Skip to content

fix(infra): publish CVE-fixed CHIRP UHRP images #496

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ty-everett merged 3 commits into from
Aug 27, 2026
Merged

fix(infra): publish CVE-fixed CHIRP UHRP images #496

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
4ec01af
chore(governance): renew verification windows
ty-everett Aug 27, 2026
417b0f9
fix(infra): upgrade UHRP runtime OpenSSL
ty-everett Aug 27, 2026
9712e7e
style(infra): consolidate runtime package layer
ty-everett Aug 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/about/versioning.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: 'Versioning Policy'
kind: meta
version: '2.0.0'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: [about, versioning, semver, releases]
Expand Down
2 changes: 1 addition & 1 deletion docs/architecture/beef.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: BEEF — Background Evaluation Extended Format (BRC-62)
kind: meta
version: 'n/a'
last_updated: '2026-04-29'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['architecture', 'BEEF', 'BRC-62', 'SPV']
Expand Down
2 changes: 1 addition & 1 deletion docs/architecture/brc-100.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: BRC-100 Wallet Interface
kind: meta
version: 'n/a'
last_updated: '2026-04-30'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['architecture', 'BRC-100', 'wallet']
Expand Down
2 changes: 1 addition & 1 deletion docs/architecture/conformance.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Conformance Pipeline
kind: meta
version: 'n/a'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['architecture', 'conformance', 'cross-language']
Expand Down
2 changes: 1 addition & 1 deletion docs/architecture/identity.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Identity & Mutual Authentication
kind: meta
version: 'n/a'
last_updated: '2026-04-29'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['architecture', 'identity', 'auth', 'BRC-31', 'BRC-103', 'BRC-104']
Expand Down
2 changes: 1 addition & 1 deletion docs/architecture/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Architecture
kind: meta
version: 'n/a'
last_updated: '2026-04-29'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['architecture']
Expand Down
2 changes: 1 addition & 1 deletion docs/architecture/layers.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Stack Layers
kind: meta
version: 'n/a'
last_updated: '2026-05-01'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['architecture', 'layers']
Expand Down
2 changes: 1 addition & 1 deletion docs/conformance/contributing-vectors.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: 'Contributing Vectors'
kind: conformance
version: '1.0.0'
last_updated: '2026-05-14'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: [conformance, contributing, vectors]
Expand Down
2 changes: 1 addition & 1 deletion docs/conformance/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: 'Conformance'
kind: meta
version: 'n/a'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: [conformance, testing, cross-language, vectors]
Expand Down
2 changes: 1 addition & 1 deletion docs/conformance/runner-ts.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: 'TypeScript Runner'
kind: conformance
version: '1.0.0'
last_updated: '2026-05-14'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: [conformance, runner, typescript]
Expand Down
2 changes: 1 addition & 1 deletion docs/conformance/vectors.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: 'Vector Catalog'
kind: conformance
version: '1.0.0'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: [conformance, vectors, catalog]
Expand Down
2 changes: 1 addition & 1 deletion docs/get-started/choose-your-stack.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Choose Your Stack
kind: meta
version: 'n/a'
last_updated: '2026-04-30'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['decision-guide']
Expand Down
2 changes: 1 addition & 1 deletion docs/get-started/concepts.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Key Concepts
kind: meta
version: 'n/a'
last_updated: '2026-04-30'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['concepts', 'protocol']
Expand Down
2 changes: 1 addition & 1 deletion docs/get-started/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Get Started
kind: meta
version: 'n/a'
last_updated: '2026-04-30'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['onboarding']
Expand Down
2 changes: 1 addition & 1 deletion docs/get-started/install.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Install
kind: meta
version: 'n/a'
last_updated: '2026-04-29'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['installation', 'setup']
Expand Down
2 changes: 1 addition & 1 deletion docs/guides/compiled-package-examples.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: 'Compiled Package Boundary Examples'
kind: guide
version: '1.0.0'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: [guide, typescript, packages, consumers, examples]
Expand Down
2 changes: 1 addition & 1 deletion docs/guides/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: 'Guides'
kind: meta
version: '1.0.0'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: [guides, tutorials, how-to]
Expand Down
2 changes: 1 addition & 1 deletion docs/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: ts-stack
kind: meta
version: 'n/a'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: []
Expand Down
2 changes: 1 addition & 1 deletion docs/infrastructure/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: 'Infrastructure'
kind: meta
version: '1.0.0'
last_updated: '2026-04-30'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: [infrastructure, deployment, reference-implementations, ts-stack]
Expand Down
2 changes: 1 addition & 1 deletion docs/infrastructure/overlay-server.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: 'Overlay Server'
kind: infra
version: '2.1.6'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: [overlay, topic-manager, lookup-service, transaction-routing]
Expand Down
10 changes: 7 additions & 3 deletions docs/infrastructure/uhrp-server-basic.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,9 @@
id: infra-uhrp-basic
title: 'UHRP Server (Basic)'
kind: infra
version: '0.1.33'
last_updated: '2026-08-25'
last_verified: '2026-08-25'
version: '0.1.34'
last_updated: '2026-08-26'
last_verified: '2026-08-26'
review_cadence_days: 30
status: beta
tags: [uhrp, storage, file-server, development, lightweight]
Expand All @@ -14,6 +14,10 @@ tags: [uhrp, storage, file-server, development, lightweight]

