GH#46: Upgrade Buzz to desktop-v0.5.3

[marcusquinn]

Summary

Bump the Cloudron package to 0.1.9, pin the desktop-v0.5.3 image and exact OCI manifests, and refresh package documentation, provenance checks, and release metadata.

Files Changed

CHANGELOG, CHANGELOG.md, CloudronManifest.json, Dockerfile, README.md, SECURITY.md, THIRD_PARTY_NOTICES.md, test/package-test.sh, test/verify-buzz-image.sh

Runtime Testing

• Risk level: High
• Verification: runtime-verified — ./test/package-test.sh; ./test/verify-buzz-image.sh; cloudron-package-helper.sh check-release v0.1.9; docker build --tag cloudron-buzz-app:test .

Resolves #46

---

aidevops.sh v3.32.209 plugin for OpenCode v1.18.9 with gpt-5.6-sol spent 3h 45m and 1,931,350 tokens on this with the user in an interactive session.

Summary by CodeRabbit

• New Features

  • Updated the bundled Buzz desktop release to version 0.5.3.
  • Released package version 0.1.9.

• Documentation

  • Updated release, security, third-party notices, and provenance documentation for the new versions.

• Tests

  • Refreshed package and image verification checks to validate the updated release and integrity metadata.

[marcusquinn]

Completion Summary

• What: Bump the Cloudron package to 0.1.9, pin the desktop-v0.5.3 image and exact OCI manifests, and refresh package documentation, provenance checks, and release metadata.
• Issue: Buzz upstream v0.5.3 is available #46
• Files changed: CHANGELOG, CHANGELOG.md, CloudronManifest.json, Dockerfile, README.md, SECURITY.md, THIRD_PARTY_NOTICES.md, test/package-test.sh, test/verify-buzz-image.sh
• Testing: ./test/package-test.sh; ./test/verify-buzz-image.sh; cloudron-package-helper.sh check-release v0.1.9; docker build --tag cloudron-buzz-app:test .
• Key decisions: Use the actual desktop-v0.5.3 upstream tag while retaining normalized upstreamVersion 0.5.3 for monitor comparisons.

---

aidevops.sh v3.32.209 plugin for OpenCode v1.18.9 with gpt-5.6-sol spent 3h 46m and 1,931,350 tokens on this with the user in an interactive session.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: de6441e7-b4ac-4f36-853f-c725d632cb0c

📥 Commits

Reviewing files that changed from the base of the PR and between e5681ac and 5071ae9.

📒 Files selected for processing (9)

• CHANGELOG
• CHANGELOG.md
• CloudronManifest.json
• Dockerfile
• README.md
• SECURITY.md
• THIRD_PARTY_NOTICES.md
• test/package-test.sh
• test/verify-buzz-image.sh

---

📝 Walkthrough

Walkthrough

Updates the Cloudron package to version 0.1.9 with Buzz desktop-v0.5.3, refreshes image and upstream provenance metadata, and synchronizes release and verification checks.

Changes

Buzz 0.5.3 package update

Layer / File(s)	Summary
Release and image pin updates CloudronManifest.json, Dockerfile	Updates the package and upstream versions. Pins the build image to the new Buzz digest.
Release and provenance documentation CHANGELOG, CHANGELOG.md, README.md, SECURITY.md, THIRD_PARTY_NOTICES.md	Records package version 0.1.9 and updates Buzz release, commit, image, manifest, and provenance references.
Package and image validation test/package-test.sh, test/verify-buzz-image.sh	Updates package metadata, release, revision, image, and OCI digest assertions for Buzz desktop-v0.5.3.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• marcusquinn/cloudron-buzz-app#29: Updates the same Buzz image provenance verification workflow.
• marcusquinn/cloudron-buzz-app#33: Updates the same Buzz version and provenance pins.
• marcusquinn/cloudron-buzz-app#27: Upgrades the Buzz release and synchronizes package metadata and tests.

Suggested labels: review-feedback-scanned

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the primary change: upgrading Buzz to desktop-v0.5.3.
Linked Issues check	✅ Passed	The PR updates the package, pinned image, metadata, documentation, and tests for Buzz v0.5.3 and records the required release-check verification for issue [#46].
Out of Scope Changes check	✅ Passed	All changes support the Buzz upgrade, including version metadata, provenance, documentation, image pins, and related verification tests.

✨ Finishing Touches 💡 1

📝 Generate docstrings 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feature/auto-20260801-062158

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}