Bump dependencies #1808
Bump dependencies #1808
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #1808 +/- ##
=======================================
Coverage 79.12% 79.12%
=======================================
Files 173 173
Lines 16176 16176
=======================================
Hits 12800 12800
Misses 3056 3056
Partials 320 320 ☔ View full report in Codecov by Sentry. |
| @@ -3,7 +3,7 @@ | |||
| # Copyright 2020-2023 the Pinniped contributors. All Rights Reserved. | |||
| # SPDX-License-Identifier: Apache-2.0 | |||
|
|
|||
| ARG BUILD_IMAGE=golang:1.21.4@sha256:9baee0edab4139ae9b108fffabb8e2e98a67f0b259fd25283c2a084bd74fea0d | |||
There was a problem hiding this comment.
There is actually a new 1.21.5 release, but the automation is accidentally getting tag latest with an old sha. So we want this bump, but we don't want to call it latest and we want this correct sha:
❯ docker run --rm gcr.io/go-containerregistry/crane digest golang:1.21.5 --platform all
sha256:58e14a93348a3515c2becc54ebd35302128225169d166b7c6802451ab336c907
I'll disable the latest version in the Concourse resource and rerun this CI job, and it should work.
There was a problem hiding this comment.
I think this is a bug in the Concourse registry-image resource. According to the docs it should only be returning semver version tags, not latest. As a workaround, I've manually disabled the latest tag version in the Concourse UI for that resource.
cfryanr
force-pushed
the
pinny/bump-deps
branch
from
0188f59
to
d8ec87d
Compare
Automatically bumped all go.mod direct dependencies and/or images in dockerfiles.