Skip to content

chore(deps): update all non-major dependencies (release-1.3) - #218

Merged
openshift-merge-bot[bot] merged 2 commits into
release-1.3from
renovate/release-1.3-all-minor-patch
Oct 3, 2024
Merged

openshift-merge-bot[bot] merged 2 commits into
release-1.3from
renovate/release-1.3-all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Sep 19, 2024 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
registry.access.redhat.com/ubi9-minimal final patch 9.4-1227.1725849298 -> 9.4-1227.1726694542
registry.access.redhat.com/ubi9/go-toolset stage patch 1.21.11-9 -> 1.21.13-2

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the kind/dependency upgrade Dependency upgrades label Sep 19, 2024
@openshift-ci
openshift-ci Bot requested review from nickboldt and rm3l September 19, 2024 15:32
@renovate renovate Bot changed the title chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-9.1726696856 (release-1.3) chore(deps): update all non-major dependencies (release-1.3) Sep 23, 2024
@renovate
renovate Bot force-pushed the renovate/release-1.3-all-minor-patch branch 2 times, most recently from e19b660 to b0fa334 Compare September 25, 2024 07:42
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
renovate Bot force-pushed the renovate/release-1.3-all-minor-patch branch from b0fa334 to 9d1d832 Compare September 27, 2024 21:16
@github-actions

Copy link
Copy Markdown
Contributor

@renovate

renovate Bot commented Sep 30, 2024

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@github-actions

Copy link
Copy Markdown
Contributor

@rm3l rm3l left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@openshift-ci openshift-ci Bot added the lgtm label Oct 3, 2024
@openshift-ci

openshift-ci Bot commented Oct 3, 2024

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: nickboldt, rm3l

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-merge-bot
openshift-merge-bot Bot merged commit 7199d7b into release-1.3 Oct 3, 2024
@openshift-merge-bot
openshift-merge-bot Bot deleted the renovate/release-1.3-all-minor-patch branch October 3, 2024 15:42
Fortune-Ndlovu pushed a commit to Fortune-Ndlovu/rhdh-operator that referenced this pull request Sep 6, 2025
Signed-off-by: Kim Tsao <ktsao@redhat.com>
Fortune-Ndlovu added a commit to Fortune-Ndlovu/rhdh-operator that referenced this pull request Oct 2, 2026
Use podman unshare chown plus chmod -R a+rwX on the local Hermeto cache,
same as rhdh-must-gather redhat-developer#218 and CI. Removes the acl package requirement.

Signed-off-by: Fortune-Ndlovu <fndlovu@redhat.com>
openshift-merge-bot Bot pushed a commit that referenced this pull request Oct 2, 2026
* fix(ci): align hermetic build with must-gather improvements

Pin Hermeto once in the Makefile for CI and local builds, include the
Hermeto tag in the deps cache key, chmod the prefetch cache for non-root
go-builder, and drop USER 0 from the builder stage.

Signed-off-by: Fortune-Ndlovu <fndlovu@redhat.com>

* fix(ci): harden local hermeto cache permissions [Qodo]

Chown the Podman-populated cache before chmod (podman unshare, like CI),
use /tmp/hermeto-cache/operator for local builds, and restrict the cache
parent directory to the invoking user.

Signed-off-by: Fortune-Ndlovu <fndlovu@redhat.com>

* fix(ci): grant hermeto cache via ACLs instead of a+rwX

Map go-builder and rpm-builder Podman UIDs with setfacl (subuid math plus
a root probe) so local offline builds work without world-writable cache files.

Signed-off-by: Fortune-Ndlovu <fndlovu@redhat.com>

* refactor(ci): move hermeto script to hack and support CONTAINERFILE

Relocate local Hermeto helper to hack/local-hermeto-build.sh, add
CONTAINERFILE and per-image cache dirs under /tmp/hermeto-cache/, and
parse multi-stage Dockerfiles for ACL UID mapping. Add
dp-installer-hermetic-build for plugin-installer.

Signed-off-by: Fortune-Ndlovu <fndlovu@redhat.com>

* fix(ci): match must-gather cache permissions, drop setfacl

Use podman unshare chown plus chmod -R a+rwX on the local Hermeto cache,
same as rhdh-must-gather #218 and CI. Removes the acl package requirement.

Signed-off-by: Fortune-Ndlovu <fndlovu@redhat.com>

---------

Signed-off-by: Fortune-Ndlovu <fndlovu@redhat.com>

This branch was previously deployed

1 inactive deployment
internal — 6aa3b8ff Deployed Sep 30, 2024 by nickboldt
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants