Skip to content

chore(deps): bump distroless/cc-debian13 from d97bc0a to a77defd in /release/docker in the docker-images group across 1 directory #823

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump distroless/cc-debian13 from d97bc0a to a77defd in /release/docker in the docker-images group across 1 directory #823

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion release/docker/Dockerfile.discovery
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ RUN --mount=type=bind,source=dist/image-bin,target=/workspace/image-bin \
&& install -m 0644 /workspace/LICENSE /workspace/runtime-root/licenses/discovery/LICENSE \
&& find /workspace/runtime-root -exec touch -h --date="@${SOURCE_DATE_EPOCH}" {} +

FROM gcr.io/distroless/cc-debian13:nonroot@sha256:d97bc0a941b8d4be647dc0ee75b264ddbb772f1ac5ba690a4309c00723b23775 AS runtime
FROM gcr.io/distroless/cc-debian13:nonroot@sha256:a77defd6fedbb3392b175ba8ea3d1c22be963c1597c248c3ba987ddd80bfb512 AS runtime

@chatgpt-codex-connector chatgpt-codex-connector Bot Aug 26, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep the enforced Distroless digest in sync

With any of these new FROM lines, the required Check Debian 13 image contract CI step fails because release/scripts/check-debian13-images.py:21-24 still defines DISTROLESS_RUNTIME with the old d97bc0a... digest and requires that exact reference for every release Dockerfile. Running the checker on this commit reports all four changed files as missing the required runtime (and causes cascading stage-shape failures), so the canonical constant and other maintained surfaces such as docker/Dockerfile need to be updated together with this bump.

Useful? React with 👍 / 👎.


LABEL org.registrystack.runtime.uid="65532" \
org.registrystack.runtime.gid="65532"
Expand Down
2 changes: 1 addition & 1 deletion release/docker/Dockerfile.evidence
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ RUN --mount=type=bind,source=dist/image-bin,target=/workspace/image-bin \
&& chmod 0700 /workspace/runtime-root/var/lib/registry-evidence/audit \
&& find /workspace/runtime-root -exec touch -h --date="@${SOURCE_DATE_EPOCH}" {} +

FROM gcr.io/distroless/cc-debian13:nonroot@sha256:d97bc0a941b8d4be647dc0ee75b264ddbb772f1ac5ba690a4309c00723b23775 AS runtime
FROM gcr.io/distroless/cc-debian13:nonroot@sha256:a77defd6fedbb3392b175ba8ea3d1c22be963c1597c248c3ba987ddd80bfb512 AS runtime

LABEL org.registrystack.runtime.uid="65532" \
org.registrystack.runtime.gid="65532"
Expand Down
2 changes: 1 addition & 1 deletion release/docker/Dockerfile.mint
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ RUN --mount=type=bind,source=dist/image-bin,target=/workspace/image-bin \
&& chmod 0700 /workspace/runtime-root/var/lib/registry-mint/audit \
&& find /workspace/runtime-root -exec touch -h --date="@${SOURCE_DATE_EPOCH}" {} +

FROM gcr.io/distroless/cc-debian13:nonroot@sha256:d97bc0a941b8d4be647dc0ee75b264ddbb772f1ac5ba690a4309c00723b23775 AS runtime
FROM gcr.io/distroless/cc-debian13:nonroot@sha256:a77defd6fedbb3392b175ba8ea3d1c22be963c1597c248c3ba987ddd80bfb512 AS runtime

LABEL org.registrystack.runtime.uid="65532" \
org.registrystack.runtime.gid="65532"
Expand Down
2 changes: 1 addition & 1 deletion release/docker/Dockerfile.relay
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ RUN --mount=type=bind,source=dist/image-bin,target=/workspace/image-bin \
&& chmod 0700 /workspace/runtime-root/var/lib/relay/audit \
&& find /workspace/runtime-root -exec touch -h --date="@${SOURCE_DATE_EPOCH}" {} +

FROM gcr.io/distroless/cc-debian13:nonroot@sha256:d97bc0a941b8d4be647dc0ee75b264ddbb772f1ac5ba690a4309c00723b23775 AS runtime
FROM gcr.io/distroless/cc-debian13:nonroot@sha256:a77defd6fedbb3392b175ba8ea3d1c22be963c1597c248c3ba987ddd80bfb512 AS runtime

LABEL org.registrystack.runtime.uid="65532" \
org.registrystack.runtime.gid="65532"
Expand Down
Loading