Update stacked: 4 packages

[gominimal-pkgmgr-mgr]

Update base-soup (4 packages)

Note

These packages declare replace_on_cycle in their build.ncl, so
they participate in the toolchain rebuild graph and one hash change
cascades through the set. Bundling ensures the cascading rebuild
lands as a single unit, even when only one package is bumping —
avoids back-to-back full rebuilds from singleton PRs.

Warning

4 requested members did NOT ship — each needs separate follow-up.
A member is dropped when it fails to update, has its gs:// mirror
withheld by the scan gate, or is peeled to keep the shipped set a
closed dependency closure (a survivor built against a dropped member's
old version would be a broken closure).

Package	Old	Target	Why
actions-runner	2.332.0	2.336.0	update failed: [actions-runner] per-arch sources are gs://-mirrored (Amd64: gs://minimal-staging-archives/actions/runner/actions-runner-linux-x64-2.332.0.tar.gz, Arm64: gs://minimal-staging-archives/actions/runner/actions-runner-linux-arm64-2.332.0.tar.gz), which this path cannot update: it downloads each arch's artifact directly and has no mirror-upload step, so there is nothing to fetch until someone puts the new version in the bucket. Not a network error — the updater has never supported this combination. Mirroring here is NOT just plumbing: the single-arch mirror path routes through the scan-before-mirror withhold gate ('should_withhold_mirror'), and this function early-returns before that gate, so an upload added naively would publish unscanned bytes to the shared bucket. Until that lands: mirror the 2.336.0 artifacts for the new version by hand, update the per-arch sha256 literals, or re-point the sources at direct upstream URLs.
grype	0.116.1	0.117.0	gs:// mirror withheld (pkgscan-critical)
syft	1.50.0	1.51.0	gs:// mirror withheld (pkgscan-high)
gtest	1.17.0	1.18.0	held for dwell — upstream released ~2h ago (anti-xz recency gate, Critical <3h). Self-clears: re-ships automatically next run once it passes the recency window.

Warning

Pkgscan: 53 new signals introduced across bundle members.
Each member's diff was compared against its prior version. Review carefully — base-soup updates touch the toolchain core, so a malicious bump here has cascade-wide impact.

Package	Severity	File	Line	Capability (MBC)	Pattern
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/ui32_to_f64.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f32_mul.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f32_sub.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f32_eq.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f32_sqrt.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f64_lt.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f64_sqrt.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f32_to_ui32.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f64_to_ui32.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/i32_to_f32.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f64_to_ui64.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f32_add.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/i64_to_f64.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/ui64_to_f32.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f64_to_i32.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucblib/f64_add.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f64_div.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f32_le.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f64_sub.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/i32_to_f64.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/ui32_to_f32.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucblib/f64_div.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucblib/f32_sub.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucblib/f64_sqrt.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucbtest-gen/f32_div.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucbtest-gen/f64_div.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucbtest-gen/f64_mul.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucbtest-gen/f64_sqrt.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucblib/f32_sqrt.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/ui64_to_f64.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f32_to_i32.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucblib/f32_mul.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f64_le.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f64_mul.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucblib/f32_add.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/i64_to_f32.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucblib/f32_div.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucbtest-gen/f32_sqrt.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f32_div.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f64_eq.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucblib/f64_mul.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f32_lt.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f32_to_ui64.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f64_add.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/ucblib/f64_sub.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f64_to_i64.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
lean	MEDIUM	tests/pkg/float/test-vectors/testfloat/f32_to_i64.txt.gz	0	anti-static-analysis/embedded-blob	gzip archive
prek	MEDIUM	prek (upstream release)	0	metadata/recent-bump	upstream release <12h ago
railway	INFO	src/commands/code.rs	338	persistence/filesystem	~/.profile
railway	INFO	src/commands/code.rs	338	persistence/filesystem	/.profile
railway	INFO	src/commands/code.rs	339	persistence/filesystem	~/.profile
railway	INFO	src/commands/code.rs	339	persistence/filesystem	/.profile
railway	MEDIUM	railway (upstream release)	0	metadata/recent-bump	upstream release <12h ago

Summary

Package	Old	New	Source
cloud-sql-proxy	2.24.1	2.25.0	github:GoogleCloudPlatform/cloud-sql-proxy:operator-pinned
lean	4.32.2	4.33.0	github:leanprover/lean4:operator-pinned
prek	0.4.12	0.4.13	github:j178/prek:operator-pinned
railway	5.31.0	5.35.1	github:railwayapp/cli:operator-pinned

Per-package details

cloud-sql-proxy 2.24.1 → 2.25.0

• SHA256: bef13d34896d3e25... → ce721deeb43fe20f...
• Size: 150 KB
• Source: https://github.com/GoogleCloudPlatform/cloud-sql-proxy/archive/refs/tags/v2.24.1.tar.gz → https://github.com/GoogleCloudPlatform/cloud-sql-proxy/archive/refs/tags/v2.25.0.tar.gz
• Released: 2 days ago (2026-08-08)
• License: Apache-2.0 (source: GitHub + tarball)

lean 4.32.2 → 4.33.0

• SHA256: 289d38b3055d42b2... → 348d0839049a7cbb...
• Size: 86.7 MB
• Source: https://github.com/leanprover/lean4/archive/refs/tags/v4.32.2.tar.gz → https://github.com/leanprover/lean4/archive/refs/tags/v4.33.0.tar.gz
• Released: 13 hours ago (2026-08-10)
• License: Apache-2.0 (source: GitHub + tarball)

prek 0.4.12 → 0.4.13

• SHA256: e2744b62521f1dbf... → 0b1286a5d7d167ed...
• Size: 1.2 MB → 1.2 MB
• Source: gs://minimal-staging-archives/j178/prek/v0.4.12.tar.gz → gs://minimal-staging-archives/j178/prek/v0.4.13.tar.gz
• Released: 11 hours ago (2026-08-10)
• License: MIT (source: GitHub + tarball)

railway 5.31.0 → 5.35.1

• SHA256: 5d2ddab41da248f7... → faecc8d2adede53b...
• Size: 757 KB → 1.0 MB
• Source: gs://minimal-staging-archives/railwayapp/cli/v5.31.0.tar.gz → gs://minimal-staging-archives/railwayapp/cli/v5.35.1.tar.gz
• Released: 9 hours ago (2026-08-10)
• License: MIT (source: GitHub + tarball)

---

Created by pkgmgr