Skip to content

🌱 Update Builder Image group#320

Open
cluster-stack-bot[bot] wants to merge 1 commit intomainfrom
renovate/cso-builder-image
Open

🌱 Update Builder Image group#320
cluster-stack-bot[bot] wants to merge 1 commit intomainfrom
renovate/cso-builder-image

Conversation

@cluster-stack-bot
Copy link
Contributor

@cluster-stack-bot cluster-stack-bot bot commented Oct 1, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
adrienverge/yamllint minor v1.37.1 -> v1.38.0
docker.io/aquasec/trivy (source) stage minor 0.66.0 -> 0.69.3
docker.io/hadolint/hadolint stage minor v2.13.1-alpine -> v2.14.0-alpine
docker.io/library/alpine stage minor 3.22.1 -> 3.23.3
golangci/golangci-lint minor v2.4.0 -> v2.11.3
helm/helm major v3.19.0 -> v4.1.3

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

adrienverge/yamllint (adrienverge/yamllint)

v1.38.0

Compare Source

aquasecurity/trivy (docker.io/aquasec/trivy)

v0.69.3

Compare Source

Changelog

  • 6fb20c8 release: v0.69.3 [release/v0.69] (#​10293)
  • dabefec fix(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 [backport: release/v0.69] (#​10291)

v0.69.2

Compare Source

Changelog

  • cfa322e release: v0.69.2 [release/v0.69] (#​10266)
  • 86debce fix(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 [backport: release/v0.69] (#​10267)
  • cf3d4cd fix(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 [backport: release/v0.69] (#​10264)
  • 6dfd3b0 ci: remove apidiff workflow

v0.69.1

Compare Source

v0.69.0

Compare Source

⚠ BREAKING CHANGES
  • misconf: use ID instead of AVDID for providers mapping (#​9752)
Features
Bug Fixes
Performance Improvements
  • misconf: optimize string concatenation in azure scanner (#​9969) (10a50a7)
Code Refactoring
  • misconf: use ID instead of AVDID for providers mapping (#​9752) (6462dc8)

v0.68.2

Compare Source

v0.68.1

Compare Source

Bug Fixes
  • update cosing settings for GoReleaser after bumping cosing to v3 (#​9863) (c7accc8)

v0.67.2

Compare Source

v0.67.1

Compare Source

v0.67.0

Compare Source

Features
Bug Fixes
  • aws: use BuildableClient instead of xhttp.Client (#​9436) (fa6f1bf)
  • close file descriptors and pipes on error paths (#​9536) (a4cbd6a)
  • db: Download database when missing but metadata still exists (#​9393) (92ebc7e)
  • k8s: disable parallel traversal with fs cache for k8s images (#​9534) (c0c7a6b)
  • misconf: handle tofu files in module detection (#​9486) (bfd2f6b)
  • misconf: strip build metadata suffixes from image history (#​9498) (c938806)
  • misconf: unmark cty values before access (#​9495) (8e40d27)
  • misconf: wrap legacy ENV values in quotes to preserve spaces (#​9497) (267a970)
  • nodejs: parse workspaces as objects for package-lock.json files (#​9518) (404abb3)
  • nodejs: use snapshot string as Package.ID for pnpm packages (#​9330) (4517e8c)
  • vex: don't suppress vulns for packages with infinity loop (#​9465) (78f0d4a)
  • vuln: compare nuget package names in lower case (#​9456) (1ff9ac7)
hadolint/hadolint (docker.io/hadolint/hadolint)

v2.14.0

Compare Source

What's Changed

New Contributors

Full Changelog: hadolint/hadolint@v2.13.1...v2.14.0

golangci/golangci-lint (golangci/golangci-lint)

v2.11.3

Compare Source

Released on 2026-03-10

  1. Linters bug fixes

v2.11.2

Compare Source

Released on 2026-03-07

  1. Fixes
    • fmt: fix error when using the fmt command with explicit paths.

v2.11.1

Compare Source

Released on 2026-03-06

Due to an error related to AUR, some artifacts of the v2.11.0 release have not been published.

