From 95f0713524e7038c3c88d7d2cef10a769f662896 Mon Sep 17 00:00:00 2001
From: Rui Lopes <rgl@ruilopes.com>
Date: Thu, 8 Jan 2026 07:08:08 +0000
Subject: [PATCH] upgrade dependencies

---
 README.md                                     |  2 +-
 Vagrantfile                                   |  2 +-
 .../hello-world/debian/changelog              |  2 +-
 hello-world-pypi-package/requirements.txt     | 28 +++++++++----------
 provision/provision-base.sh                   |  4 +--
 provision/provision-docker.sh                 |  2 +-
 provision/provision-nexus.sh                  |  2 +-
 provision/use-apt-repository.sh               |  2 +-
 provision/use-docker-repository.sh            | 18 ++++++++----
 provision/use-maven-repository-from-gradle.sh | 12 ++++----
 provision/use-nuget-repository.sh             |  2 +-
 renovate.sh                                   | 11 +++++---
 12 files changed, 48 insertions(+), 39 deletions(-)

diff --git a/README.md b/README.md
index e214909..e2c9fde 100644
--- a/README.md
+++ b/README.md
@@ -29,7 +29,7 @@ This will:
 
 # Usage
 
-Build and install the [Ubuntu 22.04 UEFI Base Box](https://github.com/rgl/ubuntu-vagrant).
+Build and install the [Ubuntu 24.04 UEFI Base Box](https://github.com/rgl/ubuntu-vagrant).
 
 Build and install the [Windows 2022 UEFI Base Box](https://github.com/rgl/windows-vagrant).
 
diff --git a/Vagrantfile b/Vagrantfile
index 8335446..c483ebe 100644
--- a/Vagrantfile
+++ b/Vagrantfile
@@ -15,7 +15,7 @@ Vagrant.configure(2) do |config|
   end
 
   config.vm.define :nexus do |config|
-    config.vm.box = 'ubuntu-22.04-uefi-amd64'
+    config.vm.box = 'ubuntu-24.04-uefi-amd64'
     config.vm.hostname = nexus_domain
     config.vm.network 'private_network', ip: nexus_ip
     config.vm.provider :libvirt do |lv, config|
diff --git a/hello-world-debian-package/hello-world/debian/changelog b/hello-world-debian-package/hello-world/debian/changelog
index 114cd32..8909bfa 100644
--- a/hello-world-debian-package/hello-world/debian/changelog
+++ b/hello-world-debian-package/hello-world/debian/changelog
@@ -1,4 +1,4 @@
-hello-world (1.0.0) jammy; urgency=low
+hello-world (1.0.0) noble; urgency=low
 
   * Hello World.
 
diff --git a/hello-world-pypi-package/requirements.txt b/hello-world-pypi-package/requirements.txt
index 2566788..e01086f 100644
--- a/hello-world-pypi-package/requirements.txt
+++ b/hello-world-pypi-package/requirements.txt
@@ -1,22 +1,22 @@
 backports.tarfile==1.2.0
 build==1.3.0
-certifi==2025.8.3
+certifi==2026.1.4
 cffi==2.0.0
-charset-normalizer==3.4.3
-cryptography==46.0.1
-docutils==0.22.2
+charset-normalizer==3.4.4
+cryptography==46.0.3
+docutils==0.22.4
 id==1.5.0
-idna==3.10
-importlib_metadata==8.7.0
+idna==3.11
+importlib_metadata==8.7.1
 jaraco.classes==3.4.0
-jaraco.context==6.0.1
-jaraco.functools==4.3.0
+jaraco.context==6.0.2
+jaraco.functools==4.4.0
 jeepney==0.9.0
-keyring==25.6.0
+keyring==25.7.0
 markdown-it-py==4.0.0
 mdurl==0.1.2
 more-itertools==10.8.0
-nh3==0.3.0
+nh3==0.3.2
 packaging==25.0
 pycparser==2.23
 Pygments==2.19.2
@@ -25,10 +25,10 @@ readme_renderer==44.0
 requests==2.32.5
 requests-toolbelt==1.0.0
 rfc3986==2.0.0
-rich==14.1.0
-SecretStorage==3.4.0
-tomli==2.2.1
+rich==14.2.0
+SecretStorage==3.5.0
+tomli==2.3.0
 twine==6.2.0
 typing_extensions==4.15.0
-urllib3==2.5.0
+urllib3==2.6.3
 zipp==3.23.0
diff --git a/provision/provision-base.sh b/provision/provision-base.sh
index a4dc04c..2debc8d 100644
--- a/provision/provision-base.sh
+++ b/provision/provision-base.sh
@@ -104,8 +104,8 @@ sed -i -E 's/^(\s*)((ssl_protocols|ssl_ciphers|ssl_prefer_server_ciphers)\s)/\1#
 cat >/etc/nginx/conf.d/local.conf <<EOF
 # NB this is based on the mozilla intermediate configuration.
 # see https://ssl-config.mozilla.org/#server=nginx&version=1.18.0&config=intermediate&openssl=3.0.2&guideline=5.7
-# see https://packages.ubuntu.com/jammy/nginx
-# see https://packages.ubuntu.com/jammy/openssl
+# see https://packages.ubuntu.com/noble/nginx
+# see https://packages.ubuntu.com/noble/openssl
 ssl_protocols TLSv1.2 TLSv1.3;
 ssl_ecdh_curve X25519:prime256v1:secp384r1;
 ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;
diff --git a/provision/provision-docker.sh b/provision/provision-docker.sh
index f40a133..147cf28 100644
--- a/provision/provision-docker.sh
+++ b/provision/provision-docker.sh
@@ -3,7 +3,7 @@ set -euxo pipefail
 
