chore(oci/library/fedora): update 44 ➼ 43b29f6

[tinfoild]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
public.ecr.aws/docker/library/fedora (source)	container	digest	b3242de → 43b29f6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (in timezone Asia/Singapore)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[cloudflare-workers-and-pages]

Deploying jjgadgets-biohazard with    Cloudflare Pages

Latest commit:	8ec3afc
Status:	🚫  Build failed.

View logs

[tinfoild]

kube/kustomization/out00

[tinfoild]

kube/helmrelease/out00

[ciel-shieru]

SECURITY VULNERABILITIES FOUND BY CIEL

📅 Scan date: 2026-07-24 05:38 UTC
🤖 Scanner: Ciel Security Scanner
🔗 PR: #5630 — chore(oci/library/fedora): update 44 ➼ 6c75d5b
📦 Packages checked: 1
🔍 Sources: NVD, OSV.dev, GHSA, GHSL, CISA KEV, FortiGuard, CVE.org, Changelog
⚠️ Vulnerabilities found: 0

---

Severity Summary

Severity	Count
CRITICAL	0
HIGH	0
MEDIUM / MODERATE	0
LOW	0
UNKNOWN / NEEDS VERIFICATION	0
Total	0

---

Results

Package: public.ecr.aws/docker/library/fedora

• Ecosystem: Docker (container image)
• Old digest: sha256:b3242de4d1022bf74f207f9b8462daa183c24b85c5997a97cd1d7dd6e6359a9b — CLEAN
• New digest: sha256:6c75d5bf57cb0fa5aa4b92c6a83c86c791644496d9ac230de7711f5b8ec3b898 — CLEAN
• Tag: 44 (Fedora 44 — same base OS version in both)
• Change type: Digest-only update (base image rebuild with updated packages)

Vulnerabilities in version old_digest

No known vulnerabilities found that are specific to this image digest.

Vulnerabilities in version new_digest

No known vulnerabilities found that are specific to this image digest.

Source scan summary

Source	Status	Notes
OSV.dev	✅ Scanned	No results for fedora@44 in any ecosystem (Docker, Linux, RedHat, generic)
NVD	✅ Scanned	No Fedora 44-specific CVEs found; only older generic Fedora CVEs (pre-2021) not applicable to F44
GHSA	✅ Scanned	No advisories for "fedora" or "redhat" as packages
GHSL	✅ Scanned	No Fedora-related GHSL publications found (source: github.com/securitylab repo)
CISA KEV	✅ Scanned	No entries for "fedora", "red hat", or "redhat"
FortiGuard	✅ Scanned	No Fedora-related advisories on FortiGuard PSIRT
CVE.org	✅ Scanned	Cross-referenced via CVE API; no CVEs specific to this Fedora 44 container digest
Changelog	✅ Scanned	Source repo (fedora-cloud/docker-brew-fedora) has no per-digest release notes; digest update represents routine base image rebuild

---

Recommendations

• MERGE PRIORITY: LOW — No security vulnerabilities found in either the old or new container image digest. This is a routine Fedora 44 base image rebuild (digest-only update). Both old and new versions are Fedora 44, so no OS version upgrade is involved. Merge at own discretion.
• The new digest (pushed 2026-05-28) incorporates all package security updates available up to that build date. Routine container digest updates are a recommended practice for keeping CI images current.

---

⚠️ This comment was posted by an automated security scanner (Ciel).
To re-scan, trigger the renovate-security-scanner skill.