INCLUDES.yml

---
#
#  This file contains version information for the
#  components that are included in this BOSH release.
#
#  last updated: 2026-06-05
#
#  vim and the pip wheels (pip/setuptools/wheel) have newer upstreams
#  available; those bumps require a Linux build host and are tracked for
#  the CI pipeline rather than carried here.
#

includes:
  ##############################
  #
  # compiled packages (built from source by packages/jumpbox/packaging)
  #

  git:      '2.54.0'

  tmux:     '3.6b'
  libevent: '2.1.12'

  tree:     '2.3.2'

  vim:      '9.2.0597'    # prebuilt; repacked from vim/vim-appimage (not source-compiled)

  wget:     '1.25.0'

  s3cmd:    '2.4.0'

  ##############################
  #
  # pre-compiled binaries
  #
  #   - entries marked CI are kept current automatically by
  #     ci/pipelines/jobs-upstream.yml, so their pinned versions
  #     drift between manual refreshes of this file.
  #

  # CI auto-bumped
  bbr:       '1.9.78'    # CI
  bosh:      '7.10.5'    # CI
  cf:        '8.18.3'    # CI    # Cloud Foundry CLI v8 (cf8 = packaging alias; v6/v7 dropped)
  credhub:   '2.9.57'    # CI
  esuf:      '0.1.2'     # CI
  fly:       '8.2.3'     # CI
  genesis:   '3.0.14'    # CI
  safe:      '1.9.0'     # CI
  spruce:    '1.35.7'    # CI
  uaa-cli:   '0.20.2'    # CI

  # manually bumped
  certstrap: '1.3.0'
  jq:        '1.8.1'
  nats:      '1.0.2'      # legacy nats pub/sub Go client (not modern natscli)
  shield:    '9.0.1'
  spiff:     '1.0.8'      # upstream stuck on betas; pinned
  terraform: '1.5.7'      # last MPL-2.0 release (pre-BSL)
  tofu:      '1.12.1'     # opentofu — open-source terraform fork
  tmate:     '2.4.0'      # no upstream release since 2019
  vault:     '1.14.10'    # BSL; HashiCorp relicensed after 1.14.8 (last MPL was 1.14.8)
  bao:       '2.5.4'      # openbao — open-source vault fork
  yq:        '4.53.2'