What changed, and why it matters
This commit updates version numbers for build dependencies inside a patch file used to create reproducible AppImage builds. It is a routine maintenance change with no visible security bug or vulnerability fix.
No security action required; treat as normal build maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff bumps pinned Alpine package versions in contrib/build-linux/appimage/patches/type2-runtime-reproducible-build.patch: zlib-dev/zlib-static from 1.3.1-r2 to 1.3.2-r0 and musl-dev from 1.2.5-r9 to 1.2.5-r11. These are dependency updates for the AppImage type2 runtime build environment. No code logic changes, no vulnerability patch, and no security-relevant behavior is evident from the diff.
Changed components
contrib/build-linux/appimage/patches/type2-runtime-reproducible-build.patchInspect captured patch +3 / −3
diff --git a/contrib/build-linux/appimage/patches/type2-runtime-reproducible-build.patch b/contrib/build-linux/appimage/patches/type2-runtime-reproducible-build.patch
index 0895d2a..28aca9b 100644
--- a/contrib/build-linux/appimage/patches/type2-runtime-reproducible-build.patch
+++ b/contrib/build-linux/appimage/patches/type2-runtime-reproducible-build.patch
@@ -115,10 +115,10 @@ index 07b6533..fba9c6e 100644
+ meson=1.6.1-r0 \
+ zstd-dev=1.5.6-r2 \
+ zstd-static=1.5.6-r2 \
-+ zlib-dev=1.3.1-r2 \
-+ zlib-static=1.3.1-r2 \
++ zlib-dev=1.3.2-r0 \
++ zlib-static=1.3.2-r0 \
+ clang19=19.1.4-r0 \
-+ musl-dev=1.2.5-r9 \
++ musl-dev=1.2.5-r11 \
+ mimalloc2-dev=2.1.7-r0
COPY scripts/common/install-dependencies.sh /tmp/scripts/common/install-dependencies.sh
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.