test: validate all metadata.yaml files against schema in pytest

- pyproject.toml with pytest>=8 in [dependency-groups.dev] so
  uv run --group dev pytest resolves without a global install
- tests/__init__.py and tests/conftest.py skeleton referencing issue #162
- pre-commit local hook runs pytest tests/ on Python file changes;
  exit code 5 (no tests collected) is treated as success so commits
  are not blocked while the test suite is being built out

.pre-commit-config.yaml

@@ -31,6 +31,23 @@ repos:
             "-s",
           ]
 
+  - repo: local
+    hooks:
+      - id: pytest
+        name: Run unit tests
+        entry: make test
+        language: system
+        types: [python]
+        pass_filenames: false
+
+  - repo: https://github.com/python-jsonschema/check-jsonschema
+    rev: 0.37.2
+    hooks:
+      - id: check-jsonschema
+        name: Validate RPM package metadata
+        files: ^rpms/[^/]+/metadata\.yaml$
+        args: [--schemafile, schema/metadata.json]
+
   - repo: https://github.com/astral-sh/ruff-pre-commit
     rev: v0.14.7
     hooks:

.woodpecker/build-almalinux8.yaml

@@ -7,12 +7,18 @@ steps:
     commands:
       - mkdir -p /woodpecker/rpms
       - ln -s /woodpecker/rpms /workspace
-      - dnf install buildah -y
       - ./tools/build build-all --distro almalinux/el8 --buildah
     privileged: true
     backend_options:
       kubernetes:
         serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
 
   - name: show rpms
     image: git.unkin.net/unkin/almalinux8-base:latest

.woodpecker/build-almalinux9.yaml

@@ -7,12 +7,18 @@ steps:
     commands:
       - mkdir -p /woodpecker/rpms
       - ln -s /woodpecker/rpms /workspace
-      - dnf install buildah -y
       - ./tools/build build-all --distro almalinux/el9 --buildah
     privileged: true
     backend_options:
       kubernetes:
         serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
 
   - name: show rpms
     image: git.unkin.net/unkin/almalinux9-base:latest

.woodpecker/build-fedora42.yaml

@@ -0,0 +1,26 @@
+when:
+  - event: pull_request
+
+steps:
+  - name: build rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro fedora/42 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show rpms
+    image: git.unkin.net/unkin/fedora42-base:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"

.woodpecker/build-fedora43.yaml

@@ -0,0 +1,26 @@
+when:
+  - event: pull_request
+
+steps:
+  - name: build rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro fedora/43 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show rpms
+    image: git.unkin.net/unkin/fedora43-base:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"

.woodpecker/build-fedora44.yaml

@@ -0,0 +1,26 @@
+when:
+  - event: pull_request
+
+steps:
+  - name: build rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro fedora/44 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show rpms
+    image: git.unkin.net/unkin/fedora44-base:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"

.woodpecker/deploy-almalinux8.yaml

@@ -8,12 +8,18 @@ steps:
     commands:
       - mkdir -p /woodpecker/rpms
       - ln -s /woodpecker/rpms /workspace
-      - dnf install buildah -y
       - ./tools/build build-all --distro almalinux/el8 --buildah
     privileged: true
     backend_options:
       kubernetes:
         serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
 
   - name: show-rpms
     image: git.unkin.net/unkin/almalinux9-base:latest
@@ -34,4 +40,11 @@ steps:
     backend_options:
       kubernetes:
         serviceAccountName: default
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 512Mi
+            cpu: 500m
     depends_on: [build-rpms, show-rpms]

.woodpecker/deploy-almalinux9.yaml

@@ -8,12 +8,18 @@ steps:
     commands:
       - mkdir -p /woodpecker/rpms
       - ln -s /woodpecker/rpms /workspace
-      - dnf install buildah -y
       - ./tools/build build-all --distro almalinux/el9 --buildah
     privileged: true
     backend_options:
       kubernetes:
         serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
 
   - name: show-rpms
     image: git.unkin.net/unkin/almalinux9-base:latest
@@ -34,4 +40,11 @@ steps:
     backend_options:
       kubernetes:
         serviceAccountName: default
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 512Mi
+            cpu: 500m
     depends_on: [build-rpms, show-rpms]

