From bbd43beb9f1bd90ad17952ab5094ea7c8f285bef Mon Sep 17 00:00:00 2001 From: Conrad Date: Tue, 8 Sep 2026 16:05:59 -0400 Subject: [PATCH] Re-pin bigBedToBed to the UCSC build published 2026-08-20 UCSC replaced the binary at the rolling linux.x86_64 URL on Aug 20 (Last-Modified 2026-08-20 01:29 UTC), so the pinned sha256 no longer matches and every image build since has failed at the checksum guard, blocking master deploys. Verified the new binary (fetched over HTTPS from hgdownload.soe.ucsc.edu; ordinary dynamically-linked x86-64 ELF) and updated the pin in both images. --- Dockerfile.api | 2 +- Dockerfile.wool | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile.api b/Dockerfile.api index d72f5ae..70e425f 100644 --- a/Dockerfile.api +++ b/Dockerfile.api @@ -41,7 +41,7 @@ WORKDIR /app # UCSC ships a new build the layer rebuilds with the new hash after # maintainers re-verify out-of-band. Updating: download the binary, # run ``sha256sum``, paste here. -ARG UCSC_BIGBEDTOBED_SHA256=9d1ea2158f5aa958fd8820fb7a2e5fb0947a9da7b183b8f9237429b8fbacd386 +ARG UCSC_BIGBEDTOBED_SHA256=f69501853a8966afce2d473ae2185e682173ba43c252eb754a564f962eba5afb # sha256 of the AWS RDS combined CA bundle this image embeds. AWS # rotates ``global-bundle.pem`` periodically (next-public rotations are diff --git a/Dockerfile.wool b/Dockerfile.wool index 07f29f2..716948b 100644 --- a/Dockerfile.wool +++ b/Dockerfile.wool @@ -52,7 +52,7 @@ WORKDIR /app # lockstep with Dockerfile.api. When UCSC ships a new build the layer # rebuilds with the new hash after maintainers re-verify out-of-band. # Updating: download the binary, run ``sha256sum``, paste here. -ARG UCSC_BIGBEDTOBED_SHA256=9d1ea2158f5aa958fd8820fb7a2e5fb0947a9da7b183b8f9237429b8fbacd386 +ARG UCSC_BIGBEDTOBED_SHA256=f69501853a8966afce2d473ae2185e682173ba43c252eb754a564f962eba5afb # Install curl (for the container/ECS health check) and the bioinformatics # tools the workflow subsystem shells out to. samtools/tabix/bcftools/