Skip to content

Update dua to 2.42.1 - #610

Merged
twitchyliquid64 merged 2 commits into
mainfrom
update-dua-2.42.1
Aug 17, 2026
Merged

Update dua to 2.42.1#610
twitchyliquid64 merged 2 commits into
mainfrom
update-dua-2.42.1

Conversation

@gominimal-pkgmgr-mgr

Copy link
Copy Markdown
Contributor

Update dua 2.41.12.42.1

Source: github:Byron/dua-cli
Release: https://github.com/Byron/dua-cli/releases/tag/v2.42.1
Changelog: Byron/dua-cli@v2.41.1...v2.42.1
Released: 2 days ago (2026-08-15)

Pkgscan: clean — diff against the prior version surfaced no newly-introduced suspicious patterns.

Vulnerability impact

Partition analysis at 2.42.1 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

  • 1 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.

Vulnerabilities fixed (1)

This update clears 1 vulnerabilities affecting 2.41.1:

CVE / GHSA Severity Fixed in
CVE-2026-73479 MEDIUM via range: <= 2.41.1

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)
Component Old New
~ dua 2.41.1 2.42.1
~ dua-upstream 2.41.1 2.42.1

Changes

Old New
Version 2.41.1 2.42.1
SHA256 68a37e947aa19d2a... 31a452ce11ff6246...
Size 217 KB 209 KB
Source gs://minimal-staging-archives/Byron/dua-cli/v2.41.1.tar.gz gs://minimal-staging-archives/Byron/dua-cli/v2.42.1.tar.gz
  • License: MIT (source: GitHub + tarball)

Created by pkgmgr

@gominimal-pkgmgr-mgr gominimal-pkgmgr-mgr Bot added the auto-update Opened autonomously by pkgmgr auto-update label Aug 17, 2026
…ub outage

No source change. Same symptom as #611: minimal-check, closure, all five report
checks and license/cla are green, but 'minimal build' never started — its
webhook delivery was dropped during GitHub's partial outage on 2026-08-17,
leaving the PR blocked on a required check that was never queued.

An empty commit moves the head SHA, which re-requests the full suite.
@twitchyliquid64
twitchyliquid64 added this pull request to the merge queue Aug 17, 2026
Merged via the queue into main with commit 079f09e Aug 17, 2026
9 checks passed
@twitchyliquid64
twitchyliquid64 deleted the update-dua-2.42.1 branch August 17, 2026 16:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-update Opened autonomously by pkgmgr auto-update

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants