Skip to content

Update all dependencies - #496

Merged
hluk merged 2 commits into
masterfrom
konflux/mintmaker/master/all-dependencies
Aug 3, 2026
Merged

Update all dependencies#496
hluk merged 2 commits into
masterfrom
konflux/mintmaker/master/all-dependencies

Conversation

@red-hat-konflux

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
actions/checkout (changelog) action digest 9c091bb3d3c42e
astral-sh/ruff-pre-commit repository minor v0.15.20v0.16.0 v0.16.1
astral-sh/setup-uv action major v8.2.0v9.0.0
pre-commit/mirrors-mypy repository minor v2.1.0v2.3.0
quay.io/fedora/python-313 final major 2026062420260729
redhat-actions/buildah-build action major v2v3

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.


Release Notes

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

v0.16.0

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.16.0

v0.15.22

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.15.22

v0.15.21

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.15.21

astral-sh/setup-uv (astral-sh/setup-uv)

v9.0.0: 🌈 Change prune-cache default to false

Compare Source

Changes

This release disables the default cache cache pruning to ease the load on the PyPi infrastructure.
Since users might experience more GitHub Actions cache usage which might result in higher costs this is marked as a breaking change. To read more on why we did this (now) you can read the detailed analysis and reasoning in #​967

Besides this big breaking change we also have a small bugfix while building caches for linux distributions that behave a big different than the "big ones" and a speed up in version resolution by only reading the version manifest until a matching version is found saving runtime and network bandwith.

🚨 Breaking changes
🐛 Bug fixes
  • fix: fall back to distribution ID when os-release has no version field @​cxzhong (#​961)
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates

v8.3.2: 🌈 update known checksums for 0.11.28

Compare Source

Changes

Just a maintenance release

🧰 Maintenance
📚 Documentation
⬆️ Dependency updates

v8.3.1: 🌈 update known checksums for 0.11.27

Compare Source

Changes

Just a maintenance release

🧰 Maintenance
📚 Documentation

v8.3.0: 🌈 Support uv.lock as a version-file source

Compare Source

Changes

Thanks to @​somaz94 you can now use the pinned version of uv itself in uv.lock. It gets picked up automatically.
If you have pinned another version of uv in your uv.lock you can use the inputs version or version-source to override this.

🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

v2.3.0

Compare Source

v2.2.0

Compare Source

redhat-actions/buildah-build (redhat-actions/buildah-build)

v3.0.2

Compare Source

Bug Fixes
  • Fix container mode "image not known" error: Each containerized buildah command ran in a new disposable container with its own storage. Images built by buildah bud were invisible to subsequent buildah tag and buildah images commands. All containerized buildah invocations now pass --root <storageRoot> to share the bind-mounted host storage. #​177
CI & Infrastructure
  • Add integration test for buildah-image container mode with multiple tags. #​177
  • Consolidate three containerfile build workflows into one (native, containerized, case normalization). #​177

v3.0.1

Compare Source

Bug Fixes
  • Fix container mode storage permission error: The buildah-image feature hardcoded the rootful storage path /var/lib/containers/storage, which fails with permission denied on rootless runners. The action now detects the host's actual storage root via podman info at runtime, with a fallback to the previous path. #​175
CI & Infrastructure
  • Add unit test suite using vitest and a test job in CI. #​175

