chore(oci/library/eclipse-mosquitto): update 2.0.22 ➼ 199ea8e

[tinfoild]

This PR contains the following updates:

Package	Update	Change	OpenSSF
public.ecr.aws/docker/library/eclipse-mosquitto (source)	digest	6852da9 → 199ea8e

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (in timezone Asia/Singapore)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[cloudflare-workers-and-pages]

Deploying jjgadgets-biohazard with    Cloudflare Pages

Latest commit:	b8df2df
Status:	🚫  Build failed.

View logs

[tinfoild]

kube/kustomization/out00

--- kube/deploy/core/db/mosquitto/app Kustomization: flux-system/mosquitto-app HelmRelease: mosquitto/mosquitto

+++ kube/deploy/core/db/mosquitto/app Kustomization: flux-system/mosquitto-app HelmRelease: mosquitto/mosquitto

@@ -81,13 +81,13 @@

             - sh
             - -c
             env:
               TZ: null
             image:
               repository: public.ecr.aws/docker/library/eclipse-mosquitto
-              tag: 2.0.22@sha256:6852da90a65dfff7aa3a1c8b249e92bb83c17ea8bbcce56bedff8707332a1a29
+              tag: 2.0.22@sha256:199ea8ef2e35ec2b1b37e59cfd1dbae538ed4dfa4a2251a121a52215a6248a21
             probes:
               liveness:
                 enabled: true
               readiness:
                 enabled: true
             resources:
@@ -109,13 +109,13 @@

             - sh
             - -c
             - cat /secrets/passwd > /passwd/passwd && chmod 0700 /passwd/passwd &&
               mosquitto_passwd -U /passwd/passwd
             image:
               repository: public.ecr.aws/docker/library/eclipse-mosquitto
-              tag: 2.0.22@sha256:6852da90a65dfff7aa3a1c8b249e92bb83c17ea8bbcce56bedff8707332a1a29
+              tag: 2.0.22@sha256:199ea8ef2e35ec2b1b37e59cfd1dbae538ed4dfa4a2251a121a52215a6248a21
             securityContext:
               allowPrivilegeEscalation: false
               capabilities:
                 drop:
                 - ALL
               readOnlyRootFilesystem: true

[tinfoild]

kube/helmrelease/out00

--- HelmRelease: mosquitto/mosquitto StatefulSet: mosquitto/mosquitto

+++ HelmRelease: mosquitto/mosquitto StatefulSet: mosquitto/mosquitto

@@ -71,13 +71,13 @@

       initContainers:
       - command:
         - sh
         - -c
         - cat /secrets/passwd > /passwd/passwd && chmod 0700 /passwd/passwd && mosquitto_passwd
           -U /passwd/passwd
-        image: public.ecr.aws/docker/library/eclipse-mosquitto:2.0.22@sha256:6852da90a65dfff7aa3a1c8b249e92bb83c17ea8bbcce56bedff8707332a1a29
+        image: public.ecr.aws/docker/library/eclipse-mosquitto:2.0.22@sha256:212f89e1eaeb2c322d6441b64396e3346026674db8fa9c27beac293405c32b3c
         name: 01-passwd-hash
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
@@ -105,13 +105,13 @@

         command:
         - sh
         - -c
         env:
         - name: TZ
           value: null
-        image: public.ecr.aws/docker/library/eclipse-mosquitto:2.0.22@sha256:6852da90a65dfff7aa3a1c8b249e92bb83c17ea8bbcce56bedff8707332a1a29
+        image: public.ecr.aws/docker/library/eclipse-mosquitto:2.0.22@sha256:212f89e1eaeb2c322d6441b64396e3346026674db8fa9c27beac293405c32b3c
         livenessProbe:
           failureThreshold: 3
           initialDelaySeconds: 0
           periodSeconds: 10
           tcpSocket:
             port: 2883

[ciel-shieru]

SECURITY VULNERABILITIES FOUND BY CIEL

📅 Scan date: 2026-07-24 03:55 UTC
🤖 Scanner: Ciel Security Scanner
🔗 PR: #5478 — chore(oci/library/eclipse-mosquitto): update 2.0.22 ➼ 212f89e
📦 Packages checked: 1
🔍 Sources: NVD, OSV.dev, GHSA, GHSL, CISA KEV, FortiGuard, CVE.org, Changelog
⚠️ Vulnerabilities found: 0

---

Severity Summary

Severity	Count
CRITICAL	0
HIGH	0
MEDIUM / MODERATE	0
LOW	0
UNKNOWN / NEEDS VERIFICATION	0
Total	0

---

Results

Package: eclipse-mosquitto (OCI image)

• Ecosystem: Docker
• Old version: 2.0.22@sha256:6852da9 — CLEAN
• New version: 2.0.22@sha256:212f89e — CLEAN

Note: This is a digest-only update — both old and new use the same Mosquitto software version 2.0.22. The tag is unchanged; only the image digest differs (rebuild with updated base layers).

Vulnerabilities in version 2.0.22 (both old and new)

No known applicable vulnerabilities found.

Source scan summary

Source	Status	Notes
OSV.dev	✅ Scanned	No applicable vulnerabilities for Mosquitto 2.0.22
NVD	✅ Scanned	10+ CVEs found (CVE-2024-10525, CVE-2024-8376, CVE-2023-28366, et al.), all fixed in Mosquitto 2.0.19 or earlier — not applicable to 2.0.22
GHSA	✅ Scanned	No advisories for eclipse-mosquitto
GHSL	✅ Scanned	No publications found for mosquitto
CISA KEV	✅ Scanned	No entries for mosquitto/eclipse
FortiGuard	✅ Scanned	No advisories for mosquitto
CVE.org	✅ Scanned	No relevant CVEs for 2.0.22
Changelog	✅ Scanned	2.0.22 (bugfix) → 2.0.23 (openssl crash fixes, no CVEs). All security fixes from 2.0.19, 2.0.21 are already in 2.0.22.

Non-applicable findings (verified and excluded)

Finding	Severity	Reason not applicable
CVE-2024-10525	CRITICAL	Fixed in 2.0.19; both versions are later
CVE-2024-8376	HIGH	Fixed in 2.0.19; both versions are later
CVE-2023-28366	HIGH	Fixed in 2.0.16; both versions are later
CVE-2023-5632	HIGH	Fixed in 2.0.6; both versions are later
CVE-2021-41039	HIGH	Fixed in 2.0.12; both versions are later
+11 more	—	All patched in Mosquitto versions ≤ 2.0.19

---

Recommendations

• MERGE PRIORITY: LOW — No known security vulnerabilities found in either version. This is a digest-only image rebuild with no software version change.
• Merge at own discretion.

---

⚠️ This comment was posted by an automated security scanner (Ciel).
To re-scan, trigger the renovate-security-scanner skill.