This release contains the same things as v2.11.0.

v2.11.0

Compare Source

Released on 2026-03-06

  1. Linters new features or changes
    • errcheck: from 1.9.0 to 1.10.0 (exclude crypto/rand.Read by default)
    • gosec: from 2.23.0 to 2.24.6 (new rules: G113, G118, G119, G120, G121, G122, G123, G408, G707)
    • noctx: from 0.4.0 to 0.5.0 (new detection: httptest.NewRequestWithContext)
    • prealloc: from 1.0.2 to 1.1.0
    • revive: from 1.14.0 to 1.15.0 (⚠️ Breaking change: package-related checks moved from var-naming to a new rule package-naming)
  2. Linters bug fixes
    • gocognit: from 1.2.0 to 1.2.1
    • gosec: from 2.24.6 to 2.24.7
    • unqueryvet: from 1.5.3 to 1.5.4

v2.10.1

Compare Source

Released on 2026-02-17

  1. Fixes
    • buildssa panic

v2.10.0

Compare Source

Released on 2026-02-17

  1. Linters new features or changes
    • ginkgolinter: from 0.22.0 to 0.23.0
    • gosec: from 2.22.11 to 2.23.0 (new rules: G117, G602, G701, G702, G703, G704, G705, G706)
    • staticcheck: from 0.6.1 to 0.7.0
  2. Linters bug fixes
    • godoclint: from 0.11.1 to 0.11.2

v2.9.0

Compare Source

Released on 2026-02-10

  1. Enhancements
    • 🎉 go1.26 support
  2. Linters new features or changes
    • arangolint: from 0.3.1 to 0.4.0 (new rule: detect potential query injections)
    • ginkgolinter: from 0.21.2 to 0.22.0 (support for wrappers)
    • golines: from 0.14.0 to 0.15.0
    • misspell: from 0.7.0 to 0.8.0
    • revive: from v1.13.0 to v1.14.0 (new rules: epoch-naming, use-slices-sort)
    • unqueryvet: from 1.4.0 to 1.5.3 (new options: check-n1, check-sql-injection, check-tx-leaks, allow, custom-rules)
    • wsl_v5: from 5.3.0 to 5.6.0 (new rule: after-block)
  3. Linters bug fixes
    • modernize: from 0.41.0 to 0.42.0
    • prealloc: from 1.0.1 to 1.0.2
    • protogetter: from 0.3.18 to 0.3.20
  4. Misc.
    • Log information about files when configuration verification
    • Emit an error when no linters enabled
    • Do not collect VCS information when loading code

v2.8.0

Compare Source

Released on 2026-01-07

  1. Linters new features or changes
    • godoclint: from 0.10.2 to 0.11.1 (new rule: require-stdlib-doclink)
    • golines: from 442fd00 to 0.14.0
    • gomoddirectives: from 0.7.1 to 0.8.0
    • gosec: from daccba6 to 2.22.11 (new rule: G116)
    • modernize: from 0.39.0 to 0.40.0 (new analyzers: stringscut, unsafefuncs)
    • prealloc: from 1.0.0 to 1.0.1 (message changes)
    • unqueryvet: from 1.3.0 to 1.4.0 (new options: check-aliased-wildcard, check-string-concat, check-format-strings, check-string-builder, check-subqueries, ignored-functions, sql-builders)
  2. Linters bug fixes
    • gocritic: from 0.14.2 to 0.14.3
    • errorlint: from 1.8.0 to 1.9.0
    • govet: from 0.39.0 to 0.40.0
    • protogetter: from 0.3.17 to 0.3.18
    • revive: add missing enable-default-rules setting
  3. Documentation
    • docs: split installation page

v2.7.2

Compare Source

Released on 2025-12-07

  1. Linter bug fixes

v2.7.1

Compare Source

Released on 2025-12-04

  1. Linter bug fixes
    • modernize: disable stringscut analyzer

v2.7.0

Compare Source

Released on 2025-12-03

  1. Bug fixes
    • fix: clone args used by custom command
  2. Linters new features or changes
    • nosprintfhostport: from 0.2.0 to 0.3.1 (ignore string literals without a colon)
    • unqueryvet: from 1.2.1 to 1.3.0 (handles const and var declarations)
    • revive: from 1.12.0 to 1.13.0 (new option: enable-default-rules, new rules: forbidden-call-in-wg-go, unnecessary-if, inefficient-map-lookup)
    • modernize: from 0.38.0 to 0.39.0 (new analyzers: plusbuild, stringscut)
  3. Linters bug fixes
    • perfsprint: from 0.10.0 to 0.10.1
    • wrapcheck: from 2.11.0 to 2.12.0
    • godoclint: from 0.10.1 to 0.10.2
  4. Misc.
    • Add some flags to the custom command
  5. Documentation
    • docs: split changelog v1 and v2

