From edc6bf4dd60b221939b4182a65d72e133a004ca8 Mon Sep 17 00:00:00 2001 From: codex Date: Tue, 3 Nov 2026 22:21:53 +0100 Subject: [PATCH] Pin the audit-core receiver released by AUDIT-WP-0018-T03 (5f3d01c8) in the recovery preflight. Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 236506@bnt-lap001 Assistant-Session: 09087018-91e1-48c5-ab2f-acfbb62c92e4 --- scripts/audit-core-recovery-preflight.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/audit-core-recovery-preflight.py b/scripts/audit-core-recovery-preflight.py index 50f49e0..9d17f90 100755 --- a/scripts/audit-core-recovery-preflight.py +++ b/scripts/audit-core-recovery-preflight.py @@ -20,12 +20,12 @@ from pathlib import Path from typing import Any -# audit-core release pinned by audit-core b365525 (2026-11-03, AUDIT-WP-0013-T07, -# deploy/audit-core.yaml), built from 8185893. The attest-chain CronJob may run +# audit-core release pinned by audit-core 4fcf7c6 (2026-11-03, AUDIT-WP-0018-T03, +# deploy/audit-core.yaml), built from 2b8c909. The attest-chain CronJob may run # an older image and is not checked here. EXPECTED_IMAGE = ( "forgejo.coulomb.social/coulomb/audit-core@" - "sha256:304cfb83daa873e5790a2f262f6c4ccd56498b6e9e1a390368dcf0d407256300" + "sha256:5f3d01c8a1f90411a1429451b46c66a9ac9262fc7fce68790c16e22eeb7871a6" ) EXPECTED_DB_KEYS = {"username", "password", "host", "port", "dbname"}