8000 Update sqlite to 3.54.0 by gominimal-pkgmgr-mgr[bot] · Pull Request #857 · gominimal/pkgs · GitHub
[go: up one dir, main page]
Skip to content

Update sqlite to 3.54.0 - #857

Merged
bryan-minimal merged 1 commit into
mainfrom
update-sqlite-3.54.0
Oct 14, 2026
Merged

Update sqlite to 3.54.0#857
bryan-minimal merged 1 commit into
mainfrom
update-sqlite-3.54.0

Conversation

@gominimal-pkgmgr-mgr
@gominimal-pkgmgr-mgr gominimal-pkgmgr-mgr Bot commented Oct 11, 2026
Copy link
Copy Markdown
Contributor

Update sqlite 3.53.4 → 3.54.0

Source: github:sqlite/sqlite:tag
Release: https://github.com/sqlite/sqlite/releases/tag/version-3.54.0
Changelog: sqlite/sqlite@version-3.53.4...version-3.54.0
Released: 2 days ago (2026-10-09)

Note

Auto-applied structural fixes:

  • Rewrote the source object name sqlite-autoconf-3530400.tar.gz → sqlite-autoconf-3540000.tar.gz: the URL is version-inert (encoded/upstream-named), so the new mirror object takes the canonical upstream basename and the url literal follows it.
  • Bumped the source URL build-date 3530400 → 3540000: the asset filename embeds a release date the %{version} template can't track, so the persisted URL would otherwise 404 at build time on the stale date.

Pkgscan: clean — diff against the prior version surfaced no newly-introduced suspicious patterns.

Vulnerability impact

Partition analysis at 3.54.0 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

  • 1 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.

Vulnerabilities fixed (1)

This update clears 1 vulnerabilities affecting 3.53.4:

CVE / GHSA Severity Fixed in
CVE-2026-50813 MEDIUM via range: < 3.54.0

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)
Component Old New
~ sqlite 3.53.4 3.54.0
~ sqlite-upstream 3.53.4 3.54.0

Changes

Old New
Version 3.53.4 3.54.0
SHA256 0e9483900e92cd5d... 134ec0802dda5795...
Size 3.3 MB 3.3 MB
Source gs://minimal-staging-archives/sqlite-autoconf-3530400.tar.gz gs://minimal-staging-archives/sqlite-autoconf-3540000.tar.gz

Created by pkgmgr

@gominimal-pkgmgr-mgr
gominimal-pkgmgr-mgr Bot requested a review from a team as a code owner October 11, 2026 22:48
@gominimal-pkgmgr-mgr gominimal-pkgmgr-mgr Bot added the auto-update Opened autonomously by pkgmgr auto-update label Oct 11, 2026
@coderabbitai
coderabbitai Bot commented Oct 11, 2026
Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: gominimal/pkgs/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 0428c509-d122-4929-9ab9-e8bec42cfeda

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@bryan-minimal
bryan-minimal added this pull request to the merge queue Oct 13, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to no response for status checks Oct 13, 2026
@bryan-minimal
bryan-minimal added this pull request to the merge queue Oct 14, 2026
Merged via the queue into main with commit 66d221b Oct 14, 2026
11 checks passed
@bryan-minimal
bryan-minimal deleted the update-sqlite-3.54.0 branch October 14, 2026 18:45
This was referenced Oct 26, 2026
Merged
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bryan-minimal bryan-minimal bryan-minimal approved these changes

Assignees

No one assigned

Labels

auto-update Opened autonomously by pkgmgr auto-update

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bryan-minimal
0