Sam Dacanay

Go based CLI

5

Go seems like a better fit for a CLI tool than Python. We could make improvements around performance, code structure/readability, delivery (binaries!), testing, and async processing (where applicable). Probably dependent...

### What would you like to be added? The ability to configure the jobs: * redpanda-configuration * redpanda-post-upgrade with a Job.spec.ttlSecondsAfterFinished (see `kubectl explain job.spec`) ### Why is this needed?...

Linting for new packages not using git-checkout

1

**Description** The foundations squad has made a concerted effort to update some of our most used packages to use git-checkout over fetch. Part of what enabled the xz attack is...

This is helpful if you want to rebuild `lz4-java` from source and then use it in another build later.

## Summary Fix use-after-free vulnerability in the unicode-escape decoder with non-strict error handlers. ## Details - **CVE**: CVE-2025-4516 - **Severity**: Medium - **Issue**: Use-after-free crash when using `bytes.decode("unicode_escape", error="ignore|replace")` ##...

## Summary This PR fixes a P0 issue where APKO builds were resolving to ancient Python versions (e.g., python-3.12=3.12.2-r6) instead of current versions (e.g., 3.12.10-r1). ## Root Cause The python-3.XX-base...