping the version check if the CVE/GHSA mitigations below can be removed.
-  epoch: 0
+  epoch: 1
   description: A highly-available key value store for shared configuration and service discovery.
   copyright:
     - license: Apache-2.0

diff --git a/external-dns.yaml b/external-dns.yaml
@@ -1,7 +1,7 @@
 package:
   name: external-dns
   version: 0.13.4
-  epoch: 1
+  epoch: 2
   description: Configure external DNS servers (AWS Route53, Google CloudDNS and others) for Kubernetes Ingresses and Services.
   target-architecture:
     - all

diff --git a/external-secrets-operator.yaml b/external-secrets-operator.yaml
@@ -1,7 +1,7 @@
 package:
   name: external-secrets-operator
   version: 0.8.1
-  epoch: 0
+  epoch: 1
   description: Integrate external secret management systems with Kubernetes
   copyright:
     - license: Apache-2.0