Bump ubi9/ubi-minimal from 9.8-1782191395 to 1785214352 in /build - #263
Bump ubi9/ubi-minimal from 9.8-1782191395 to 1785214352 in /build#263dependabot[bot] wants to merge 1 commit into
Conversation
Bumps ubi9/ubi-minimal from 9.8-1782191395 to 1785214352. --- updated-dependencies: - dependency-name: ubi9/ubi-minimal dependency-version: '1785214352' dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
area/dependency
|
🚨 Major Version Update Detected 🚨 This PR contains a major version update that requires manual review:
Please review the changelog and breaking changes before merging. Auto-merge has been disabled for this PR. |
WalkthroughThe Dockerfile runtime base image changes from ChangesRuntime image
Estimated code review effort: 1 (Trivial) | ~2 minutes Suggested reviewers: 🚥 Pre-merge checks | ✅ 15✅ Passed checks (15 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: dependabot[bot] The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@build/Dockerfile`:
- Line 10: Update the base image reference in the Dockerfile’s FROM instruction
to use a supported floating UBI9 minimal tag instead of the pinned 1785214352
tag, preserving the Red Hat UBI minimal image source.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml
Review profile: CHILL
Plan: Enterprise
Run ID: de2c6b92-63aa-4469-b46e-29e692f3800d
📒 Files selected for processing (1)
build/Dockerfile
| RUN make build | ||
|
|
||
| FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1782191395 | ||
| FROM registry.access.redhat.com/ubi9/ubi-minimal:1785214352 |
There was a problem hiding this comment.
🔒 Security & Privacy | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -eu
printf '%s\n' '--- build/Dockerfile ---'
cat -n build/Dockerfile
printf '%s\n' '--- related image references ---'
rg -n --glob 'Dockerfile*' --glob 'Containerfile*' 'registry\.access\.redhat\.com/ubi9/ubi-minimal|FROM ' .
printf '%s\n' '--- repository guidance mentioning UBI or image tags ---'
rg -n -i 'ubi9|red hat|floating tag|container policy|base image' .github . 2>/dev/null | head -200Repository: openshift/ocm-agent
Length of output: 2553
🏁 Script executed:
#!/bin/bash
set -eu
printf '%s\n' '--- maintenance guidance ---'
sed -n '40,62p' docs/maintenance.md
printf '%s\n' '--- dependency update configuration ---'
fd -HI -t f 'dependabot|docker' .github . 2>/dev/null | sort
rg -n -C 3 'build/Dockerfile|ubi9|ubi8|docker' .github docs/maintenance.md 2>/dev/null | head -200Repository: openshift/ocm-agent
Length of output: 3792
Use a floating tag for the Red Hat base image.
Replace 1785214352 with a supported floating UBI9 minimal tag so Red Hat-managed security updates remain available.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@build/Dockerfile` at line 10, Update the base image reference in the
Dockerfile’s FROM instruction to use a supported floating UBI9 minimal tag
instead of the pinned 1785214352 tag, preserving the Red Hat UBI minimal image
source.
Source: Path instructions
|
@dependabot[bot]: all tests passed! Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #263 +/- ##
=======================================
Coverage 55.67% 55.67%
=======================================
Files 23 23
Lines 1895 1895
=======================================
Hits 1055 1055
Misses 785 785
Partials 55 55 🚀 New features to boost your workflow:
|
1 participant
Bumps ubi9/ubi-minimal from 9.8-1782191395 to 1785214352.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by CodeRabbit