Update expected SHA256

Signed-off-by: srishtih <srishti.hegde.sh@gmail.com>

Export:  ea501cf

Author: srishtih

ant.yaml

@@ -1,7 +1,7 @@
 package:
   name: ant
-  version: "1.10.16"
-  epoch: 0
+  version: 1.10.15
+  epoch: 4
   description: A Java build tool
   copyright:
     - license: Apache-2.0
@@ -19,7 +19,7 @@ pipeline:
     with:
       repository: https://github.com/apache/ant
       tag: rel/${{package.version}}
-      expected-commit: 0f752d1eefda766a939a9524222b56917a2a6398
+      expected-commit: 92fe5ca29625d30b98704806d6379fe9acb001e3
 
   - runs: |
       export JAVA_HOME=/usr/lib/jvm/java-1.8-openjdk

apache-nifi-registry.yaml

@@ -1,7 +1,7 @@
 package:
   name: apache-nifi-registry
   version: "2.8.0"
-  epoch: 3 # GHSA-4773-3jfm-qmx3, GHSA-6hcq-hmm3-jj3c, GHSA-8hfc-fq58-r658, GHSA-mgvc-8q2h-5pgc
+  epoch: 2 # GHSA-mf92-479x-3373
   description: Apache NiFi Registry is a registry for storing and managing shared resources such as versioned flows across one or more instances of NiFi.
   copyright:
     - license: Apache-2.0

apache-nifi-registry/pombump-properties.yaml

@@ -1,7 +1,3 @@
 properties:
   - property: jackson.bom.version
     value: "2.21.1"
-  - property: spring.version
-    value: "7.0.6"
-  - property: spring.boot.version
-    value: "4.0.4"

argon2.yaml

@@ -2,7 +2,7 @@
 package:
   name: argon2
   version: '20190702'
-  epoch: 7
+  epoch: 6 # go/wolfi-rsc/argon2
   description: The password hash Argon2, winner of PHC
   copyright:
     - license: Apache-2.0
@@ -64,7 +64,6 @@ test:
         bins: argon2
     - name: Test argon2 password hashing
       runs: |
-        set -euo pipefail
         # Test core password hashing functionality with Argon2i
         output=$(echo "password" | argon2 somesalt -t 2 -m 16 -p 4 -i)
         echo "$output" | grep -F "Hash:" || { echo "FAIL: Expected Hash in output"; exit 1; }

atmoz-sftp.yaml

@@ -1,7 +1,7 @@
 #nolint:valid-pipeline-git-checkout-commit,valid-pipeline-git-checkout-tag
 package:
   name: atmoz-sftp
-  version: "0.0.0_git20260401"
+  version: "0.0.0_git20260331"
   epoch: 0
   description: Various scripts from https://github.com/atmoz/sftp to help run SFTP in a container
   copyright:

aws-c-s3.yaml

@@ -1,7 +1,7 @@
 # NOTE: aws-c-s3 has no .pc file, do not add pkgconf-based compile tests
 package:
   name: aws-c-s3
-  version: "0.12.1"
+  version: "0.12.0"
   epoch: 0 # go/wolfi-rsc/aws-c-s3
   description: "AWS C99 library implementation for communicating with the S3 service"
   copyright:
@@ -40,7 +40,7 @@ environment:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: 7397f2fc077caf4d404c8708201fa52853a52847
+      expected-commit: 8eb717a557734b3f1249d45acb2f92124a264f80
       repository: https://github.com/awslabs/aws-c-s3
       tag: v${{package.version}}
 

aws-c-sdkutils.yaml

@@ -1,7 +1,7 @@
 package:
   name: aws-c-sdkutils
   version: "0.2.4"
-  epoch: 4
+  epoch: 3 # go/wolfi-rsc/aws-c-sdkutils
   description: C99 library implementing AWS SDK specific utilities
   copyright:
     - license: Apache-2.0
@@ -52,6 +52,7 @@ subpackages:
     test:
       pipeline:
         - uses: test/tw/devpackage
+        - uses: test/pkgconf
         - uses: test/tw/ldd-check
 
 test:

aws-s3-controller.yaml

@@ -1,7 +1,7 @@
 package:
   name: aws-s3-controller
   version: "1.3.2"
-  epoch: 3 # add go-package to go/build step
+  epoch: 2 # CVE-2026-27139
   description: ACK service controller for Amazon Simple Storage Service (S3)
   copyright:
     - license: Apache-2.0
@@ -28,7 +28,6 @@ pipeline:
 
   - uses: go/build
     with:
-      go-package: go-1.25
       ldflags: |
         -X main.version=v${{package.version}}
         -X main.buildHash=$(git rev-parse HEAD)

az.yaml

@@ -1,7 +1,7 @@
 package:
   name: az
   version: "2.84.0"
-  epoch: 4
+  epoch: 3
   description: Azure CLI
   copyright:
     - license: MIT

bash.yaml

@@ -1,7 +1,7 @@
 package:
   name: bash
   version: "5.3"
-  epoch: 10 # add test/tw/devpackage test pipeline
+  epoch: 9 # go/wolfi-rsc/bash
   description: "GNU bourne again shell"
   copyright:
     - license: GPL-3.0-or-later
@@ -99,7 +99,6 @@ subpackages:
           mv "${{targets.destdir}}"/usr/bin/bashbug "${{targets.subpkgdir}}"/usr/bin/
     test:
       pipeline:
-        - uses: test/tw/devpackage
         - uses: test/tw/ver-check
           with:
             bins: bashbug