 # see https://github.com/moby/moby/releases
 # renovate: datasource=github-releases depName=moby/moby
-default_docker_version='28.4.0'
+default_docker_version='29.1.3'
 
 # see https://github.com/moby/moby/releases
 docker_version="${1:-$default_docker_version}"; shift || true
diff --git a/provision/provision-nexus.sh b/provision/provision-nexus.sh
index 69922c3..f3b82be 100644
--- a/provision/provision-nexus.sh
+++ b/provision/provision-nexus.sh
@@ -225,7 +225,7 @@ http \
     "proprietaryComponents": true
   },
   "apt": {
-    "distribution": "jammy"
+    "distribution": "noble"
   },
   "aptSigning": {
     "keypair": $(cat /vagrant/shared/apt-hosted-private.key | jq --slurp --raw-input .),
diff --git a/provision/use-apt-repository.sh b/provision/use-apt-repository.sh
index 80bbb87..4b2f174 100644
--- a/provision/use-apt-repository.sh
+++ b/provision/use-apt-repository.sh
@@ -35,7 +35,7 @@ nexus_apt_hosted_keyring_path="/etc/apt/keyrings/$nexus_domain-apt-hosted.gpg"
 gpg --dearmor -o "$nexus_apt_hosted_keyring_path" </vagrant/shared/apt-hosted-public.key
 
 # configure the apt-hosted repository.
-echo "deb [arch=amd64 signed-by=$nexus_apt_hosted_keyring_path] https://$nexus_domain/repository/apt-hosted jammy main" >"/etc/apt/sources.list.d/$nexus_domain-apt-hosted.list"
+echo "deb [arch=amd64 signed-by=$nexus_apt_hosted_keyring_path] https://$nexus_domain/repository/apt-hosted noble main" >"/etc/apt/sources.list.d/$nexus_domain-apt-hosted.list"
 apt-get update
 
 # install the hello-world package.
diff --git a/provision/use-docker-repository.sh b/provision/use-docker-repository.sh
index 14dd294..4b0ff1e 100644
--- a/provision/use-docker-repository.sh
+++ b/provision/use-docker-repository.sh
@@ -24,7 +24,7 @@ mkdir -p tmp/use-docker-repository && cd tmp/use-docker-repository
 
 # see https://github.com/golang/go/tags
 # renovate: datasource=github-tags depName=golang/go extractVersion=go(?<version>.+)
-go_version='1.25.1'
+go_version='1.25.5'
 
 cat >main.go <<'EOF'
 package main
@@ -95,13 +95,19 @@ docker push $docker_hosted_registry_host/go-hello:1.0.0
 # see https://docs.docker.com/registry/spec/manifest-v2-2/
 wget -qO- --user "$registry_username" --password "$registry_password" \
     "https://$docker_hosted_registry_host/v2/go-hello/tags/list" | jq .
-manifest=$(wget -qO- --user "$registry_username" --password "$registry_password" \
-    '--header=Accept: application/vnd.docker.distribution.manifest.v2+json' \
+oci_image_index=$(wget -qO- --user "$registry_username" --password "$registry_password" \
+    '--header=Accept: application/vnd.oci.image.index.v1+json' \
     "https://$docker_hosted_registry_host/v2/go-hello/manifests/1.0.0")
-config_digest=$(echo "$manifest" | jq -r .config.digest)
-echo "$manifest" | jq .
+echo "$oci_image_index" | jq .
+oci_image_manifest_digest=$(echo "$oci_image_index" | jq -r .manifests[0].digest)
+oci_image_manifest=$(wget -qO- --user "$registry_username" --password "$registry_password" \
+    '--header=Accept: application/vnd.oci.image.manifest.v1+json' \
+    "https://$docker_hosted_registry_host/v2/go-hello/manifests/$oci_image_manifest_digest")
+echo "$oci_image_manifest" | jq .
+oci_image_config_digest=$(echo "$oci_image_manifest" | jq -r .config.digest)
+config_digest=$(echo "$oci_image_manifest" | jq -r .config.digest)
 wget -qO- --user "$registry_username" --password "$registry_password" \
-    "https://$docker_hosted_registry_host/v2/go-hello/blobs/$config_digest" | jq .
+    "https://$docker_hosted_registry_host/v2/go-hello/blobs/$oci_image_config_digest" | jq .
 