v2.6.2

Compare Source

Released on 2025-11-14

  1. Bug fixes
    • fmt command with symlinks
    • use file depending on build configuration to invalidate cache
  2. Linters bug fixes
    • testableexamples: from 1.0.0 to 1.0.1
    • testpackage: from 1.1.1 to 1.1.2

v2.6.1

Compare Source

Released on 2025-11-04

  1. Linters bug fixes
    • copyloopvar: from 1.2.1 to 1.2.2
    • gocritic: from 0.14.0 to 0.14.2

v2.6.0

Compare Source

Released on 2025-10-29

  1. New linters
    • Add modernize analyzer suite
  2. Linters new features or changes
    • arangolint: from 0.2.0 to 0.3.1
    • dupword: from 0.1.6 to 0.1.7 (new option comments-only)
    • gocritic: from 0.13.0 to 0.14.0 (new rules/checkers: zeroByteRepeat, dupOption)
    • gofumpt: from 0.9.1 to 0.9.2 ("clothe" naked returns is now controlled by the extra-rules option)
    • perfsprint: from 0.9.1 to 0.10.0 (new options: concat-loop, loop-other-ops)
    • wsl: from 5.2.0 to 5.3.0
  3. Linters bug fixes
    • dupword: from 0.1.6 to 0.1.7
    • durationcheck: from 0.0.10 to 0.0.11
    • exptostd: from 0.4.4 to 0.4.5
    • fatcontext: from 0.8.1 to 0.9.0
    • forbidigo: from 2.1.0 to 2.3.0
    • ginkgolinter: from 0.21.0 to 0.21.2
    • godoclint: from 0.10.0 to 0.10.1
    • gomoddirectives: from 0.7.0 to 0.7.1
    • gosec: from 2.22.8 to 2.22.10
    • makezero: from 2.0.1 to 2.1.0
    • nilerr: from 0.1.1 to 0.1.2
    • paralleltest: from 1.0.14 to 1.0.15
    • protogetter: from 0.3.16 to 0.3.17
    • unparam: from 0df0534 to 5beb8c8
  4. Misc.
    • fix: ignore some files to hash the version for custom build

v2.5.0

Compare Source

Released on 2025-09-21

  1. New linters
  2. Linters new features or changes
    • embeddedstructfieldcheck: from 0.3.0 to 0.4.0 (new option: empty-line)
    • err113: from aea10b5 to 0.1.1 (skip internals of Is methods for error type)
    • ginkgolinter: from 0.20.0 to 0.21.0 (new option: force-tonot)
    • gofumpt: from 0.8.0 to 0.9.1 (new rule is to "clothe" naked returns for the sake of clarity)
    • ineffassign: from 0.1.0 to 0.2.0 (new option: check-escaping-errors)
    • musttag: from 0.13.1 to 0.14.0 (support interface methods)
    • revive: from 1.11.0 to 1.12.0 (new options: identical-ifelseif-branches, identical-ifelseif-conditions, identical-switch-branches, identical-switch-conditions, package-directory-mismatch, unsecure-url-scheme, use-waitgroup-go, useless-fallthrough)
    • thelper: from 0.6.3 to 0.7.1 (skip t.Helper in functions passed to synctest.Test)
    • wsl_v5: from 5.1.1 to 5.2.0 (improvements related to subexpressions)
  3. Linters bug fixes
    • asciicheck: from 0.4.1 to 0.5.0
    • errname: from 1.1.0 to 1.1.1
    • fatcontext: from 0.8.0 to 0.8.1
    • goprintffuncname: from 0.1.0 to 0.1.1
    • godot: from 1.5.1 to 1.5.4
    • gosec: from 2.22.7 to 2.22.8
    • nilerr: from 0.1.1 to a temporary fork
    • nilnil: from 1.1.0 to 1.1.1
    • protogetter: from 0.3.15 to 0.3.16
    • tagliatelle: from 0.7.1 to 0.7.2
    • testifylint: from 1.6.1 to 1.6.4
  4. Misc.
    • fix: "no export data" errors are now handled as a standard typecheck error
  5. Documentation
    • Improve nolint section about syntax
helm/helm (helm/helm)