> A simple, file-system based UHRP (Universal Host Reference Protocol) host server. Stores files locally on disk and provides HTTP endpoints for UHRP data retrieval and storage.

The 0.1.34 image refreshes its Alpine OpenSSL runtime libraries to 3.5.8-r0
to remediate CVE-2026-14456. Service APIs, storage formats, CHIRP behavior, and
deployment configuration are unchanged from 0.1.33.

## What it does

A lightweight Node.js server with Express that implements UHRP storage and
Expand Down
10 changes: 7 additions & 3 deletions docs/infrastructure/uhrp-server-cloud-bucket.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,9 @@
id: infra-uhrp-cloud
title: 'UHRP Server (Cloud Bucket)'
kind: infra
version: '0.2.35'
last_updated: '2026-08-25'
last_verified: '2026-08-25'
version: '0.2.36'
last_updated: '2026-08-26'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: [uhrp, storage, cloud, google-cloud-run, production]
Expand All @@ -14,6 +14,10 @@ tags: [uhrp, storage, cloud, google-cloud-run, production]

> A production-grade UHRP host server backed by Google Cloud Storage. Stores large files in cloud buckets with optional billing/micropayments and includes advertising infrastructure for overlay network discovery.

The 0.2.36 image refreshes its Alpine OpenSSL runtime libraries to 3.5.8-r0
to remediate CVE-2026-14456. Service APIs, bucket layouts, CHIRP behavior, and
deployment configuration are unchanged from 0.2.35.