 # remove it from local cache.
 docker image remove go-hello:1.0.0
diff --git a/provision/use-maven-repository-from-gradle.sh b/provision/use-maven-repository-from-gradle.sh
index 8e806b1..e3c172b 100644
--- a/provision/use-maven-repository-from-gradle.sh
+++ b/provision/use-maven-repository-from-gradle.sh
@@ -13,7 +13,7 @@ cd tmp/use-maven-repository-from-gradle
 # download and install gradle.
 # see https://gradle.org/releases/
 # renovate: datasource=github-releases depName=gradle/gradle
-gradle_version='9.1.0'
+gradle_version='9.2.1'
 if [ ! -f /opt/gradle/gradle-$gradle_version/bin/gradle ]; then
     apt-get install -y unzip
     wget -qO/tmp/gradle-$gradle_version-bin.zip https://services.gradle.org/distributions/gradle-$gradle_version-bin.zip
@@ -36,8 +36,8 @@ cat >settings.gradle <<'EOF'
 rootProject.name = 'gradle-greeter'
 EOF
 cat >build.gradle <<'EOF'
-// see https://docs.gradle.org/9.1.0/userguide/java_library_plugin.html
-// see https://docs.gradle.org/9.1.0/userguide/maven_plugin.html
+// see https://docs.gradle.org/9.2.1/userguide/java_library_plugin.html
+// see https://docs.gradle.org/9.2.1/userguide/maven_plugin.html
 
 plugins {
     id 'java-library'
@@ -104,10 +104,10 @@ rootProject.name = 'gradle-greeter-application'
 EOF
 # see https://mvnrepository.com/artifact/com.gradleup.shadow/shadow-gradle-plugin
 # renovate: datasource=maven depName=com.gradleup.shadow:shadow-gradle-plugin
-com_gradleup_shadow_version='9.1.0'
+com_gradleup_shadow_version='9.3.1'
 cat >build.gradle <<EOF
-// see https://docs.gradle.org/9.1.0/userguide/java_plugin.html
-// see https://docs.gradle.org/9.1.0/userguide/application_plugin.html
+// see https://docs.gradle.org/9.2.1/userguide/java_plugin.html
+// see https://docs.gradle.org/9.2.1/userguide/application_plugin.html
 // see https://gradleup.com/shadow/
 // see https://github.com/GradleUp/shadow
 
diff --git a/provision/use-nuget-repository.sh b/provision/use-nuget-repository.sh
index 937ca63..f92c195 100644
--- a/provision/use-nuget-repository.sh
+++ b/provision/use-nuget-repository.sh
@@ -161,7 +161,7 @@ dotnet nuget list source
 dotnet add package example-hello-world
 # see https://www.nuget.org/packages/Serilog.Sinks.Console/
 # renovate: datasource=nuget depName=Serilog.Sinks.Console
-serilog_sinks_console_version='6.0.0'
+serilog_sinks_console_version='6.1.1'
 dotnet add package Serilog.Sinks.Console --version "$serilog_sinks_console_version"
 dotnet build -v=n -c=Release
 dotnet publish -v=n -c=Release --no-build --output dist
diff --git a/renovate.sh b/renovate.sh
index 6ecf0dd..a337d11 100755
--- a/renovate.sh
+++ b/renovate.sh
@@ -13,12 +13,12 @@ gitea_container_name="$(basename "$(dirname "$(realpath "${BASH_SOURCE[0]}")")")
 
 # see https://hub.docker.com/r/gitea/gitea/tags
 # renovate: datasource=docker depName=gitea/gitea
-gitea_version='1.24.6'
+gitea_version='1.25.3'
 
 # see https://hub.docker.com/r/renovate/renovate/tags
 # see https://github.com/renovatebot/renovate/releases
 # renovate: datasource=docker depName=renovate/renovate
-renovate_version='41.124.0'
+renovate_version='42.74.2'
 
 # clean.
 echo 'Deleting existing Gitea...'
@@ -30,7 +30,7 @@ install -d tmp
 # start gitea in background.
 # see https://docs.gitea.io/en-us/config-cheat-sheet/
 # see https://github.com/go-gitea/gitea/releases
-# see https://github.com/go-gitea/gitea/blob/v1.24.6/docker/root/etc/s6/gitea/setup
+# see https://github.com/go-gitea/gitea/blob/v1.25.3/docker/root/etc/s6/gitea/setup
 echo 'Starting Gitea...'
 docker run \
     --detach \
@@ -172,7 +172,10 @@ docker run \
   "renovate/renovate:$renovate_version" \
   --platform=gitea \
   --git-url=endpoint \
-  >tmp/renovate-log.json
+  >tmp/renovate-log.txt
+ grep -E '^{' \
+    tmp/renovate-log.txt \
+    >tmp/renovate-log.json
 
 echo 'Getting results...'
 # extract the errors.