v4.1.3: Helm v4.1.3

Compare Source

Helm v4.1.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed a bug where --dry-run=server was not respecting generateName #​31563
  • Fixed a bug where empty CRD resources caused a crash. Now it prints an error #​31578
  • Fixed a bug where OCI references with tag+digest failed with "invalid byte" error #​31601
  • Fixed a bug where user-provided nil value was not preserved when chart has an empty map or no default for a key #​31644
  • Fixed a regression since Helm 3.18.0 where Pulling charts from OCI repositories that use an index to store both Container Images and Helm Charts under the same tag failed #​31776
  • Fixed a Helm 4 regression where gotemplate white space trimming directly after YAML doc separators, when present after postrendering, caused YAML file corruption #​31868
  • Fixed a bug where FailedStatus is treated as a terminal state, causing upgrades to fail prematurely when cluster autoscalers needed time to provision nodes, or when pods were being deleted during rolling updates #​31897
  • Fixed broken backwards compatibility for deprecated --atomic flag on install command #​31901
  • SDK: Fixed a Windows 'Access Deined' error if multiple processes try to download the same chart version concurrently #​31128
  • SDK: Fixed a bug where users did not receive any logs from the waiter, causing confusion as several minutes could pass with no user feedback #​31717
  • SDK: Fixed a bug where server-side apply defaults did not always match the CLI defaults #​31732
  • SDK: Fixed a Go import issue when downstream tooling attempted to vendor helm.sh/helm/v4/pkg/kube #​31852

Installation and Upgrading

Download Helm v4.1.3. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.0 and 3.21.0 are the next minor releases and will be on May 13, 2026
  • 4.1.4 and 3.20.2 are the next patch releases and will be on April 8, 2026

Changelog

  • chore(defaults): server-side apply SDK defaults should always match the CLI defaults c94d381 (Matheus Pimenta)
  • whitespace b36d660 (Austin Abro)
  • use logger with waiter 04a91af (Austin Abro)
  • Remove refactorring changes from coalesce_test.go c3c57db (Evans Mungai)
  • Fix import d47cb2b (Evans Mungai)
  • Update pkg/chart/common/util/coalesce_test.go 790bf92 (Evans Mungai)
  • Fix lint warning f7cec12 (Evans Mungai)
  • Preserve nil values in chart already d94a5c9 (Evans Mungai)
  • fix(values): preserve nil values when chart default is empty map 8c5fe4e (Evans Mungai)
  • chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 217db28 (dependabot[bot])
  • Restored --atomic flag on install command 7cb43e0 (Travis Leeden)
  • fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394 5b26d4f (Terry Howe)
  • fix: bump fluxcd/cli-utils to v0.37.2-flux.1 360c131 (Terry Howe)
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.0 to 0.21.1 69a0a92 (dependabot[bot])
  • fix: insert newline after doc separators glued to content by template trimming b868e6a (Matheus Pimenta)
  • fix: correct import comment in statuswait.go from v3 to v4 dbfbea9 (rohansood10)
  • chore(deps): bump the k8s-io group with 7 updates 099192c (dependabot[bot])
  • add image index test 4967ead (Pedro Tôrres)
  • fix pulling charts from OCI indices 2fe6b10 (Pedro Tôrres)
  • fix: handle OCI digest algorithm prefix in chart downloader (#​31601) e3e2d01 (Evans Mungai)
  • fix(install): check nil for restClientGetter and fix tests c15e711 (Manuel Alonso)
  • chore(refactor): better testing and functionality for installing crd df82e68 (Manuel Alonso)
  • fix(test): fix tests and check nil for restclient 4b896ca (Manuel Alonso)
  • fix(test): merge fix correctly 3fc7939 (Manuel Alonso Gonzalez)
  • fix(install): add more tests and check nil file data 6017d2b (Manuel Alonso)
  • fix(test): no check empty resources f451967 (Manuel Alonso)
  • fix(install): check lenght and file nil, add tests fdadff5 (Manuel Alonso)
  • fix(action): crd resources can be empty 10d6067 (Manuel Alonso)
  • fix: casing issue fixed 0fec40f (Mujib Ahasan)
  • fix: error handled correctly 2637498 (Mujib Ahasan)
  • fix: doc string added 961d7d7 (Mujib Ahasan)
  • update: test coverage added for helper function validateNameAndGenerateName 29e4506 (Mujib Ahasan)
  • update: helper function added for the business logic d55b0b9 (Mujib Ahasan)
  • generateName is also considered in logic c1c090e (Mujib Ahasan)
  • update: business logic respected for skipping object missing name 5e09313 (Mujib Ahasan)
  • fixed: --dry-run=server now respect generateName f289d16 (Mujib Ahasan)
  • fix(downloader): safely handle concurrent file writes on Windows bfac739 (Orgad Shaneh)