.woodpecker/deploy-fedora42.yaml

@@ -0,0 +1,50 @@
+when:
+  - event: push
+    branch: master
+
+steps:
+  - name: build-rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro fedora/42 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show-rpms
+    image: git.unkin.net/unkin/fedora42-rpmbuilder:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"
+    depends_on: [build-rpms]
+
+  - name: deploy-rpms
+    image: git.unkin.net/unkin/fedora42-rpmbuilder:latest
+    commands:
+      - |
+        for rpm in $(find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"); do
+          curl --user droneci:$${DRONECI_PASSWORD} --upload-file $rpm https://git.unkin.net/api/packages/unkin/rpm/fedora/42/upload
+        done
+    environment:
+      DRONECI_PASSWORD:
+        from_secret: DRONECI_PASSWORD
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 512Mi
+            cpu: 500m
+    depends_on: [build-rpms, show-rpms]

.woodpecker/deploy-fedora43.yaml

@@ -0,0 +1,50 @@
+when:
+  - event: push
+    branch: master
+
+steps:
+  - name: build-rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro fedora/43 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show-rpms
+    image: git.unkin.net/unkin/fedora43-rpmbuilder:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"
+    depends_on: [build-rpms]
+
+  - name: deploy-rpms
+    image: git.unkin.net/unkin/fedora43-rpmbuilder:latest
+    commands:
+      - |
+        for rpm in $(find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"); do
+          curl --user droneci:$${DRONECI_PASSWORD} --upload-file $rpm https://git.unkin.net/api/packages/unkin/rpm/fedora/43/upload
+        done
+    environment:
+      DRONECI_PASSWORD:
+        from_secret: DRONECI_PASSWORD
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 512Mi
+            cpu: 500m
+    depends_on: [build-rpms, show-rpms]

.woodpecker/deploy-fedora44.yaml

@@ -0,0 +1,50 @@
+when:
+  - event: push
+    branch: master
+
+steps:
+  - name: build-rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro fedora/44 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show-rpms
+    image: git.unkin.net/unkin/fedora44-rpmbuilder:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"
+    depends_on: [build-rpms]
+
+  - name: deploy-rpms
+    image: git.unkin.net/unkin/fedora44-rpmbuilder:latest
+    commands:
+      - |
+        for rpm in $(find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"); do
+          curl --user droneci:$${DRONECI_PASSWORD} --upload-file $rpm https://git.unkin.net/api/packages/unkin/rpm/fedora/44/upload
+        done
+    environment:
+      DRONECI_PASSWORD:
+        from_secret: DRONECI_PASSWORD
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 512Mi
+            cpu: 500m
+    depends_on: [build-rpms, show-rpms]

Makefile

@@ -11,7 +11,7 @@ DISTRO ?= almalinux/el9
 PACKAGES := $(shell find $(ROOT_DIR)/rpms -mindepth 1 -maxdepth 1 -type d -exec test -f {}/metadata.yaml \; -print | xargs -n1 basename | sort)
 
 # Default target to build all packages
-.PHONY: all list build clean
+.PHONY: all list build clean test
 all: build-all
 
 # List all available packages
@@ -47,6 +47,10 @@ dry-run:
 	@echo "Dry run - showing what would be built for distro $(DISTRO):"
 	$(BUILD_TOOL) build-all --distro $(DISTRO) --dry-run
 
+# Run unit tests
+test:
+	@uv run --group dev pytest tests/ -q; rc=$$?; [ $$rc -eq 5 ] && exit 0 || exit $$rc
+
 # Clean target
 clean:
 	@echo "Cleaning build artifacts..."

pyproject.toml

@@ -0,0 +1,11 @@
+[project]
+name = "rpmbuilder"
+version = "0.1.0"
+requires-python = ">=3.11"
+
+[dependency-groups]
+dev = [
+    "pytest>=8",
+    "jsonschema>=4",
+    "pyyaml>=6",
+]

rpms/boilerplate/metadata.yaml

@@ -12,9 +12,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.10.1
+  version: 0.15.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.10.1
+  version: 0.15.0

rpms/claude-code/metadata.yaml

@@ -1,18 +1,18 @@
----
-arch: amd64
-builds:
-  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el8]
-    version: 2.1.120
-  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el9]
-    version: 2.1.120
-claude_ai: true
+name: claude-code
 description: Claude Code - Anthropic's agentic AI coding tool
+arch: amd64
+platform: linux
+maintainer: Anthropic
 homepage: https://claude.ai/code
 license: Proprietary
-maintainer: Anthropic
-name: claude-code
-platform: linux
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 2.1.126
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 2.1.126

rpms/cni-plugins/metadata.yaml

@@ -12,9 +12,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.9.0
+  version: 1.9.1
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.9.0
+  version: 1.9.1

rpms/code-server/metadata.yaml

@@ -0,0 +1,20 @@
+---
+name: code-server
+github: coder/code-server
+description: VS Code in the browser.
+arch: amd64
+platform: linux
+maintainer: Coder
+homepage: https://github.com/coder/code-server
+license: MIT
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 4.117.0
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 4.117.0

rpms/code-server/resources/build.sh

@@ -0,0 +1,6 @@
+#!/usr/bin/bash
+
+set -e
+
+curl -L -o /app/dist/code-server-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.x86_64.rpm \
+  https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/coder/code-server/releases/download/v${PACKAGE_VERSION}/code-server-${PACKAGE_VERSION}-amd64.rpm

rpms/code-server/resources/nfpm.yaml

@@ -0,0 +1,14 @@
+# nfpm.yaml - unused, RPM is downloaded directly in build.sh
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}

rpms/consul/metadata.yaml

@@ -12,9 +12,16 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.22.2
+  version: 1.22.7
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.22.2
+  version: 1.22.7
+- repository:
+  - fedora/42
+  - fedora/43
+  - fedora/44
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 1.22.7

rpms/frr_exporter/metadata.yaml

@@ -11,9 +11,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.9.0
+  version: 1.11.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.9.0
+  version: 1.11.0

rpms/git-delta/metadata.yaml

@@ -0,0 +1,20 @@
+---
+name: git-delta
+github: dandavison/delta
+description: A syntax-highlighting pager for git, diff, grep, and blame output.
+arch: amd64
+platform: linux
+maintainer: dandavison
+homepage: https://github.com/dandavison/delta
+license: MIT
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.19.2
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.19.2

rpms/git-delta/resources/build.sh

@@ -0,0 +1,12 @@
+#!/usr/bin/bash
+
+set -e
+
+# Note: delta releases use plain version tags (no v prefix)
+wget -O /app/delta-${PACKAGE_VERSION}-x86_64-unknown-linux-musl.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/dandavison/delta/releases/download/${PACKAGE_VERSION}/delta-${PACKAGE_VERSION}-x86_64-unknown-linux-musl.tar.gz
+tar xf /app/delta-${PACKAGE_VERSION}-x86_64-unknown-linux-musl.tar.gz
+mv /app/delta-${PACKAGE_VERSION}-x86_64-unknown-linux-musl/delta /app/delta
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/git-delta/resources/nfpm.yaml

@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - git-delta
+
+provides:
+  - git-delta
+
+contents:
+  - src: /app/delta
+    dst: /usr/bin/delta
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/hadolint/metadata.yaml

@@ -0,0 +1,20 @@
+---
+name: hadolint
+github: hadolint/hadolint
+description: A smarter Dockerfile linter that helps you build best practice Docker images.
+arch: amd64
+platform: linux
+maintainer: hadolint
+homepage: https://github.com/hadolint/hadolint
+license: GPL-3.0
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 2.14.0
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 2.14.0

rpms/hadolint/resources/build.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/hadolint https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/hadolint/hadolint/releases/download/v${PACKAGE_VERSION}/hadolint-linux-x86_64
+chmod +x /app/hadolint
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/hadolint/resources/nfpm.yaml

@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - hadolint
+
+provides:
+  - hadolint
+
+contents:
+  - src: /app/hadolint
+    dst: /usr/bin/hadolint
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/helm/metadata.yaml

