Monthly Wolfi Package Removal Notice – June 2026

[sil2100]

Chainguard is scheduled to remove non-latest versions of Wolfi APK packages older than 12 months from public Wolfi repositories as part of our Wolfi package archive policy.

This is the ninth package removal notice under the new policy. The removals listed below are scheduled for June 10, 2026.

---

Planned Removal Date

Wednesday, June 10, 2026 (second Wednesday of June)

---

Packages Versions Scheduled for Removal

The full list of packages scheduled for removal is provided in the attached file:
wolfi-withdrawn-packages-20260610.txt

These packages:

• Were built more than 12 months ago, and
• Are not required as dependencies for other retained packages, and
• Are not used in Chainguard Container Images.

---

Why Is This Happening?

Please reference the Wolfi package archive policy announcement.

---

What Do You Need To Do?

• If you pin to specific package versions, check the attached list to ensure your pinned versions are not affected.
• Update to newer package versions as needed.
• Mirror copies of older packages if you require continued access after June 10.

---

Future Removal Schedule

• Removals occur monthly on the second Wednesday.
• Next Notice: June 10, 2026 - for packages scheduled to be removed on July 8, 2026.

---

Questions or Help

• Paid Chainguard customers: contact your account team.
• Free users: please comment on this discussion on the Wolfi GitHub page if you have questions or comments.

[sil2100]

Please read: https://github.com/orgs/wolfi-dev/discussions/78713

[sil2100]

Garbage collection of packages in this month's batch has been completed. The full list of Wolfi garbage-collected packages:
wolfi-withdrawn-packages.txt

[vaskozl]

Hi 👋 , this discussion was linked by @xnox in https://github.com/orgs/wolfi-dev/discussions/78720.

There are a number of application melange specs that got dropped from the public repo that don't seem to fit the criteria outlined in the announcement, as they were current and didn't show up in wolfi-withdrawn-packages.txt. A big chunk is in bfd2fb3.

I expect they'll show up in the withdrawn list as the latest uploadd packages begin aging in repos.

A few examples are:

• chromium
• flannel
• oauth2-proxy

Will more follow as part of a policy change? Asking for homelab purposes where I don't have the same access to private repos & containers as at the day job.

Best