v4.1.2

Compare Source

v4.1.1: Helm v4.1.1

Compare Source

Helm v4.1.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • fix: fine-grained context options for waiting #​31735
  • fix: kstatus do not wait forever on failed resources #​31730
  • fix: Revert "Consider GroupVersionKind when matching resources" #​31772
  • fix: handle nil elements in slice copying #​31751

Installation and Upgrading

Download Helm v4.1.1. The common platform binaries are here:

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.0 and 3.21.0 are the next minor releases and will be on May 13, 2026
  • 4.1.2 and 3.20.1 are the next patch releases and will be on March 11, 2026

Changelog

  • feat(kstatus): fine-grained context options for waiting 5caf004 (Matheus Pimenta)
  • bugfix(kstatus): do not wait forever on failed resources 2519a88 (Matheus Pimenta)
  • Revert "Consider GroupVersionKind when matching resources" b2c487c (Matheus Pimenta)
  • fix(copystructure): handle nil elements in slice copying 261387a (Philipp Born)

v4.1.0: Helm v4.1.0

Compare Source

Helm v4.1.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Feature: added chart name to dependency logs, namespace to resource waiting logs, and confirmation message when all resources are ready #​31530
  • Feature: improved plugin name validation error messages and field name detection #​31491
  • Feature: improved the --wait flag by allowing explicit strategy selection (including explicit --wait=hookOnly) and preventing SDK timeout errors when timeout is not specified #​31421
  • Feature: allow concurrent dependency build with atomic file write #​30984
  • Feature: added a --no-headers flag to the 'helm repo list' command, allowing users to suppress table headers in the output. Useful for scripting and automation #​31448
  • SDK feature: added a LoadArchive to common loader #​31462
  • SDK feature: introduced support for custom kstatus readers #​31706
  • Fixed bug where a plugin name could already be used by another command #​31427
  • Fixed bug where --server-side flag was not passed to install when using upgrade --install #​31635
  • Fixed bug where HELM_ environment variables were not passed to plugins. this fixes a regression which was blocking some getter plugins #​31613
  • Fixed bug where Helm test --logs failed with hook-delete-policy "hook-failed" or "hook-succeed" #​31579
  • Fixed kube client logging issue #​31560
  • Fixed regression where vendor-specific suffixes were stripped from .Capabilities.KubeVersion.GitVersion, breaking charts that detect managed Kubernetes platforms #​31528
  • Fixed a bug where helm uninstall with --keep-history did not suspend previous deployed releases #​12564
  • SDK: bump k8s API versions to v0.35.0
  • docs: updated helm template help text to document --api-versions #​31683
  • docs: fixed documentation about default wait strategy

Installation and Upgrading

Download Helm v4.1.0. The common platform binaries are here:

Configuration

📅 Schedule: Branch creation - "on the first day of the month" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch from dc76c4e to 68f6214 Compare October 9, 2025 11:22
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch 2 times, most recently from ea7f4bf to 480be26 Compare October 11, 2025 11:18
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch 2 times, most recently from bd2b24f to 0f3d518 Compare November 4, 2025 11:22
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch 2 times, most recently from c711262 to 0c695b1 Compare November 13, 2025 11:24
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch from 0c695b1 to d8a3031 Compare November 15, 2025 11:20
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch from d8a3031 to 02573ac Compare November 25, 2025 11:23
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch 2 times, most recently from 039ad2e to 11ced5d Compare December 4, 2025 11:28
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch 3 times, most recently from 1b33442 to 44f7407 Compare December 11, 2025 11:27
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch 3 times, most recently from 23d3b02 to d3fff84 Compare December 18, 2025 11:37
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch 2 times, most recently from 80b03ac to 3002c43 Compare January 13, 2026 11:29
@cluster-stack-bot
Copy link
Contributor Author

