GH#55: Upgrade Buzz to desktop-v0.5.7

[marcusquinn]

Summary

• upgrade the Cloudron package from Buzz desktop-v0.5.4 to desktop-v0.5.7
• pin and verify the immutable relay image revision, index, and linux/amd64 manifest
• verify that the image revision is the immediate ancestor of the release-only tag commit

Provenance

• Release: desktop-v0.5.7
• Release commit: f167818d25dd9f03115ab907a16f07daee2ece5c
• Image revision: 74b913cff8512c015dc6f1a7473b253fa803f954
• Image index: sha256:2d7001137aa4e61b0548f6125f555715fa9933be50280b1d3c5ea2fb6cfa7ef1
• Linux/amd64 manifest: sha256:804b7c2b6ed5334283a29f1e4adfa5b8d17ee5d7a2f4e0d67978212fe9b018fd

The release tag is one commit ahead of the image revision; the extra commit is the release-only commit and has no dedicated container image.

Verification

./test/package-test.sh
./test/verify-buzz-image.sh
docker build --platform linux/amd64 --tag cloudron-buzz-app:test .

Resolves #55

---

aidevops.sh v3.32.234 plugin for OpenCode v1.18.9 with gpt-5.6-sol spent 51m and 457,535 tokens on this with the user in an interactive session.

Summary by CodeRabbit

• New Features

  • Upgraded to Buzz desktop 0.5.7, including authenticated media access and managed-agent relay event support.
  • Includes client reliability improvements.

• Documentation

  • Updated release notes, security information, third-party notices, and installation documentation for the new versions.
  • Added verified provenance details for the upgraded release.

• Tests

  • Updated release and image verification checks to validate the new package and upstream versions.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 0b3ef4e7-e8ba-4bb4-94ff-51c24d456727

📥 Commits

Reviewing files that changed from the base of the PR and between 037734e and dfbce00.

📒 Files selected for processing (9)

• CHANGELOG
• CHANGELOG.md
• CloudronManifest.json
• Dockerfile
• README.md
• SECURITY.md
• THIRD_PARTY_NOTICES.md
• test/package-test.sh
• test/verify-buzz-image.sh

---

📝 Walkthrough

Walkthrough

Updates the Cloudron package from Buzz desktop-v0.5.4 to desktop-v0.5.7, advances the package to 0.1.11, refreshes immutable image provenance, and strengthens release-to-image ancestry verification.

Changes

Buzz release upgrade

Layer / File(s)	Summary
Release metadata and version assertions CloudronManifest.json, CHANGELOG, CHANGELOG.md, SECURITY.md, test/package-test.sh	Updates package version 0.1.11, upstream version 0.5.7, changelog entries, and security support assertions.
Image pins and provenance records Dockerfile, README.md, THIRD_PARTY_NOTICES.md, test/package-test.sh	Pins the desktop-v0.5.7 image and updates release commits, image revisions, registry digests, and provenance assertions.
Release and image ancestry verification test/verify-buzz-image.sh	Validates the release tag commit separately from the image revision and checks their exact ancestry through GitHub comparison metadata.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• marcusquinn/cloudron-buzz-app#54: Updates the Buzz release pins and provenance verification across the same package files.
• marcusquinn/cloudron-buzz-app#47: Upgrades the pinned Buzz desktop release and related documentation and tests.
• marcusquinn/cloudron-buzz-app#29: Extends Buzz image provenance verification in the package verification script.

Suggested labels: status:in-review, review-feedback-scanned

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the main change: upgrading Buzz to desktop-v0.5.7.
Linked Issues check	✅ Passed	The changes implement the coding objectives in [#55], including version updates, immutable provenance pins, and updated verification checks.
Out of Scope Changes check	✅ Passed	All changes support the upgrade and provenance verification objectives in [#55]; no unrelated code changes are present.

✨ Finishing Touches 💡 1

📝 Generate docstrings 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feature/auto-20260808-005252

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}