Skip to content

chore(deps): Bump the docker-images group across 1 directory with 2 updates #841

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 1 commit into from
Closed

chore(deps): Bump the docker-images group across 1 directory with 2 updates #841

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion release/docker/Dockerfile.breg
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

ARG SOURCE_DATE_EPOCH=0

FROM debian:trixie-slim@sha256:3a39a0592364683e6bab97937b72cad5a8fa6dcbbee90edb3bb48c7f8e94f258 AS runtime-root
FROM debian:trixie-slim@sha256:d7e12182ce18b85b93007c1dedf31f2d29e01ccf3182cc4017c709b6259bc132 AS runtime-root

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 3, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Add the mandatory DCO sign-off

Commit effe148f9622ced671ef49046641eac60ef6a1ae contains no Signed-off-by trailer (git interpret-trailers --parse returns none), so it violates the repository's mandatory DCO policy; recreate the commit with git commit -s before merging.

AGENTS.md reference: AGENTS.md:L312-L315

Useful? React with 👍 / 👎.

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 6, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Add the mandatory DCO sign-off

Fresh evidence on the newly requested commit shows that f9526433050cc1c9c83b142a832030541d68fd13 also has no Signed-off-by trailer (git interpret-trailers --parse returns no trailers), so the earlier DCO issue was not resolved when the commit was recreated; sign off the replacement commit before merging.

AGENTS.md reference: AGENTS.md:L344-L346

Useful? React with 👍 / 👎.

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 9, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Add the mandatory DCO sign-off

Fresh evidence on the newly requested commit shows that a028604f978ac9c985aa410036625509cf6e321d still has no Signed-off-by trailer (git interpret-trailers --parse returns no trailers), so this replacement commit remains ineligible to merge under the repository's mandatory DCO policy; recreate it with git commit -s.

AGENTS.md reference: AGENTS.md:L370-L372

Useful? React with 👍 / 👎.

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Add the mandatory DCO sign-off

Fresh evidence for the newly requested commit shows that e86f7321d4761eb9270b8bfcc3b770c72f91e9cd still has no Signed-off-by trailer (git interpret-trailers --parse returns no trailers), so the earlier DCO issue remains unresolved and this replacement commit is ineligible to merge until it is recreated with git commit -s.

AGENTS.md reference: AGENTS.md:L407-L407

Useful? React with 👍 / 👎.

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Add the mandatory DCO sign-off

Fresh evidence for the newly requested commit shows that 0633a2edac7389e870c451c4136680b00bce1126 has no Signed-off-by trailer (git interpret-trailers --parse returns no trailers), so this replacement commit remains ineligible to merge under the repository's mandatory DCO policy; recreate it with git commit -s.

AGENTS.md reference: AGENTS.md:L405-L407

Useful? React with 👍 / 👎.

ARG SOURCE_DATE_EPOCH

ADD --checksum=sha256:967aa62605721081c3eb2a17650611a792aa802d76a6511d1840242623d204c9 https://snapshot.debian.org/archive/debian/20260913T000000Z/pool/main/g/glibc/libc6_2.41-12+deb13u4_amd64.deb /workspace/runtime-packages/libc6_2.41-12+deb13u4_amd64.deb
Expand Down
2 changes: 1 addition & 1 deletion release/docker/Dockerfile.builder
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# syntax=docker/dockerfile:1.7@sha256:a57df69d0ea827fb7266491f2813635de6f17269be881f696fbfdf2d83dda33e

FROM rust:1.95-trixie@sha256:f49565f188ee00bc2a18dd418183f2c5f23ef7d6e691890517ed341a598f67c3 AS builder
FROM rust:1.98-trixie@sha256:bf5a9aa29062a6cb03c49bd59a46eb55e3cc770caf598a221a7866e500be3082 AS builder

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Synchronize every maintained image pin

Fresh evidence for 0633a2e is that python3 release/scripts/check-debian13-images.py fails against this exact commit: the checker, release workflows, and release build script still require the previous Rust and Debian digests, producing failures for the builder and all five runtime Dockerfiles. Update every maintained pin and its policy constants atomically, or revert these Dockerfile changes, so the required CI gate can pass.

AGENTS.md reference: AGENTS.md:L251-L254

Useful? React with 👍 / 👎.

