Repository navigation
ffmpeg: ffmpeg-build 0.0.24 (complete SBOMs and notices) - #98
Merged
Merged
Conversation
…lease Engine 0.0.24 (devenvy/ffmpeg-build #128, #129, #130) records everything the toolchain puts into the shipped binaries, in the SBOM and in THIRD-PARTY-NOTICES.txt: statically linked C++ and GCC runtimes, the mingw-w64 C runtime, glibc's and musl's static parts, the NDK's and Apple's compiler-rt and libunwind. The SBOM also lists the system libraries the binaries load. Toolchain image builds outlast a package mirror's sync. Every engine workflow is pinned to v0.0.24, retry.yml included: it was pinned to a pull-request commit until the engine was released. ffmpeg.lock from `ffmpeg-build update` (engine 0.0.23 -> 0.0.24; no library changes), so every release is due and is built again with the new engine. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Moves to ffmpeg-build 0.0.24 (devenvy/ffmpeg-build #128, #129, #130). Every archive's SBOM and
THIRD-PARTY-NOTICES.txtnow cover everything the toolchain puts into the shipped binaries:libstdc++_nonshared(glibc), LLVM libunwind (musl);libc_nonshared.aand crt objects, and musl's crt objects;The engine also re-runs release jobs that GitHub gave no runner (the 11-06/-09/-10 release failures), and retries toolchain image builds long enough to outlast a package mirror's sync.
Changes
85cbcfa):ci.yml(check, automerge),release.yml,update-lock.yml, andretry.yml. ci: retry release jobs GitHub gave no runner #97 had left retry pinned to a pull-request commit until the engine was released.ffmpeg.lockfromffmpeg-build update: engine 0.0.23 → 0.0.24, no library changes. Every release is therefore due and gets built again with the new engine on the next Release run.Testing
ffmpeg-build check(0.0.24): passes.🤖 Generated with Claude Code