[renovate]

This PR contains the following updates:

Package	Update	Change
linuxserver/audacity (source)	major	3.7.9 → 4.0.0
linuxserver/audacity (source)	major	3.7.8 → 4.0.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[okxlin]

维护侧安全审计反馈

感谢你提交这个应用 PR。维护侧已经做了镜像来源、权限和漏洞扫描复核；当前结论是暂不合并，需要先处理安全风险后再继续评估。

当前结论

• 处理状态：暂不合并
• PR：Update linuxserver/audacity Docker tag to v4 #6473
• 应用：audacity-linuxserver
• 镜像：linuxserver/audacity:4.0.0
• 镜像来源：https://github.com/linuxserver/docker-audacity
• 权限：privileged=no, host_network=no, docker_sock=no
• 信任结论：blocked_cve_review_invalid
• 信任分数：-3
• 触发原因：image_source_repo_public_active, dockerhub_public, docker_pulls_ge_10k, docker_stars_ge_10, image_namespace_matches_repo_owner, trivy_has_critical, trivy_high_gt_100, critical_cve_review_invalid

漏洞摘要

• Trust report 记录：Critical=16, High=420, Total=436
• Trivy 明细：Critical: 8, High: 210

Critical 示例

• CVE-2026-53398 / linux-libc-dev：当前 7.0.0-30.30，修复版本 7.0.0-31.31；kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup（linuxserver/audacity:4.0.0 (ubuntu 26.04)）
• CVE-2026-64535 / linux-libc-dev：当前 7.0.0-30.30，修复版本 暂无修复版本；kernel: nvmet-tcp: Fix potential UAF when ddgst mismatch（linuxserver/audacity:4.0.0 (ubuntu 26.04)）
• CVE-2026-64564 / linux-libc-dev：当前 7.0.0-30.30，修复版本 暂无修复版本；kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing（linuxserver/audacity:4.0.0 (ubuntu 26.04)）
• CVE-2026-72287 / linux-libc-dev：当前 7.0.0-30.30，修复版本 暂无修复版本；kernel: KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks（linuxserver/audacity:4.0.0 (ubuntu 26.04)）
• CVE-2026-74394 / linux-libc-dev：当前 7.0.0-30.30，修复版本 暂无修复版本；kernel: RDMA/srpt: fix integer overflow in immediate data length check（linuxserver/audacity:4.0.0 (ubuntu 26.04)）

建议处理

• 请优先尝试重建镜像，升级基础镜像和运行时依赖后重新推送固定 tag。
• 如果应用确实需要 host network、privileged 或其他高风险权限，请在 README 中说明必要性和风险边界，并尽量降到最小权限。
• 若上游已有官方镜像或可信发布源，建议切换到官方镜像并固定版本。
• 修复后请更新当前 PR 或重新提交 PR，维护侧会重新跑 1Panel v2 smoke 和安全审计。

[okxlin]

感谢 贡献者 提交这个应用 PR。

维护侧处理状态：暂不直接合并

• PR：Update linuxserver/audacity Docker tag to v4 #6473
• 应用：audacity-linuxserver

该 Renovate PR 已在维护侧整理为单一数字版本源并完成了对应修补；为避免重复版本与重复变更，不合并此源 PR，后续以维护侧整理结果为准。
当前 PR 不再直接合并，通常是因为内容已被维护提交吸收或主线已有同名应用。

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 4.x releases. But if you manually upgrade to 4.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.