v3.0.0

Compare Source

Breaking Changes
  • Node.js 24 runtime: The action now runs on the Node.js 24 runtime (runs.using: node24). GitHub Actions runners must support this runtime. #​154
  • Squash defaults to true: The squash input now defaults to true, matching common usage. Set squash: false to preserve intermediate layers. #​161
New Features
  • Annotations input: Add OCI annotations to images using the new annotations input. Separate multiple annotations by newline. Only supported by OCI images. #​161
  • Container mode (buildah-image input): Run buildah from a container image instead of the host-installed version. Useful for getting a newer buildah than what the runner provides. For example, buildah-image: quay.io/buildah/stable. #​168
  • Podman fallback: When buildah is not installed on the runner, the action automatically falls back to using podman build for containerfile builds. Scratch builds still require buildah. #​169
  • Multiple ports: The port input now accepts multiple ports separated by newline. #​165
  • Parallel multi-arch builds: When building for multiple architectures, each architecture is now built in parallel for significantly faster builds. #​167
  • Architecture verification: After each multi-arch build, the action verifies the output image matches the expected architecture, catching misconfigured emulation early. #​166
  • Image digest output: The digest output now reliably returns the content digest of the built image. #​153, #​165
Bug Fixes
  • Fix empty entrypoint being set when the input is not provided. #​161
  • Fix containerfile path resolution to check both workspace and context directory. #​165
  • Fix digest retrieval using buildah images --format {{.Digest}} instead of buildah inspect which returned the wrong type. #​165
CI & Infrastructure
  • Modernize all CI workflows: upgrade to actions/checkout@v7, actions/setup-node@v7, ubuntu-24.04 runners. #​156
  • Add workflow permissions, concurrency groups, and path filters. #​156
  • Remove broken install_latest_buildah.sh script and simplify CI matrices. #​164
  • Remove defunct CRDA vulnerability scan workflow. #​170
  • Enable Dependabot for npm and GitHub Actions dependencies. #​156
  • Add CODEOWNERS, SECURITY.md. #​156
Dependency Updates
  • Upgrade TypeScript to 6.x. #​163
  • Upgrade ESLint to 10 with flat config. #​156
  • Upgrade @actions/core, @actions/exec, @actions/io to latest versions. #​150, #​156
  • Upgrade @types/node to v26. #​159
  • Upgrade redhat-actions/common to v2. #​158

v3

Compare Source

Bug Fixes
  • Fix container mode "image not known" error: Each containerized buildah command ran in a new disposable container with its own storage. Images built by buildah bud were invisible to subsequent buildah tag and buildah images commands. All containerized buildah invocations now pass --root <storageRoot> to share the bind-mounted host storage. #​177
CI & Infrastructure
  • Add integration test for buildah-image container mode with multiple tags. #​177
  • Consolidate three containerfile build workflows into one (native, containerized, case normalization). #​177

v2.13

Compare Source

v2.12

Compare Source

  • Forcibly remove existing manifest before creating a new one. #​103

v2.11

Compare Source

v2.10

Compare Source

  • Make image and tag in lowercase, if found in uppercase. #​89
  • Add --tls-verify and extra-args input for buildah from command. #​92
  • Remove kubic packages from test workflows. #​93

v2.9

Compare Source

  • Add support for multiple archs and platforms.
  • Allow building image manifest if multi arch or platform is provided.

v2.8

Compare Source

v2.7

Compare Source

  • Add output image-with-tag which provides image name and its corresponding first tag present.
  • Replace input dockerfiles with containerfiles. Input dockerfiles will be present as alias of containerfiles.
  • Add matrix to install latest buildah. (Internal)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@codecov

codecov Bot commented Aug 1, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 93.24324% with 5 lines in your changes missing coverage. Please review.
✅ Project coverage is 92.54%. Comparing base (410de35) to head (cc844b9).

Files with missing lines Patch % Lines
greenwave/consumers/consumer.py 60.00% 2 Missing ⚠️
greenwave/decision.py 0.00% 1 Missing ⚠️
greenwave/product_versions.py 50.00% 0 Missing and 1 partial ⚠️
greenwave/safe_yaml.py 75.00% 1 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##           master     #496      +/-   ##
==========================================
+ Coverage   92.49%   92.54%   +0.05%     
==========================================
  Files          55       55              
  Lines        4288     4279       -9     
  Branches      274      270       -4     
==========================================
- Hits         3966     3960       -6     
+ Misses        265      264       -1     
+ Partials       57       55       -2     
Flag Coverage Δ
unit-tests 92.54% <93.24%> (+0.05%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Assisted-by: Claude (Anthropic)
@hluk
hluk merged commit 93ba2b1 into master Aug 3, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant