chore(deps): update python base image digest and CI action versions - #63
Merged
Conversation
Consolidates the three open Renovate PRs (#56, #57, #58) onto current main. Renovate's branches were stale, so each dependency was re-resolved to the version that is current today: - Dockerfile: pin python:3.14-slim to sha256:cea0e60... (#56) - actions/checkout: v6.0.2 -> v6.1.0, tracking the v6 tag (#57) - docker/login-action: v4.0.0 -> v4.6.0 (#58) Signed-off-by: Venkata Mutyala <venkata.mutyala@glueops.dev>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Consolidates the three open Renovate PRs onto current
main. Renovate's branches were stale (see note below), so each dependency was re-resolved against upstream today rather than cherry-picking the branches.Changes
python:3.14-slim(Dockerfile)@sha256:cea0e604...ce14a6actions/checkoutde0fac2e(v6.0.2)d23441a4(v6.1.0)docker/login-actionb45d80f8(v4.0.0)dbcb8138(v4.6.0)All three SHAs were verified against upstream:
cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6is the currentdocker-content-digestforlibrary/python:3.14-slim— identical to what chore(pindigest): update python to cea0e60 #patch - autoclosed #56 proposed.d23441a48e516b6c34aea4fa41551a30e30af803is whatrefs/tags/v6points at today (v6.1.0). chore(fallback): update actions/checkout #57 proposeddf4cb1c0(v6.0.3), which was thev6tip on 2026-07-20 but has since moved. The# v6comment is kept so Renovate keeps tracking the floating tag.dbcb813823bdd20940b903addbd779551569679fisrefs/tags/v4.6.0. feat: update docker/login-action to v4.1.0 #minor - autoclosed #58 proposed v4.1.0 (released 2026-04-02); v4.6.0 shipped 2026-07-29.Why not just merge the Renovate PRs
renovate/pin-dependencies(#56) is corrupt. Its single commit is parented on currentmainbut reverts a large amount ofmain's content — it deletesLICENSE,app/util/incidentio.py,app/util/kube_rbac.py,app/util/kube_apiserver.py, and.github/workflows/release-please.yaml, revertsapp/util/chisel.pytodocker.io/jpillora/chisel:1, and rollsPipfile.lockback ~2000 lines. It also does not contain the digest pin it advertises. Merging it as-is would have undone several merged PRs. #56 should be closed rather than merged; Renovate will regenerate it.#57 and #58 are fine in content, just based on older commits and behind newer upstream releases.
Out of scope
Pipfile/Pipfile.lockPython dependencies are untouched — no open PR covers them (renovate/lock-file-maintenancehas no open PR).Follow-up
Once merged, #56, #57 and #58 can be closed.