@@ -11,9 +11,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 4.0.5
+  version: 4.1.4
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 4.0.5
+  version: 4.1.4

rpms/helmfile/metadata.yaml

@@ -13,9 +13,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.2.3
+  version: 1.4.4
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.2.3
+  version: 1.4.4

rpms/incus/metadata.yaml

@@ -11,4 +11,4 @@ builds:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 6.20.0
+  version: 6.23.0

rpms/jsonnet-language-server/metadata.yaml

@@ -1,15 +1,17 @@
----
 arch: amd64
 builds:
-  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el8]
-    version: 0.16.0
-  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el9]
-    version: 0.16.0
-description: Jsonnet Language Server Protocol implementation for the Jsonnet templating language.
+- image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el8
+  version: 0.17.0
+- image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el9
+  version: 0.17.0
+description: Jsonnet Language Server Protocol implementation for the Jsonnet templating
+  language.
 github: grafana/jsonnet-language-server
 homepage: https://github.com/grafana/jsonnet-language-server
 license: Apache-2.0

rpms/jsonnet-lint/metadata.yaml

@@ -1,14 +1,15 @@
----
 arch: amd64
 builds:
-  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el8]
-    version: 0.21.0
-  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el9]
-    version: 0.21.0
+- image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el8
+  version: 0.22.0
+- image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el9
+  version: 0.22.0
 description: Linter for Jsonnet
 github: google/go-jsonnet
 homepage: https://github.com/google/go-jsonnet

rpms/jsonnet/metadata.yaml

@@ -1,14 +1,15 @@
----
 arch: amd64
 builds:
-  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el8]
-    version: 0.21.0
-  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el9]
-    version: 0.21.0
+- image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el8
+  version: 0.22.0
+- image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el9
+  version: 0.22.0
 description: A data templating language
 github: google/go-jsonnet
 homepage: https://github.com/google/go-jsonnet

rpms/kubecolor/metadata.yaml

@@ -0,0 +1,20 @@
+---
+name: kubecolor
+github: kubecolor/kubecolor
+description: Colorize your kubectl output
+arch: amd64
+platform: linux
+maintainer: kubecolor
+homepage: https://github.com/kubecolor/kubecolor
+license: Apache-2.0
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.6.0
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.6.0

rpms/kubecolor/resources/build.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/kubecolor_${PACKAGE_VERSION}_linux_amd64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/kubecolor/kubecolor/releases/download/v${PACKAGE_VERSION}/kubecolor_${PACKAGE_VERSION}_linux_amd64.tar.gz
+tar xf /app/kubecolor_${PACKAGE_VERSION}_linux_amd64.tar.gz -C /app/ kubecolor
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/kubecolor/resources/nfpm.yaml

@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - kubecolor
+
+provides:
+  - kubecolor
+
+contents:
+  - src: /app/kubecolor
+    dst: /usr/bin/kubecolor
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/kubectx/metadata.yaml

@@ -0,0 +1,20 @@
+---
+name: kubectx
+github: ahmetb/kubectx
+description: Faster way to switch between clusters and namespaces in kubectl.
+arch: amd64
+platform: linux
+maintainer: ahmetb
+homepage: https://github.com/ahmetb/kubectx
+license: Apache-2.0
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.11.0
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.11.0

rpms/kubectx/resources/build.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/kubectx_v${PACKAGE_VERSION}_linux_x86_64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/ahmetb/kubectx/releases/download/v${PACKAGE_VERSION}/kubectx_v${PACKAGE_VERSION}_linux_x86_64.tar.gz
+wget -O /app/kubens_v${PACKAGE_VERSION}_linux_x86_64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/ahmetb/kubectx/releases/download/v${PACKAGE_VERSION}/kubens_v${PACKAGE_VERSION}_linux_x86_64.tar.gz
+
+tar xf /app/kubectx_v${PACKAGE_VERSION}_linux_x86_64.tar.gz -C /app/ kubectx
+tar xf /app/kubens_v${PACKAGE_VERSION}_linux_x86_64.tar.gz -C /app/ kubens
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/kubectx/resources/nfpm.yaml

@@ -0,0 +1,38 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - kubectx
+  - kubens
+
+provides:
+  - kubectx
+  - kubens
+
+contents:
+  - src: /app/kubectx
+    dst: /usr/bin/kubectx
+    file_info:
+      mode: 0755
+      owner: root
+      group: root
+  - src: /app/kubens
+    dst: /usr/bin/kubens
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/lazydocker/metadata.yaml

