Jamie Tanna 426bf15b26 feat(manager/dockerfile): update APK packages pinned with a fuzzy constraint (#45693) ...

In the Wolfi undistribution, which Chainguard Images are built upon,
it is common to use a fuzzy constraint rather than exact versions[0]:

    RUN apk update && apk add --no-cache libcurl-openssl4=~8.12.1
          curl=~8.12.1 make

which we previously skipped as `unsupported-version` when we started
extracting `apk add` packages.

As the `apk` version resolves these, we should extract the constraint as
the `currentValue`, and let the lookup evaluate it.

A constraint of `~8.12.1` matches every `8.12.1-rN` version, so we don't
need to update these constraints.

However, when the `newVersion` is i.e. `8.13.0-r0`, the constraint is
rewritten to `curl=~8.13.0`.

If using an exact pin, the version is upgraded with the same precision
i.e. `curl=8.12.1` -> `curl=8.13.0`.

We still skip constraints we can't handle with i.e. `contains-variable`
or `unsupported-version`.

[0]: https://github.com/elastic/crawler/blob/bc15328fb808affd00dff0cd92527bbe402f5ded/Dockerfile.wolfi#L7

Co-authored-by: Claude Opus 5 <jamie.tanna+claude-code@mend.io>

2026-09-18 07:06:55 +00:00

..

ansible

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

ansible-galaxy

refactor(manager): remove unreachable branches (#46206)

2026-09-15 08:36:30 +00:00

ant

refactor(linters): enable oxlint rule prefer-named-capture-group (#44714)

2026-09-03 09:54:40 +00:00

apm

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

argocd

feat(manager): share OCI Helm chart resolution across managers (#45760)

2026-09-09 13:51:30 +00:00

asdf

refactor(linters): enable oxlint rule prefer-named-capture-group (#44714)

2026-09-03 09:54:40 +00:00

azure-pipelines

test(manager): close long-tail branch coverage gaps (#45954)

2026-09-15 07:10:10 +00:00

batect

test: use expect().resolves instead of awaiting inside expect (#45672)

2026-09-04 10:40:46 +00:00

batect-wrapper

refactor(linters): enable oxlint rule prefer-named-capture-group (#44714)

2026-09-03 09:54:40 +00:00

bazel

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

bazel-module

feat(manager): pass extracted constraints to updateArtifacts (#45826)

2026-09-14 11:09:07 +00:00

bazelisk

feat(manager): pass extracted constraints to updateArtifacts (#45826)

2026-09-14 11:09:07 +00:00

bicep

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

bitbucket-pipelines

fix(linters): add linting rule to enforce usage of our regEx utility (#44690)

2026-08-14 14:30:46 +00:00

bitrise

chore: migrate from zod/v3 to zod/v4 (#43691)

2026-05-30 16:01:58 +00:00

buildkite

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

buildpacks

refactor(linters): enable oxlint rule prefer-named-capture-group (#44714)

2026-09-03 09:54:40 +00:00

bun

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

bun-version

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

bundler

test(manager): close long-tail branch coverage gaps (#45954)

2026-09-15 07:10:10 +00:00

cake

test: use expect().resolves instead of awaiting inside expect (#45672)

2026-09-04 10:40:46 +00:00

cargo

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

cdnurl

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

circleci

refactor(linters): add prefer-coerce-object rule (#45493)

2026-08-28 09:27:59 +00:00

cloudbuild

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

cocoapods

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

composer

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

conan

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

copier

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

cpanfile

test(manager): close long-tail branch coverage gaps (#45954)

2026-09-15 07:10:10 +00:00

crossplane

fix(linters): add linting rule to enforce usage of our regEx utility (#44690)

2026-08-14 14:30:46 +00:00

crow

chore: migrate from zod/v3 to zod/v4 (#43691)

2026-05-30 16:01:58 +00:00

custom

fix(config/validation): allow only capturing currentDigest in Custom Managers (#45671)

2026-09-04 11:30:15 +00:00

deno

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

deps-edn

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

devbox

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

devcontainer

feat(manager/devcontainer): add folder pattern to list of managerFilePatterns (#45377)

