DO NOT MERGE

Author: dannf

curl-rustls.yaml

@@ -1,7 +1,7 @@
 package:
   name: curl-rustls
   version: "8.12.1"
-  epoch: 2
+  epoch: 3
   description: "URL retrieval utility and library"
   copyright:
     - license: MIT
@@ -67,6 +67,8 @@ subpackages:
     description: "curl library (rustls backend)"
     dependencies:
       provider-priority: 10
+      provides:
+        - libcurl-abi=${{package.version}}
     pipeline:
       - runs: |
           mkdir -p "${{targets.subpkgdir}}"/usr/lib

curl.yaml

@@ -1,10 +1,16 @@
 package:
   name: curl
   version: "8.12.1"
-  epoch: 2
+  epoch: 3
   description: "URL retrieval utility and library"
   copyright:
     - license: MIT
+  dependencies:
+    runtime:
+      # Allow only libcurl libraries built from the same upstream
+      # source version instead of only relying on SONAMEs.
+      # https://github.com/chainguard-dev/internal-dev/issues/10381
+      - libcurl-abi=${{package.version}}
 
 environment:
   contents:
@@ -91,6 +97,8 @@ subpackages:
       # raise the priority here so this beats rustls
       # TODO: revert this to "5" once rustls is fixed.
       provider-priority: 15
+      provides:
+        - libcurl-abi=${{package.version}}
     pipeline:
       - runs: |
           mkdir -p "${{targets.subpkgdir}}"/usr/lib