## What it does

A TypeScript/Express server designed for Google Cloud Run that implements UHRP
Expand Down
2 changes: 1 addition & 1 deletion docs/packages/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Packages
kind: meta
version: 'n/a'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['packages']
Expand Down
2 changes: 1 addition & 1 deletion docs/packages/network/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ kind: meta
domain: network
version: 'n/a'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['domain', 'network']
Expand Down
2 changes: 1 addition & 1 deletion docs/packages/overlays/btms-backend.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ domain: overlays
version: '0.1.1'
source_repo: 'bsv-blockchain/ts-stack'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
repo: 'https://github.com/bsv-blockchain/ts-stack/tree/main/packages/overlays/btms-backend'
status: experimental
Expand Down
2 changes: 1 addition & 1 deletion docs/packages/overlays/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ kind: meta
domain: overlays
version: 'n/a'
last_updated: '2026-04-28'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['domain', 'overlays']
Expand Down
2 changes: 1 addition & 1 deletion docs/packages/sdk/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ kind: meta
domain: sdk
version: 'n/a'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['domain', 'sdk']
Expand Down
2 changes: 1 addition & 1 deletion docs/packages/wallet/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ kind: meta
domain: wallet
version: 'n/a'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['domain', 'wallet']
Expand Down
2 changes: 1 addition & 1 deletion docs/packages/wallet/wallet-toolbox-examples.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ kind: package
domain: wallet
version: '1.1.157'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
repo: 'https://github.com/bsv-blockchain/ts-stack/tree/main/packages/wallet/wallet-toolbox-examples'
status: stable
Expand Down
2 changes: 1 addition & 1 deletion docs/reference/brc-index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: 'BRC Standards Index'
kind: reference
version: 'n/a'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: [reference, brc, standards]
Expand Down
2 changes: 1 addition & 1 deletion docs/reference/npm-package-supply-chain.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: 'npm Package Supply Chain'
kind: reference
version: '1.0.0'
last_updated: '2026-07-27'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: [reference, packages, npm, security, releases]
Expand Down
4 changes: 2 additions & 2 deletions docs/reference/stack-facts.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -80,8 +80,8 @@ the separately released and verified image digest.
| BSV Chaintracks Server | `chaintracks-server` | `1.1.15` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/chaintracks-server](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/chaintracks-server) |
| BSV Message Box Server | `@bsv/messagebox-server` | `1.1.39` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/message-box-server](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/message-box-server) |
| BSV Overlay Server | `@bsv/overlay-express-examples` | `2.1.34` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/overlay-server](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/overlay-server) |
| BSV UHRP Basic Server | `@bsv/uhrp-lite` | `0.1.33` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/uhrp-server-basic](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/uhrp-server-basic) |
| BSV UHRP Cloud Bucket Server | `@bsv/uhrp-storage-server` | `0.2.35` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/uhrp-server-cloud-bucket](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/uhrp-server-cloud-bucket) |
| BSV UHRP Basic Server | `@bsv/uhrp-lite` | `0.1.34` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/uhrp-server-basic](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/uhrp-server-basic) |
| BSV UHRP Cloud Bucket Server | `@bsv/uhrp-storage-server` | `0.2.36` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/uhrp-server-cloud-bucket](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/uhrp-server-cloud-bucket) |
| Wallet Authentication Backend | `@bsv/wab-server` | `1.5.3` | `>=24 <25` | node, linux/amd64 | ghcr-and-aws-marketplace-keyless | [infra/wab](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/wab) |
| BSV Wallet Infrastructure | `@bsv/wallet-infra` | `2.0.37` | `>=24 <25` | node, linux/amd64 | ghcr-keyless | [infra/wallet-infra](https://github.com/bsv-blockchain/ts-stack/tree/main/infra/wallet-infra) |

Expand Down
2 changes: 1 addition & 1 deletion docs/specs/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Specifications
kind: meta
version: 'n/a'
last_updated: '2026-04-28'
last_verified: '2026-07-27'
last_verified: '2026-08-26'
review_cadence_days: 30
status: stable
tags: ['specs']
Expand Down
4 changes: 2 additions & 2 deletions governance/repository-health/exceptions.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -206,7 +206,7 @@
"https://github.com/bsv-blockchain/ts-stack/issues/324"
],
"created": "2026-07-24",
"reviewBy": "2026-08-26",
"reviewBy": "2026-09-26",
"removeWhen": "Every conformance skip is implemented or documented as deliberately unsupported with a permanent compatibility decision."
},
{
Expand All @@ -222,7 +222,7 @@
"https://github.com/bsv-blockchain/ts-stack/issues/324"
],
"created": "2026-07-24",
"reviewBy": "2026-08-26",
"reviewBy": "2026-09-26",
"removeWhen": "All six required-suite gaps are enabled, moved to a correctly governed non-PR suite, or removed with evidence that the scenario is obsolete."
},
{
Expand Down
Loading
Loading