2026-08-21 08:49:52 +00:00

docker-compose

test(manager): cover the pre-commit warning switch and drop unreachable fallbacks (#46221)

2026-09-16 06:43:02 +00:00

dockerfile

feat(manager/dockerfile): update APK packages pinned with a fuzzy constraint (#45693)

2026-09-18 07:06:55 +00:00

droneci

test(manager): close more branch coverage gaps (#45972)

2026-09-16 06:43:00 +00:00

fleet

feat(manager): share OCI Helm chart resolution across managers (#45760)

2026-09-09 13:51:30 +00:00

flux

test(manager): close long-tail branch coverage gaps (#45954)

2026-09-15 07:10:10 +00:00

fvm

chore: migrate from zod/v3 to zod/v4 (#43691)

2026-05-30 16:01:58 +00:00

git-submodules

test(manager): cover the pre-commit warning switch and drop unreachable fallbacks (#46221)

2026-09-16 06:43:02 +00:00

github-actions

fix(manager/github-actions): treat setup-beam's versions as ranges

2026-09-16 14:14:43 +01:00

gitlabci

test(manager): close long-tail branch coverage gaps (#45954)

2026-09-15 07:10:10 +00:00

gitlabci-include

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

glasskube

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

gleam

refactor(manager): share the lock file updateArtifacts skeleton (#46093)

2026-09-16 13:13:42 +00:00

gomod

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

gradle

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

gradle-wrapper

test(manager): close long-tail branch coverage gaps (#45954)

2026-09-15 07:10:10 +00:00

haskell-cabal

refactor(linters): add rule to enforce inline single use fixtures (#45230)

2026-09-03 07:42:45 +00:00

helm-requirements

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

helm-values

feat(manager/helm-values): support version in sibling tag/version key (#46267)

2026-09-17 13:48:24 +00:00

helmfile

refactor(manager): share the lock file updateArtifacts skeleton (#46093)

2026-09-16 13:13:42 +00:00

helmsman

feat(manager): share OCI Helm chart resolution across managers (#45760)

2026-09-09 13:51:30 +00:00

helmv3

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

hermit

test(manager): mark remaining unreachable manager guards (#46082)

2026-09-16 06:43:01 +00:00

homeassistant-manifest

docs: ensure that config in documentation is error and warning free (#43727)

2026-06-02 13:29:48 +00:00

homebrew

test(manager): close more branch coverage gaps (#45972)

2026-09-16 06:43:00 +00:00

html

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

jenkins

test(manager): close more branch coverage gaps (#45972)

2026-09-16 06:43:00 +00:00

jsonnet-bundler

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

kotlin-script

refactor(linters): add rule to enforce inline single use fixtures (#45230)

2026-09-03 07:42:45 +00:00

kubernetes

chore: migrate from zod/v3 to zod/v4 (#43691)

2026-05-30 16:01:58 +00:00

kustomize

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

leiningen

test(manager): mark remaining unreachable manager guards (#46082)

2026-09-16 06:43:01 +00:00

maven

test(manager): cover the pre-commit warning switch and drop unreachable fallbacks (#46221)

2026-09-16 06:43:02 +00:00

maven-wrapper

perf(manager/maven-wrapper): avoid matching each line twice (#46027)

2026-09-14 15:11:01 +00:00

meteor

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

mint

feat(manager/mint): add support for fully qualified urls for Mint packages (#44305)

2026-07-08 12:25:54 +00:00

mise

refactor(manager): share the lock file updateArtifacts skeleton (#46093)

2026-09-16 13:13:42 +00:00

mix

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

nix

feat(manager): pass extracted constraints to updateArtifacts (#45826)

2026-09-14 11:09:07 +00:00

nodenv

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

npm

refactor(manager): remove unreachable branches (#46206)

2026-09-15 08:36:30 +00:00

nuget

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

nvm

fix(linters): add linting rule to enforce usage of our regEx utility (#44690)

2026-08-14 14:30:46 +00:00

ocb

test(manager): mark remaining unreachable manager guards (#46082)

2026-09-16 06:43:01 +00:00

osgi

refactor(linters): add rule to enforce inline single use fixtures (#45230)

2026-09-03 07:42:45 +00:00

pep621

refactor(manager): share the lock file updateArtifacts skeleton (#46093)

