GH#80: feat: upgrade Buzz to desktop-v0.5.17

[marcusquinn]

Summary

• upgrade the pinned Buzz relay and web assets to desktop-v0.5.17
• preserve immutable OCI provenance for the release tag and Linux/amd64 image
• update package 0.1.18 metadata, notices, changelogs, and regression checks

Verification

• ./test/verify-buzz-image.sh
• ./test/package-test.sh
• bash -n test/package-test.sh test/verify-buzz-image.sh
• shellcheck test/package-test.sh test/verify-buzz-image.sh
• cloudron-package-helper.sh check-release v0.1.18

Release scope

No tag, image, catalog entry, release, or deployment is published by this PR.

Resolves #80

---

aidevops.sh v3.32.274 plugin for OpenCode v1.18.18 with gpt-5.6-terra

Summary by CodeRabbit

• Release
  • Updated to version 0.1.18 with Buzz 0.5.17.
  • Includes desktop authorization, presence, performance, and upstream security fixes.
  • Added verification of immutable relay image provenance and revisions.
• Documentation
  • Updated changelog, security support information, and third-party notices for the new release.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: e852af18-3165-4d45-8a0b-fb8cec5785a3

📥 Commits

Reviewing files that changed from the base of the PR and between d748293 and 75158a2.

📒 Files selected for processing (8)

• CHANGELOG
• CHANGELOG.md
• CloudronManifest.json
• Dockerfile
• SECURITY.md
• THIRD_PARTY_NOTICES.md
• test/package-test.sh
• test/verify-buzz-image.sh

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The package advances to version 0.1.18 with Buzz desktop-v0.5.17. It updates the pinned build image, provenance records, release documentation, and package verification expectations.

Changes

Buzz release upgrade

Layer / File(s)	Summary
Release metadata CloudronManifest.json, SECURITY.md, CHANGELOG, CHANGELOG.md	Updates package version 0.1.18 and Buzz version 0.5.17 across release metadata and changelogs.
Pinned image and provenance Dockerfile, THIRD_PARTY_NOTICES.md	Updates the pinned Buzz build image and desktop-v0.5.17 release, revision, commit, and digest metadata.
Release validation test/package-test.sh, test/verify-buzz-image.sh	Updates package, provenance, image, manifest, changelog, and security version assertions for the new release.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: ⚪ Minimal · up to 75158

This PR updates the pinned Buzz release and related package metadata and checks; no actionable merge-blocking risk remains after normal review and verification.

Possibly related PRs

• marcusquinn/cloudron-buzz-app#29: Introduced the Buzz image provenance files and verification script updated here.
• marcusquinn/cloudron-buzz-app#56: Updated the Buzz release, immutable image metadata, documentation, and verification tests.
• marcusquinn/cloudron-buzz-app#74: Updated the same Buzz version, image, provenance, and validation references.

Suggested labels: status:in-review, review-feedback-scanned

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the Buzz upgrade to desktop-v0.5.17, which is the primary change.
Linked Issues check	✅ Passed	The changes update Buzz, package metadata, tests, and release documentation, while preserving provenance and avoiding unauthorized publication.
Out of Scope Changes check	✅ Passed	All changes support the Buzz upgrade, release metadata, provenance verification, or related regression checks.

✨ Finishing Touches 💡 1

📝 Generate docstrings 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feature/auto-20260819-111751-gh80

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[marcusquinn]

Completion Summary

• What: Updated the Cloudron package to Buzz desktop-v0.5.17 and package version 0.1.18.
• Issue: Buzz upstream v0.5.17 is available #80
• Files changed: CloudronManifest.json, Dockerfile, CHANGELOG, CHANGELOG.md, SECURITY.md, THIRD_PARTY_NOTICES.md, test/package-test.sh, and test/verify-buzz-image.sh.
• Testing: Verified upstream tag-to-image ancestry and Linux/amd64 manifest, package tests, syntax, and ShellCheck.
• Key decisions: Retained immutable OCI pinning and did not publish a tag, image, catalog entry, release, or deployment.

---

aidevops.sh v3.32.274 plugin for OpenCode v1.18.18 with gpt-5.6-terra spent 9m and 103,026 tokens on this as a headless worker.