cluster-stack-bot bot commented Jan 13, 2026 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined
Command failed: BUILD_IMAGE_TOKEN=**redacted** BUILD_IMAGE_USER=kranurag7 CI=true ./hack/upgrade-builder-image.sh
+ set -o errexit
+ set -o nounset
+ set -o pipefail
+++ dirname ./hack/upgrade-builder-image.sh
++ realpath ./hack/..
+ REPO_ROOT=/tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator
+ cd /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator
+ source /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/hack/semver-upgrade.sh
++ set -o errexit
++ set -o nounset
++ set -o pipefail
++ set -x
+ '[' true = true ']'
+ echo **redacted**
+ docker login ghcr.io -u kranurag7 --password-stdin
++ git fetch --quiet origin main
++ git show origin/main:.builder-image-version.txt
+ export VERSION=1.1.34
+ VERSION=1.1.34
++ semver_upgrade patch 1.1.34
++ IFS=.
++ read -r version minor patch
++ case "$1" in
++ tag=1.1.35
++ echo 1.1.35
+ export NEW_VERSION=1.1.35
+ NEW_VERSION=1.1.35
+ echo 1.1.35
+ echo 'Wrote new version 1.1.35 to .builder-image-version.txt'
+ docker manifest inspect ghcr.io/sovereigncloudstack/cso-builder:1.1.34
+ echo 0
+ sed -i -e '/^BUILDER_IMAGE_VERSION /s/:=.*$/:= 1.1.35/' Makefile
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/build.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/kubebuilder-markers-checker.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/pr-lint.yml
+ sed -i -e '/image: ghcr\.io\/sovereigncloudstack\/cso-builder:/s/:.*$/: ghcr\.io\/sovereigncloudstack\/cso-builder:1.1.35/' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/pr-lint.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/pr-verify.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/release.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/schedule-cache-cleaner-cso-image.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/schedule-scan-image.yml
+ sed -i -e '/image: ghcr\.io\/sovereigncloudstack\/cso-builder:/s/:.*$/: ghcr\.io\/sovereigncloudstack\/cso-builder:1.1.35/' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/schedule-scan-image.yml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/schedule-update-bot.yaml
+ for FILE in ${REPO_ROOT}/.github/workflows/*
+ grep 'image: ghcr.io/sovereigncloudstack/cso-builder' /tmp/renovate/repos/github/SovereignCloudStack/cluster-stack-operator/.github/workflows/test.yml
+ docker build -t ghcr.io/sovereigncloudstack/cso-builder:1.1.35 ./images/builder
DEPRECATED: The legacy builder is deprecated and will be removed in a future release.
            Install the buildx component to build images with BuildKit:
            https://docs.docker.com/go/buildx/

The command '/bin/sh -c apt-get update &&     apt-get install -qy --no-install-recommends     gnupg python3 python3-pip     file zip unzip jq gettext     libsystemd-dev jq &&     rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* &&     pip install --no-cache-dir     yamllint==${YAMLLINT_VERSION}     yamlfixer-opt-nc==${YAMLFIXER_VERSION}' returned a non-zero code: 1

@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch from 3002c43 to a54455e Compare January 15, 2026 11:27
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch 2 times, most recently from d09635c to d04e4ed Compare January 28, 2026 11:31
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch from d04e4ed to d432f8a Compare January 30, 2026 11:38
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch from d432f8a to a86d3bc Compare February 6, 2026 11:39
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch 2 times, most recently from c8ef1b2 to 18a4375 Compare February 11, 2026 11:52
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch from 18a4375 to 8738b49 Compare February 18, 2026 11:44
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch 4 times, most recently from 5274495 to 025c45b Compare March 8, 2026 11:28
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch from 025c45b to 36039c5 Compare March 10, 2026 11:38
@cluster-stack-bot
🌱 Update Builder Image group
1078446 
| datasource  | package                     | from    | to      |
| ----------- | --------------------------- | ------- | ------- |
| github-tags | adrienverge/yamllint        | v1.37.1 | v1.38.0 |
| docker      | docker.io/aquasec/trivy     | 0.66.0  | 0.69.3  |
| docker      | docker.io/hadolint/hadolint | v2.13.1 | v2.14.0 |
| docker      | docker.io/library/alpine    | 3.22.1  | 3.23.3  |
| github-tags | golangci/golangci-lint      | v2.4.0  | v2.11.3 |
| github-tags | helm/helm                   | v3.19.0 | v4.1.3  |
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch from 36039c5 to 1078446 Compare March 12, 2026 11:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

type/major type/minor update/container

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants