From d91739bbb77a20c06e85fb3dee410cd01fad9c9a Mon Sep 17 00:00:00 2001 From: Gianluca Mardente Date: Tue, 28 Jul 2026 22:41:10 +0200 Subject: [PATCH] chore: Resolve pinned dependencies --- .github/workflows/main.yaml | 105 ---------------------------------- Dockerfile | 2 +- Dockerfile.enterprise | 2 +- Dockerfile_WithGit | 4 +- Dockerfile_WithGit.enterprise | 4 +- go.mod | 2 +- go.sum | 4 +- renovate.json | 1 + 8 files changed, 10 insertions(+), 114 deletions(-) diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml index e4d1b183..4fc5d261 100644 --- a/.github/workflows/main.yaml +++ b/.github/workflows/main.yaml @@ -50,21 +50,6 @@ jobs: uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: 1.26.5 - - name: Free Disk Space (Ubuntu) - uses: jlumbroso/free-disk-space@main - with: - # this might remove tools that are actually needed, - # if set to "true" but frees about 6 GB - tool-cache: false - - # all of these default to true, but feel free to set to - # "false" if necessary for your workflow - android: true - dotnet: true - haskell: true - large-packages: true - docker-images: true - swap-storage: true - name: fv run: make create-cluster fv env: @@ -78,21 +63,6 @@ jobs: uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: 1.26.5 - - name: Free Disk Space (Ubuntu) - uses: jlumbroso/free-disk-space@main - with: - # this might remove tools that are actually needed, - # if set to "true" but frees about 6 GB - tool-cache: false - - # all of these default to true, but feel free to set to - # "false" if necessary for your workflow - android: true - dotnet: true - haskell: true - large-packages: true - docker-images: true - swap-storage: true - name: fv run: make create-cluster new-fv env: @@ -106,21 +76,6 @@ jobs: uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: 1.26.5 - - name: Free Disk Space (Ubuntu) - uses: jlumbroso/free-disk-space@main - with: - # this might remove tools that are actually needed, - # if set to "true" but frees about 6 GB - tool-cache: false - - # all of these default to true, but feel free to set to - # "false" if necessary for your workflow - android: true - dotnet: true - haskell: true - large-packages: true - docker-images: true - swap-storage: true - name: fv-sharding run: make create-cluster fv-sharding env: @@ -134,21 +89,6 @@ jobs: uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: 1.26.5 - - name: Free Disk Space (Ubuntu) - uses: jlumbroso/free-disk-space@main - with: - # this might remove tools that are actually needed, - # if set to "true" but frees about 6 GB - tool-cache: false - - # all of these default to true, but feel free to set to - # "false" if necessary for your workflow - android: true - dotnet: true - haskell: true - large-packages: true - docker-images: true - swap-storage: true - name: fv-agentless run: make create-cluster fv-agentless env: @@ -162,21 +102,6 @@ jobs: uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: 1.26.5 - - name: Free Disk Space (Ubuntu) - uses: jlumbroso/free-disk-space@main - with: - # this might remove tools that are actually needed, - # if set to "true" but frees about 6 GB - tool-cache: false - - # all of these default to true, but feel free to set to - # "false" if necessary for your workflow - android: true - dotnet: true - haskell: true - large-packages: true - docker-images: true - swap-storage: true - name: fv-pullmode run: make create-cluster-pullmode fv-pullmode env: @@ -190,21 +115,6 @@ jobs: uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: 1.26.5 - - name: Free Disk Space (Ubuntu) - uses: jlumbroso/free-disk-space@main - with: - # this might remove tools that are actually needed, - # if set to "true" but frees about 6 GB - tool-cache: false - - # all of these default to true, but feel free to set to - # "false" if necessary for your workflow - android: true - dotnet: true - haskell: true - large-packages: true - docker-images: true - swap-storage: true - name: new-fv-pullmode run: make create-cluster-pullmode new-fv-pullmode env: @@ -218,21 +128,6 @@ jobs: uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: 1.26.5 - - name: Free Disk Space (Ubuntu) - uses: jlumbroso/free-disk-space@main - with: - # this might remove tools that are actually needed, - # if set to "true" but frees about 6 GB - tool-cache: false - - # all of these default to true, but feel free to set to - # "false" if necessary for your workflow - android: true - dotnet: true - haskell: true - large-packages: true - docker-images: true - swap-storage: true - name: fv run: make create-cluster-infra fv-namespace env: diff --git a/Dockerfile b/Dockerfile index 497dfb1a..1698994c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ # Build the manager binary -FROM golang:1.26.5 AS builder +FROM golang:1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 AS builder ARG BUILDOS ARG TARGETARCH diff --git a/Dockerfile.enterprise b/Dockerfile.enterprise index caf50610..ab8b6dda 100644 --- a/Dockerfile.enterprise +++ b/Dockerfile.enterprise @@ -1,7 +1,7 @@ # syntax=docker/dockerfile:1.4 # Build the manager binary (Enterprise build - links in the private sveltos-enterprise module) -FROM golang:1.26.5 AS builder +FROM golang:1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 AS builder ARG BUILDOS ARG TARGETARCH diff --git a/Dockerfile_WithGit b/Dockerfile_WithGit index 40a39939..b8418be3 100644 --- a/Dockerfile_WithGit +++ b/Dockerfile_WithGit @@ -1,5 +1,5 @@ # Build the manager binary -FROM golang:1.26.5 AS builder +FROM golang:1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 AS builder ARG BUILDOS ARG TARGETARCH @@ -25,7 +25,7 @@ COPY internal/ internal/ RUN CGO_ENABLED=0 GOOS=$BUILDOS GOARCH=$TARGETARCH go build -a -o manager cmd/main.go # This is needed to support kustomization that points to a oci/git repo that utilizes remote kustomization references. -FROM alpine +FROM alpine:3.23.5 ARG GIT_VERSION=unknown diff --git a/Dockerfile_WithGit.enterprise b/Dockerfile_WithGit.enterprise index 4d529f11..333cb904 100644 --- a/Dockerfile_WithGit.enterprise +++ b/Dockerfile_WithGit.enterprise @@ -1,7 +1,7 @@ # syntax=docker/dockerfile:1.4 # Build the manager binary (Enterprise build - links in the private sveltos-enterprise module) -FROM golang:1.26.5 AS builder +FROM golang:1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 AS builder ARG BUILDOS ARG TARGETARCH @@ -31,7 +31,7 @@ COPY internal/ internal/ RUN CGO_ENABLED=0 GOOS=$BUILDOS GOARCH=$TARGETARCH go build -tags enterprise -a -o manager cmd/main.go # This is needed to support kustomization that points to a oci/git repo that utilizes remote kustomization references. -FROM alpine +FROM alpine:3.23.5 ARG GIT_VERSION=unknown diff --git a/go.mod b/go.mod index 214b1b62..6f7e5c38 100644 --- a/go.mod +++ b/go.mod @@ -288,7 +288,7 @@ require ( gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa // indirect - google.golang.org/grpc v1.82.0 // indirect + google.golang.org/grpc v1.82.1 // indirect google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect diff --git a/go.sum b/go.sum index 5e7a7234..90fc7dfe 100644 --- a/go.sum +++ b/go.sum @@ -1042,8 +1042,8 @@ google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZi google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg= google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY= google.golang.org/grpc v1.31.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak= -google.golang.org/grpc v1.82.0 h1:vguDnZUPjE26w09A63VoxZPnvPjB5Riyc0mkXPFmAIU= -google.golang.org/grpc v1.82.0/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA= +google.golang.org/grpc v1.82.1 h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE= +google.golang.org/grpc v1.82.1/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA= google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8= google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0= google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM= diff --git a/renovate.json b/renovate.json index a85e67ea..ca81570c 100644 --- a/renovate.json +++ b/renovate.json @@ -5,6 +5,7 @@ "prConcurrentLimit": 0, "branchConcurrentLimit": 0, "ignorePaths": ["**/test/**"], + "ignoreDeps": ["github.com/projectsveltos/sveltos-enterprise"], "sveltos": { "fileMatch": ["^.*\\.yaml$"] }