8000 Update expat to 2.9.0 by gominimal-pkgmgr-mgr[bot] · Pull Request #860 · gominimal/pkgs · GitHub
[go: up one dir, main page]
Skip to content

Update expat to 2.9.0 - #860

Merged
bryan-minimal merged 1 commit into
mainfrom
update-expat-2.9.0
Oct 15, 2026
Merged

Update expat to 2.9.0#860
bryan-minimal merged 1 commit into
mainfrom
update-expat-2.9.0

Conversation

@gominimal-pkgmgr-mgr
@gominimal-pkgmgr-mgr gominimal-pkgmgr-mgr Bot commented Oct 12, 2026
Copy link
Copy Markdown
Contributor

Update expat 2.8.5 → 2.9.0

Source: github:libexpat/libexpat:release-asset
Release: https://github.com/libexpat/libexpat/releases/tag/R_2_9_0
Changelog: libexpat/libexpat@2.8.5...R_2_9_0
Released: 6 days ago (2026-10-05)

Pkgscan: clean — diff against the prior version surfaced no newly-introduced suspicious patterns.

Vulnerability impact

Partition analysis at 2.9.0 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

  • 1 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.

Vulnerabilities fixed (1)

This update clears 1 vulnerabilities affecting 2.8.5:

CVE / GHSA Severity Fixed in
CVE-2026-77214 HIGH via range: <= 2.8.5

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)
Component Old New
~ expat 2.8.5 2.9.0
~ expat-upstream 2.8.5 2.9.0

Changes

Old New
Version 2.8.5 2.9.0
SHA256 1e727b8933ec51a7... 1e6371862cc31999...
Size 528 KB 534 KB
Source gs://minimal-staging-archives/expat-2.8.5.tar.xz gs://minimal-staging-archives/expat-2.9.0.tar.xz
  • License: MIT (source: GitHub + tarball)

Created by pkgmgr

@gominimal-pkgmgr-mgr
gominimal-pkgmgr-mgr Bot requested a review from a team as a code owner October 12, 2026 05:32
@gominimal-pkgmgr-mgr gominimal-pkgmgr-mgr Bot added the auto-update Opened autonomously by pkgmgr auto-update label Oct 12, 2026
@coderabbitai
coderabbitai Bot commented Oct 12, 2026
Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: gominimal/pkgs/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: b32c0d11-b701-4ad5-b27d-323312cb0273

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@bryan-minimal
bryan-minimal added this pull request to the merge queue Oct 14, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to no response for status checks Oct 14, 2026
@bryan-minimal
bryan-minimal added this pull request to the merge queue Oct 15, 2026
Merged via the queue into main with commit 00b3d07 Oct 15, 2026
11 checks passed
@bryan-minimal
bryan-minimal deleted the update-expat-2.9.0 branch October 15, 2026 15:51
This was referenced Oct 26, 2026
Merged
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bryan-minimal bryan-minimal bryan-minimal approved these changes

Assignees

No one assigned

Labels

auto-update Opened autonomously by pkgmgr auto-update

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bryan-minimal
0