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Align the builder with the selected Rust toolchain

Fresh evidence on 0633a2e is that rust-toolchain.toml still selects Rust 1.95.0, while build-release-binaries.sh runs this image with the repository mounted as /workspace and that directory as the working directory. Rustup therefore ignores the bundled 1.98 compiler and downloads the absent 1.95 toolchain inside each ephemeral builder container; restricted/offline canonical builds fail, and the compiler actually used is no longer supplied by the digest-pinned image. Keep the builder on 1.95 or update the workspace toolchain as part of the upgrade.

Useful? React with 👍 / 👎.


# pg_query 6.1.1 always invokes bindgen and regenerates its Rust protobuf types
# when Cargo exposes a protoc command. Freeze the archive and both packages so
Expand Down
2 changes: 1 addition & 1 deletion release/docker/Dockerfile.casework
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

ARG SOURCE_DATE_EPOCH=0

FROM debian:trixie-slim@sha256:3a39a0592364683e6bab97937b72cad5a8fa6dcbbee90edb3bb48c7f8e94f258 AS runtime-root
FROM debian:trixie-slim@sha256:d7e12182ce18b85b93007c1dedf31f2d29e01ccf3182cc4017c709b6259bc132 AS runtime-root
ARG SOURCE_DATE_EPOCH

ADD --checksum=sha256:967aa62605721081c3eb2a17650611a792aa802d76a6511d1840242623d204c9 https://snapshot.debian.org/archive/debian/20260913T000000Z/pool/main/g/glibc/libc6_2.41-12+deb13u4_amd64.deb /workspace/runtime-packages/libc6_2.41-12+deb13u4_amd64.deb
Expand Down
2 changes: 1 addition & 1 deletion release/docker/Dockerfile.discovery
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

ARG SOURCE_DATE_EPOCH=0

FROM debian:trixie-slim@sha256:3a39a0592364683e6bab97937b72cad5a8fa6dcbbee90edb3bb48c7f8e94f258 AS runtime-root
FROM debian:trixie-slim@sha256:d7e12182ce18b85b93007c1dedf31f2d29e01ccf3182cc4017c709b6259bc132 AS runtime-root
ARG SOURCE_DATE_EPOCH

ADD --checksum=sha256:967aa62605721081c3eb2a17650611a792aa802d76a6511d1840242623d204c9 https://snapshot.debian.org/archive/debian/20260913T000000Z/pool/main/g/glibc/libc6_2.41-12+deb13u4_amd64.deb /workspace/runtime-packages/libc6_2.41-12+deb13u4_amd64.deb
Expand Down
2 changes: 1 addition & 1 deletion release/docker/Dockerfile.evidence
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

ARG SOURCE_DATE_EPOCH=0

FROM debian:trixie-slim@sha256:3a39a0592364683e6bab97937b72cad5a8fa6dcbbee90edb3bb48c7f8e94f258 AS runtime-root
FROM debian:trixie-slim@sha256:d7e12182ce18b85b93007c1dedf31f2d29e01ccf3182cc4017c709b6259bc132 AS runtime-root
ARG SOURCE_DATE_EPOCH

ADD --checksum=sha256:967aa62605721081c3eb2a17650611a792aa802d76a6511d1840242623d204c9 https://snapshot.debian.org/archive/debian/20260913T000000Z/pool/main/g/glibc/libc6_2.41-12+deb13u4_amd64.deb /workspace/runtime-packages/libc6_2.41-12+deb13u4_amd64.deb
Expand Down
2 changes: 1 addition & 1 deletion release/docker/Dockerfile.relay
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

ARG SOURCE_DATE_EPOCH=0

FROM debian:trixie-slim@sha256:3a39a0592364683e6bab97937b72cad5a8fa6dcbbee90edb3bb48c7f8e94f258 AS runtime-root
FROM debian:trixie-slim@sha256:d7e12182ce18b85b93007c1dedf31f2d29e01ccf3182cc4017c709b6259bc132 AS runtime-root
ARG SOURCE_DATE_EPOCH

ADD --checksum=sha256:967aa62605721081c3eb2a17650611a792aa802d76a6511d1840242623d204c9 https://snapshot.debian.org/archive/debian/20260913T000000Z/pool/main/g/glibc/libc6_2.41-12+deb13u4_amd64.deb /workspace/runtime-packages/libc6_2.41-12+deb13u4_amd64.deb
Expand Down
Loading