@@ -0,0 +1,20 @@
+---
+name: lazydocker
+github: jesseduffield/lazydocker
+description: The lazier way to manage everything docker.
+arch: amd64
+platform: linux
+maintainer: jesseduffield
+homepage: https://github.com/jesseduffield/lazydocker
+license: MIT
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.25.2
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.25.2

rpms/lazydocker/resources/build.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/lazydocker_${PACKAGE_VERSION}_Linux_x86_64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/jesseduffield/lazydocker/releases/download/v${PACKAGE_VERSION}/lazydocker_${PACKAGE_VERSION}_Linux_x86_64.tar.gz
+tar xf /app/lazydocker_${PACKAGE_VERSION}_Linux_x86_64.tar.gz -C /app/ lazydocker
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/lazydocker/resources/nfpm.yaml

@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - lazydocker
+
+provides:
+  - lazydocker
+
+contents:
+  - src: /app/lazydocker
+    dst: /usr/bin/lazydocker
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/neovim-glibc-2.17/metadata.yaml

@@ -0,0 +1,20 @@
+---
+name: neovim-glibc-2.17
+github: neovim/neovim-releases
+description: Vim-fork focused on extensibility and usability (glibc 2.17 compatible build).
+arch: amd64
+platform: linux
+maintainer: neovim
+homepage: https://neovim.io
+license: Apache-2.0
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.12.2
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.12.2

rpms/neovim-glibc-2.17/resources/build.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/nvim-linux-x86_64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/neovim/neovim-releases/releases/download/v${PACKAGE_VERSION}/nvim-linux-x86_64.tar.gz
+tar xf /app/nvim-linux-x86_64.tar.gz
+mv /app/nvim-linux-x86_64/bin/nvim /app/nvim
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/neovim-glibc-2.17/resources/nfpm.yaml

@@ -0,0 +1,35 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - neovim-glibc-2.17
+  - neovim
+
+provides:
+  - neovim-glibc-2.17
+  - nvim
+
+conflicts:
+  - neovim
+
+contents:
+  - src: /app/nvim
+    dst: /usr/bin/nvim
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/neovim/metadata.yaml

@@ -0,0 +1,20 @@
+---
+name: neovim
+github: neovim/neovim
+description: Vim-fork focused on extensibility and usability.
+arch: amd64
+platform: linux
+maintainer: neovim
+homepage: https://neovim.io
+license: Apache-2.0
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.12.2
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.12.2

rpms/neovim/resources/build.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/nvim-linux-x86_64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/neovim/neovim/releases/download/v${PACKAGE_VERSION}/nvim-linux-x86_64.tar.gz
+tar xf /app/nvim-linux-x86_64.tar.gz
+mv /app/nvim-linux-x86_64/bin/nvim /app/nvim
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/neovim/resources/nfpm.yaml

@@ -0,0 +1,35 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - neovim
+  - neovim-glibc-2.17
+
+provides:
+  - neovim
+  - nvim
+
+conflicts:
+  - neovim-glibc-2.17
+
+contents:
+  - src: /app/nvim
+    dst: /usr/bin/nvim
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/nfpm/metadata.yaml

@@ -12,9 +12,16 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 2.44.1
+  version: 2.46.3
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 2.44.1
+  version: 2.46.3
+- repository:
+  - fedora/42
+  - fedora/43
+  - fedora/44
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 2.46.3

rpms/node_exporter/metadata.yaml

@@ -11,9 +11,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.10.2
+  version: 1.11.1
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.10.2
+  version: 1.11.1

rpms/nomad-autoscaler/metadata.yaml

@@ -13,9 +13,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.4.8
+  version: 0.4.9
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.4.8
+  version: 0.4.9

rpms/nzbget/metadata.yaml

@@ -11,10 +11,10 @@ builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-  release: 2
-  version: '25.4'
+  release: 1
+  version: '26.1'
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-  release: 2
-  version: '25.4'
+  release: 1
+  version: '26.1'

rpms/packer/metadata.yaml

@@ -11,9 +11,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.14.3
+  version: 1.15.3
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.14.3
+  version: 1.15.3

rpms/pgbouncer_exporter/metadata.yaml

@@ -1,14 +1,15 @@
----
 arch: amd64
 builds:
-  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el8]
-    version: 0.11.0
-  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el9]
-    version: 0.11.0
+- image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el8
+  version: 0.12.0
+- image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el9
+  version: 0.12.0
 description: Prometheus exporter for PgBouncer
 github: prometheus-community/pgbouncer_exporter
 homepage: https://github.com/prometheus-community/pgbouncer_exporter

rpms/postgres_exporter/metadata.yaml

@@ -11,9 +11,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.18.1
+  version: 0.19.1
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.18.1
+  version: 0.19.1

rpms/ruff/metadata.yaml

@@ -11,9 +11,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.14.10
+  version: 0.15.12
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.14.10
+  version: 0.15.12

rpms/sops/metadata.yaml

@@ -0,0 +1,20 @@
+---
+name: sops
+github: getsops/sops
+description: Simple and flexible tool for managing secrets.
+arch: amd64
+platform: linux
+maintainer: getsops
+homepage: https://github.com/getsops/sops
+license: MPL-2.0
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 3.12.2
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 3.12.2

rpms/sops/resources/build.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/sops https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/getsops/sops/releases/download/v${PACKAGE_VERSION}/sops-v${PACKAGE_VERSION}.linux.amd64
+chmod +x /app/sops
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/sops/resources/nfpm.yaml

@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - sops
+
+provides:
+  - sops
+
+contents:
+  - src: /app/sops
+    dst: /usr/bin/sops
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/stalwart-foundationdb/metadata.yaml

@@ -12,9 +12,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.15.3
+  version: 0.16.3
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.15.3
+  version: 0.16.3

rpms/stalwart/metadata.yaml

@@ -11,9 +11,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.15.3
+  version: 0.16.3
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.15.3
+  version: 0.16.3

rpms/starship/metadata.yaml

@@ -0,0 +1,20 @@
+name: starship
+github: starship/starship
+description: The minimal, blazing-fast, and infinitely customizable prompt for any
+  shell.
+arch: amd64
+platform: linux
+maintainer: starship
+homepage: https://starship.rs
+license: ISC
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 1.25.1
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 1.25.1

rpms/starship/resources/build.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/starship-x86_64-unknown-linux-musl.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/starship/starship/releases/download/v${PACKAGE_VERSION}/starship-x86_64-unknown-linux-musl.tar.gz
+tar xf /app/starship-x86_64-unknown-linux-musl.tar.gz
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/starship/resources/nfpm.yaml

@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - starship
+
+provides:
+  - starship
+
+contents:
+  - src: /app/starship
+    dst: /usr/bin/starship
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/tea/metadata.yaml

@@ -18,3 +18,10 @@ builds:
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
   version: 0.14.0
+- repository:
+  - fedora/42
+  - fedora/43
+  - fedora/44
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.14.0

rpms/terraform/metadata.yaml

@@ -14,9 +14,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.14.3
+  version: 1.15.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.14.3
+  version: 1.15.0

rpms/terragrunt/metadata.yaml

@@ -12,9 +12,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.96.1
+  version: 1.0.3
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.96.1
+  version: 1.0.3

rpms/tflint/metadata.yaml

@@ -12,9 +12,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.60.0
+  version: 0.62.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.60.0
+  version: 0.62.0

rpms/unkin-ca-certificates/metadata.yaml

@@ -3,11 +3,20 @@ arch: amd64
 builds:
   - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
     release: '1'
-    repository: [almalinux/el8]
+    repository:
+      - almalinux/el8
     version: 2025.07.13
   - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
     release: '1'
-    repository: [almalinux/el9]
+    repository:
+      - almalinux/el9
+    version: 2025.07.13
+  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    repository:
+      - fedora/42
+      - fedora/43
+      - fedora/44
     version: 2025.07.13
 description: ca-certificates for the unkin site
 github: unknown/unkin-ca-certificates

rpms/uv/metadata.yaml

@@ -11,9 +11,16 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.9.20
+  version: 0.11.14
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.9.20
+  version: 0.11.14
+- repository:
+  - fedora/42
+  - fedora/43
+  - fedora/44
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.11.14

rpms/vals/metadata.yaml

@@ -12,9 +12,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.43.0
+  version: 0.44.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.43.0
+  version: 0.44.0

rpms/vault/metadata.yaml

@@ -14,9 +14,16 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.21.1
+  version: 2.0.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.21.1
+  version: 2.0.0
+- repository:
+  - fedora/42
+  - fedora/43
+  - fedora/44
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 2.0.0

rpms/victoria-logs/metadata.yaml

@@ -12,9 +12,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.43.1
+  version: 1.50.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.43.1
+  version: 1.50.0

rpms/vlutils/metadata.yaml

@@ -12,9 +12,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.43.1
+  version: 1.50.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.43.1
+  version: 1.50.0

rpms/vmagent/metadata.yaml

@@ -12,9 +12,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.132.0
+  version: 1.142.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.132.0
+  version: 1.142.0

rpms/vmalert/metadata.yaml

@@ -11,9 +11,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.132.0
+  version: 1.142.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.132.0
+  version: 1.142.0

rpms/vminsert/metadata.yaml

@@ -12,9 +12,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.132.0
+  version: 1.142.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.132.0
+  version: 1.142.0

rpms/vmselect/metadata.yaml

@@ -12,9 +12,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.132.0
+  version: 1.142.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.132.0
+  version: 1.142.0

rpms/vmstorage/metadata.yaml

@@ -12,9 +12,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.132.0
+  version: 1.142.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.132.0
+  version: 1.142.0

rpms/vmutils/metadata.yaml

@@ -12,9 +12,9 @@ builds:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.132.0
+  version: 1.142.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.132.0
+  version: 1.142.0

rpms/xh/metadata.yaml

@@ -3,11 +3,20 @@ arch: amd64
 builds:
   - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
     release: '1'
-    repository: [almalinux/el8]
+    repository:
+      - almalinux/el8
     version: 0.25.3
   - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
     release: '1'
-    repository: [almalinux/el9]
+    repository:
+      - almalinux/el9
+    version: 0.25.3
+  - repository:
+      - fedora/42
+      - fedora/43
+      - fedora/44
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: 1
     version: 0.25.3
 description: A friendly and fast tool for sending HTTP requests (HTTPie reimplementation in Rust)
 github: ducaale/xh

rpms/yq/metadata.yaml

@@ -0,0 +1,27 @@
+---
+name: yq
+github: mikefarah/yq
+description: yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor.
+arch: amd64
+platform: linux
+maintainer: mikefarah
+homepage: https://github.com/mikefarah/yq
+license: MIT
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 4.53.2
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 4.53.2
+- repository:
+  - fedora/42
+  - fedora/43
+  - fedora/44
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 4.53.2

rpms/yq/resources/build.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/yq https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/mikefarah/yq/releases/download/v${PACKAGE_VERSION}/yq_linux_amd64
+chmod +x /app/yq
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/yq/resources/nfpm.yaml

@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - yq
+
+provides:
+  - yq
+
+contents:
+  - src: /app/yq
+    dst: /usr/bin/yq
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

schema/metadata.json

@@ -0,0 +1,111 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "description": "Schema for rpms/*/metadata.yaml files",
+  "properties": {
+    "arch": {
+      "enum": [
+        "amd64",
+        "arm64",
+        "x86_64"
+      ],
+      "type": "string"
+    },
+    "builds": {
+      "items": {
+        "additionalProperties": false,
+        "properties": {
+          "image": {
+            "minLength": 1,
+            "pattern": "^[a-zA-Z0-9][a-zA-Z0-9\\-_.:/@]+$",
+            "type": "string"
+          },
+          "release": {
+            "oneOf": [
+              {
+                "minLength": 1,
+                "type": "string"
+              },
+              {
+                "type": "number"
+              }
+            ]
+          },
+          "repository": {
+            "items": {
+              "enum": [
+                "almalinux/el8",
+                "almalinux/el9",
+                "fedora/42",
+                "fedora/43",
+                "fedora/44"
+              ],
+              "type": "string"
+            },
+            "minItems": 1,
+            "type": "array"
+          },
+          "version": {
+            "minLength": 1,
+            "pattern": "^[0-9]+(\\.[0-9]+)*(-[a-zA-Z0-9]+)*$",
+            "type": "string"
+          }
+        },
+        "required": [
+          "repository",
+          "image",
+          "release",
+          "version"
+        ],
+        "type": "object"
+      },
+      "minItems": 1,
+      "type": "array"
+    },
+    "description": {
+      "minLength": 1,
+      "type": "string"
+    },
+    "dist_tag": {
+      "type": "boolean"
+    },
+    "github": {
+      "minLength": 1,
+      "pattern": "^[a-zA-Z0-9\\-_]+/[a-zA-Z0-9\\-_.]+$",
+      "type": "string"
+    },
+    "github_release_pattern": {
+      "minLength": 1,
+      "type": "string"
+    },
+    "homepage": {
+      "minLength": 1,
+      "pattern": "^https?://.+",
+      "type": "string"
+    },
+    "license": {
+      "minLength": 1,
+      "type": "string"
+    },
+    "maintainer": {
+      "minLength": 1,
+      "type": "string"
+    },
+    "name": {
+      "minLength": 1,
+      "pattern": "^[a-zA-Z0-9][a-zA-Z0-9\\-_.]*$",
+      "type": "string"
+    },
+    "platform": {
+      "minLength": 1,
+      "type": "string"
+    }
+  },
+  "required": [
+    "name",
+    "description",
+    "builds"
+  ],
+  "title": "RPM Package Metadata",
+  "type": "object"
+}

tests/conftest.py

@@ -0,0 +1,2 @@
+# Tests for tools/build and tools/update-gh.
+# See https://git.unkin.net/unkin/rpmbuilder/issues/162

tests/test_metadata.py

@@ -0,0 +1,36 @@
+"""Validate every rpms/*/metadata.yaml against schema/metadata.json."""
+
+import json
+from pathlib import Path
+
+import jsonschema
+import pytest
+import yaml
+
+REPO_ROOT = Path(__file__).parent.parent
+SCHEMA_FILE = REPO_ROOT / "schema" / "metadata.json"
+RPMS_DIR = REPO_ROOT / "rpms"
+
+
+@pytest.fixture(scope="session")
+def schema():
+    with open(SCHEMA_FILE) as f:
+        return json.load(f)
+
+
+def metadata_files():
+    return sorted(RPMS_DIR.glob("*/metadata.yaml"))
+
+
+@pytest.mark.parametrize("metadata_file", metadata_files(), ids=lambda p: p.parent.name)
+def test_metadata_valid(metadata_file, schema):
+    with open(metadata_file) as f:
+        data = yaml.safe_load(f)
+
+    validator = jsonschema.Draft7Validator(schema)
+    errors = sorted(validator.iter_errors(data), key=str)
+
+    assert not errors, "\n".join(
+        f"  {'.'.join(str(p) for p in e.absolute_path) or '(root)'}: {e.message}"
+        for e in errors
+    )

tools/update-gh

@@ -293,7 +293,11 @@ def update_package_metadata(package_dir: Path, new_version: str, dry_run: bool =
         with open(metadata_file, 'r') as f:
             metadata = yaml.safe_load(f)
 
-        old_version = metadata.get('version', 'unknown')
+        builds = metadata.get('builds', [])
+        if builds and isinstance(builds, list) and builds[0].get('version') is not None:
+            old_version = str(builds[0].get('version', 'unknown'))
+        else:
+            old_version = metadata.get('version', 'unknown')
         logger.info(f"Updating {metadata.get('name', 'unknown')} from {old_version} to {new_version}")
 
         if dry_run:
@@ -301,8 +305,15 @@ def update_package_metadata(package_dir: Path, new_version: str, dry_run: bool =
             return True
 
         # Update version in metadata and reset release to 1
-        metadata['version'] = new_version
-        metadata['release'] = 1
+        # Support both top-level version and builds[].version
+        builds = metadata.get('builds', [])
+        if builds and isinstance(builds, list) and builds[0].get('version') is not None:
+            for build in builds:
+                build['version'] = new_version
+                build['release'] = 1
+        else:
+            metadata['version'] = new_version
+            metadata['release'] = 1
 
         # Write updated metadata
         with open(metadata_file, 'w') as f:
@@ -340,7 +351,6 @@ def check_package_updates(package_dir: Path, dry_run: bool = False) -> bool:
             metadata = yaml.safe_load(f)
 
         package_name = metadata.get('name', package_dir.name)
-        current_version = metadata.get('version')
         github_repo = metadata.get('github')
         claude_ai = metadata.get('claude_ai', False)
 
@@ -348,6 +358,13 @@ def check_package_updates(package_dir: Path, dry_run: bool = False) -> bool:
             logger.debug(f"Package {package_name} has no GitHub repo or claude_ai configured")
             return True
 
+        # Support both top-level version and builds[].version
+        builds = metadata.get('builds', [])
+        if builds and isinstance(builds, list) and builds[0].get('version'):
+            current_version = str(builds[0].get('version'))
+        else:
+            current_version = metadata.get('version')
+
         if not current_version:
             logger.warning(f"Package {package_name} has no version in metadata")
             return False