2026-09-16 13:13:42 +00:00

pep723

test(manager): mark remaining unreachable manager guards (#46082)

2026-09-16 06:43:01 +00:00

pip_requirements

feat(manager): pass extracted constraints to updateArtifacts (#45826)

2026-09-14 11:09:07 +00:00

pip_setup

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

pip-compile

test(manager): mark remaining unreachable manager guards (#46082)

2026-09-16 06:43:01 +00:00

pipenv

test(manager): mark remaining unreachable manager guards (#46082)

2026-09-16 06:43:01 +00:00

pixi

refactor(manager): share the lock file updateArtifacts skeleton (#46093)

2026-09-16 13:13:42 +00:00

poetry

refactor(manager): share the lock file updateArtifacts skeleton (#46093)

2026-09-16 13:13:42 +00:00

pre-commit

test(manager): cover the pre-commit warning switch and drop unreachable fallbacks (#46221)

2026-09-16 06:43:02 +00:00

proto

refactor(lint): add types-location rule and enable it for lib/modules (#45497)

2026-08-27 19:52:09 +00:00

pub

refactor(manager): share the lock file updateArtifacts skeleton (#46093)

2026-09-16 13:13:42 +00:00

puppet

refactor(linters): enable oxlint rule prefer-named-capture-group (#44714)

2026-09-03 09:54:40 +00:00

pyenv

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

quadlet

refactor(manager): remove unreachable branches (#46206)

2026-09-15 08:36:30 +00:00

renovate-config

test(manager/renovate-config): guard supportedPresetSources against drift (#46256)

2026-09-16 15:31:57 +00:00

ruby-version

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

runtime-version

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

rust-toolchain

fix(manager/rust-toolchain): report skipReason instead of dropping deps (#45144)

2026-08-10 07:52:31 +00:00

sbt

test(manager/sbt,swift): close branch coverage gaps (#45946)

2026-09-15 07:10:09 +00:00

scalafmt

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

setup-cfg

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

smithy

feat(managers): add support for the Smithy framework (#44737)

2026-07-22 07:50:04 +00:00

sveltos

feat(manager): share OCI Helm chart resolution across managers (#45760)

2026-09-09 13:51:30 +00:00

swift

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

tekton

test: shrink oversized fixtures to representative examples (#45666)

2026-09-04 10:40:45 +00:00

terraform

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

terraform-version

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

terragrunt

feat(manager/terragrunt): detect forgejo-tags datasource for git-tag sources (#46202)

2026-09-16 13:15:37 +00:00

terragrunt-version

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

tflint-plugin

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

travis

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

typst

fix(datasource/typst): set cacheable explicitly (#46126)

2026-09-16 12:13:48 +00:00

unity3d

fix(manager): add missing categories exports (#42800)

2026-05-08 07:01:27 +00:00

velaci

refactor(linters): add prefer-coerce-object rule (#45493)

2026-08-28 09:27:59 +00:00

vendir

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

woodpecker

refactor(linters): add prefer-coerce-object rule (#45493)

2026-08-28 09:27:59 +00:00

xcodegen

chore: migrate from zod/v3 to zod/v4 (#43691)

2026-05-30 16:01:58 +00:00

api.ts

feat(manager): add apm manager for Agent Package Manager (#44390)

2026-09-02 16:17:15 +00:00

fingerprint.spec.ts

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

index.spec.ts

test: use expect().resolves instead of awaiting inside expect (#45672)

2026-09-04 10:40:46 +00:00

index.ts

refactor(linters): enabled oxlints func-style (#44691)

2026-07-19 11:14:22 +00:00

metadata.spec.ts

refactor(linters): enable node/no-sync and migrate to async calls (#44693)

2026-07-20 14:28:26 +00:00

range.spec.ts

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

types.ts

refactor(manager): add shared artifact result and lock file helpers (#46091)

2026-09-16 13:13:41 +00:00

util.spec.ts

refactor(manager): add shared artifact result and lock file helpers (#46091)

2026-09-16 13:13:41 +00:00

util.ts

refactor(manager): add shared artifact result and lock file helpers (#46091)

2026-09-16 13:13:41 +00:00