Update dependency canonical/central-uploader to spark-3.5.8-ubuntu0 (3.5/edge)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
canonical/central-uploader	spark-source	patch	spark-3.5.7-ubuntu2 → spark-3.5.8-ubuntu0

---

Release Notes

canonical/central-uploader (canonical/central-uploader)

vspark-3.5.8-ubuntu0

Compare Source

vspark-3.5.7-ubuntu4

Compare Source

3 CVE(s) addressed:
CVE-2025-67721 on io.airlift:aircompressor (HIGH)
CVE-2026-24281 on org.apache.zookeeper:zookeeper (HIGH)
CVE-2026-24308 on org.apache.zookeeper:zookeeper (HIGH)

vspark-3.5.7-ubuntu3

Compare Source

This release addresses the following CVE:

• CVE-2025-48734 (High)

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • Between 01:00 AM and 06:59 AM, between day 1 and 7 of the month, and on Friday (* 1-6 1-7 * 5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Post-upgrade command 'export ASSET_URL=$(curl -s https://api.github.com/repos/canonical/central-uploader/releases/tags/spark-3.5.8-ubuntu0 | grep browser_download_url | grep -o 'https://[^"]*bin-k8s\.tgz')' has not been added to the allowed list in allowedCommands

File name: undefined

Post-upgrade command 'export ASSET_SHA512=$(wget -qO- "$ASSET_URL" | sha512sum | awk '{print $1}')' has not been added to the allowed list in allowedCommands

File name: undefined

Post-upgrade command 'sed -i -e "s|https://github.com/canonical/central-uploader/releases/download/[^ ]*\.tgz|$ASSET_URL|g" ' has not been added to the allowed list in allowedCommands

File name: undefined

Post-upgrade command 'sed -i -E -e "s|^([[:space:]]*source-checksum:[[:space:]]*)sha512/[a-f0-9]+$|\1sha512/$ASSET_SHA512|" ' has not been added to the allowed list in allowedCommands