From c659eea999b769892011d4d356d49f644634810c Mon Sep 17 00:00:00 2001 From: Techassi Date: Tue, 3 Nov 2026 14:41:09 +0100 Subject: [PATCH 01/11] ci: Bump actions in workflows - actions/checkout v7.0.1 - cachix/install-nix-action v31.11.3 - stackabletech/actions v0.18.3 --- .github/workflows/generate_prs.yml | 4 ++-- .github/workflows/pr_prek.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/generate_prs.yml b/.github/workflows/generate_prs.yml index 6b07cf41..f619fc7b 100644 --- a/.github/workflows/generate_prs.yml +++ b/.github/workflows/generate_prs.yml @@ -50,10 +50,10 @@ jobs: - trino-operator - zookeeper-operator steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31.11.0 + - uses: cachix/install-nix-action@75c75c31ebece974e48ebc36b4ad125bd97bd97b # v31.11.3 - name: Install Ansible env: DEBIAN_FRONTEND: noninteractive diff --git a/.github/workflows/pr_prek.yml b/.github/workflows/pr_prek.yml index a2882cd0..1fcd6afc 100644 --- a/.github/workflows/pr_prek.yml +++ b/.github/workflows/pr_prek.yml @@ -15,10 +15,10 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false fetch-depth: 0 - - uses: stackabletech/actions/run-prek@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + - uses: stackabletech/actions/run-prek@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: hadolint: ${{ env.HADOLINT_VERSION }} From 36bb2f8d9e53a0d89d2123d124b65c501e087b7a Mon Sep 17 00:00:00 2001 From: Techassi Date: Tue, 3 Nov 2026 14:41:41 +0100 Subject: [PATCH 02/11] ci: Bump Hadolint to v2.15.1 --- .github/workflows/pr_prek.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pr_prek.yml b/.github/workflows/pr_prek.yml index 1fcd6afc..4c16f2fb 100644 --- a/.github/workflows/pr_prek.yml +++ b/.github/workflows/pr_prek.yml @@ -5,7 +5,7 @@ on: pull_request: env: - HADOLINT_VERSION: "v2.14.0" + HADOLINT_VERSION: "v2.15.1" permissions: {} From f5d385bba99608c1e72b53b7b308f9912b8cbd92 Mon Sep 17 00:00:00 2001 From: Techassi Date: Tue, 3 Nov 2026 15:29:34 +0100 Subject: [PATCH 03/11] chore: Bump prek hooks - typos to v1.51.1 - markdownlint-cli to 0.50.0 - ruff-pre-commit to 0.17.3 - hadolint to 2.15.1 --- .pre-commit-config.yaml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 0837ede9..00100f01 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -6,7 +6,9 @@ default_language_version: repos: - repo: https://github.com/crate-ci/typos - rev: 00f422f3b19c57bc6338715ebfe3316d38768461 # v1.50.3 + # NOTE (@Techassi): As of 2026-11-03, 1.52.0 isn't yet available in PyPi. + # See https://github.com/crate-ci/typos/issues/1641 + rev: 7f9d0819ca1c008ade73f4b41fa9d258d48f605b # v1.51.1 hooks: - id: typos # Drop the upstream default `--write-changes` so the hook only @@ -33,7 +35,7 @@ repos: files: \.(yml|yaml)(\.j2)*$ - repo: https://github.com/igorshubovych/markdownlint-cli - rev: a4d5d37e66ebcd6b3705204a1d6dbb56dea66338 # 0.49.0 + rev: cbcdc463be5464e25e3e955a511599a67b9b987f # 0.50.0 hooks: - id: markdownlint types: [text] @@ -49,7 +51,7 @@ repos: # If you do not, you will need to delete the cached ruff binary shown in the # error message - repo: https://github.com/astral-sh/ruff-pre-commit - rev: c59bba8fb259db0fec2bbb77ad8ba51ea7341b56 # 0.15.20 + rev: 25bcf95026b96e2dd3c0aec3090c3d6ef6ca2e6c # 0.17.3 hooks: # Run the linter. - id: ruff-check @@ -64,7 +66,7 @@ repos: files: ^(template/)?\.github/workflows/.*\.ya?ml(\.j2)? - repo: https://github.com/hadolint/hadolint - rev: 57e1618d78fd469a92c1e584e8c9313024656623 # 2.14.0 + rev: 2eece55955ced00200be9729e9728cb7dacca505 # 2.15.1 hooks: - id: hadolint exclude: \.j2$ From 93702288e199ba0f75992fdc340c88a2a5c5cccd Mon Sep 17 00:00:00 2001 From: Techassi Date: Tue, 3 Nov 2026 15:31:51 +0100 Subject: [PATCH 04/11] ci(template): Bump actions in workflows - actions/checkout to v7.0.1 - stackabletech/actions to v0.18.4 - cachix/install-nix-action to v31.11.3 --- template/.github/workflows/build.yaml.j2 | 34 +++++++++---------- .../workflows/general_daily_security.yml | 4 +-- .../workflows/integration-test-custom.yaml | 6 ++-- .../workflows/integration-test-profile.yaml | 6 ++-- template/.github/workflows/pr_prek.yaml.j2 | 4 +-- 5 files changed, 27 insertions(+), 27 deletions(-) diff --git a/template/.github/workflows/build.yaml.j2 b/template/.github/workflows/build.yaml.j2 index 36450460..40e31842 100644 --- a/template/.github/workflows/build.yaml.j2 +++ b/template/.github/workflows/build.yaml.j2 @@ -43,14 +43,14 @@ jobs: contents: read steps: - name: Checkout Repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false fetch-depth: 0 - name: Check for changed files id: check - uses: stackabletech/actions/detect-changes@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/detect-changes@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: patterns: | - '.github/workflows/build.yaml' @@ -107,7 +107,7 @@ jobs: version: ubuntu-latest - name: Checkout Repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false submodules: recursive @@ -157,7 +157,7 @@ jobs: version: ${{ matrix.runner.name }} - name: Checkout Repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false submodules: recursive @@ -198,7 +198,7 @@ jobs: echo "OPERATOR_VERSION=$NEW_VERSION" | tee -a "$GITHUB_OUTPUT" - name: Install Nix - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31.11.0 + uses: cachix/install-nix-action@75c75c31ebece974e48ebc36b4ad125bd97bd97b # v31.11.3 - name: Install Rust ${{ env.RUST_TOOLCHAIN_VERSION }} Toolchain shell: bash @@ -206,7 +206,7 @@ jobs: - name: Build Container Image id: build - uses: stackabletech/actions/build-container-image@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/build-container-image@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: image-name: ${{ env.OPERATOR_NAME }} image-index-manifest-tag: ${{ steps.version.outputs.OPERATOR_VERSION }} @@ -215,7 +215,7 @@ jobs: - name: Publish Container Image to oci.stackable.tech if: ${{ !github.event.pull_request.head.repo.fork }} - uses: stackabletech/actions/publish-image@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/publish-image@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: image-registry-uri: oci.stackable.tech image-registry-username: robot$sdp+github-action-build @@ -226,7 +226,7 @@ jobs: - name: Publish Container Image to quay.io if: ${{ !github.event.pull_request.head.repo.fork }} - uses: stackabletech/actions/publish-image@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/publish-image@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: image-registry-uri: quay.io image-registry-username: stackable+robot_sdp_github_action_build @@ -251,12 +251,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Publish and Sign Image Index to oci.stackable.tech - uses: stackabletech/actions/publish-image-index-manifest@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/publish-image-index-manifest@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: image-registry-uri: oci.stackable.tech image-registry-username: robot$sdp+github-action-build @@ -265,7 +265,7 @@ jobs: canonical-image-index-manifest-tag: ${{ needs.build-container-image.outputs.operator-version }} - name: Publish and Sign Image Index to quay.io - uses: stackabletech/actions/publish-image-index-manifest@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/publish-image-index-manifest@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: image-registry-uri: quay.io image-registry-username: stackable+robot_sdp_github_action_build @@ -289,13 +289,13 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false submodules: recursive - name: Package, Publish, and Sign Helm Chart to oci.stackable.tech - uses: stackabletech/actions/publish-helm-chart@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/publish-helm-chart@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: chart-registry-uri: oci.stackable.tech chart-registry-username: robot$sdp-charts+github-action-build @@ -307,7 +307,7 @@ jobs: publish-and-sign: ${{ !github.event.pull_request.head.repo.fork }} - name: Package, Publish, and Sign Helm Chart to quay.io - uses: stackabletech/actions/publish-helm-chart@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/publish-helm-chart@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: chart-registry-uri: quay.io chart-registry-username: stackable+robot_sdp_charts_github_action_build @@ -339,13 +339,13 @@ jobs: runs-on: ubuntu-latest steps: - name: Run OpenShift Preflight Check for oci.stackable.tech - uses: stackabletech/actions/run-openshift-preflight@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/run-openshift-preflight@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: image-index-uri: oci.stackable.tech/sdp/${{ env.OPERATOR_NAME }}:${{ needs.build-container-image.outputs.operator-version }} image-architecture: ${{ matrix.arch }} - name: Run OpenShift Preflight Check for quay.io - uses: stackabletech/actions/run-openshift-preflight@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/run-openshift-preflight@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: image-index-uri: quay.io/stackable/sdp/${{ env.OPERATOR_NAME }}:${{ needs.build-container-image.outputs.operator-version }} image-architecture: ${{ matrix.arch }} @@ -432,7 +432,7 @@ jobs: echo "COMBINED_CHECKS_RESULT=$COMBINED_CHECKS_RESULT" | tee -a "$GITHUB_OUTPUT" - name: Send Notification - uses: stackabletech/actions/send-slack-notification@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/send-slack-notification@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: combined-checks-result: ${{ steps.combine.outputs.COMBINED_CHECKS_RESULT }} publish-helm-chart-result: ${{ needs.publish-helm-chart.result }} diff --git a/template/.github/workflows/general_daily_security.yml b/template/.github/workflows/general_daily_security.yml index 7a4c6fab..1d62eed2 100644 --- a/template/.github/workflows/general_daily_security.yml +++ b/template/.github/workflows/general_daily_security.yml @@ -7,7 +7,7 @@ name: Daily Security Audit on: schedule: - - cron: '15 4 * * *' + - cron: "15 4 * * *" workflow_dispatch: permissions: {} @@ -20,7 +20,7 @@ jobs: # rustsec/audit-check publishes its results as a Check run, which requires this scope checks: write steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2.0.0 diff --git a/template/.github/workflows/integration-test-custom.yaml b/template/.github/workflows/integration-test-custom.yaml index 95a687a0..8a3c9a86 100644 --- a/template/.github/workflows/integration-test-custom.yaml +++ b/template/.github/workflows/integration-test-custom.yaml @@ -23,14 +23,14 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false submodules: recursive - name: Run Integration Test id: test - uses: stackabletech/actions/run-integration-test@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/run-integration-test@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: replicated-api-token: ${{ secrets.REPLICATED_API_TOKEN }} otlp-bearer-token: ${{ secrets.OTLP_BEARER_TOKEN }} @@ -41,7 +41,7 @@ jobs: - name: Send Notification if: ${{ failure() || github.run_attempt > 1 }} - uses: stackabletech/actions/send-slack-notification@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/send-slack-notification@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: slack-token: ${{ secrets.SLACK_INTEGRATION_TEST_TOKEN }} dashboard-url: ${{ steps.test.outputs.dashboard-url }} diff --git a/template/.github/workflows/integration-test-profile.yaml b/template/.github/workflows/integration-test-profile.yaml index 4abd1f1d..a1f488c2 100644 --- a/template/.github/workflows/integration-test-profile.yaml +++ b/template/.github/workflows/integration-test-profile.yaml @@ -22,7 +22,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false submodules: recursive @@ -42,7 +42,7 @@ jobs: - name: Run Integration Test id: test - uses: stackabletech/actions/run-integration-test@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/run-integration-test@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: replicated-api-token: ${{ secrets.REPLICATED_API_TOKEN }} otlp-bearer-token: ${{ secrets.OTLP_BEARER_TOKEN }} @@ -51,7 +51,7 @@ jobs: - name: Send Notification if: ${{ failure() || github.run_attempt > 1 }} - uses: stackabletech/actions/send-slack-notification@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + uses: stackabletech/actions/send-slack-notification@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: slack-token: ${{ secrets.SLACK_INTEGRATION_TEST_TOKEN }} dashboard-url: ${{ steps.test.outputs.dashboard-url }} diff --git a/template/.github/workflows/pr_prek.yaml.j2 b/template/.github/workflows/pr_prek.yaml.j2 index 2acce014..bc1a9257 100644 --- a/template/.github/workflows/pr_prek.yaml.j2 +++ b/template/.github/workflows/pr_prek.yaml.j2 @@ -27,12 +27,12 @@ jobs: with: packages: protobuf-compiler krb5-user libkrb5-dev libclang-dev liblzma-dev libssl-dev pkg-config apt-transport-https version: ubuntu-latest - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false submodules: recursive fetch-depth: 0 - - uses: stackabletech/actions/run-prek@34a64229959b15db6c5f307db8809805ba7edc55 # v0.18.3 + - uses: stackabletech/actions/run-prek@d5c85b3cef351617f19de803812b42b839e20168 # v0.18.4 with: rust: ${{ env.RUST_TOOLCHAIN_VERSION }} hadolint: ${{ env.HADOLINT_VERSION }} From 269a01a20ea9fbe7602bf4b561ab7ee87d3c4af7 Mon Sep 17 00:00:00 2001 From: Techassi Date: Tue, 3 Nov 2026 15:33:51 +0100 Subject: [PATCH 05/11] chore: Bump prek hooks - typos to v1.51.1 - markdownlint-cli to 0.50.0 - ruff-pre-commit to 0.17.3 - hadolint to 2.15.1 --- template/.pre-commit-config.yaml.j2 | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/template/.pre-commit-config.yaml.j2 b/template/.pre-commit-config.yaml.j2 index 9f0db8ce..eb972f22 100644 --- a/template/.pre-commit-config.yaml.j2 +++ b/template/.pre-commit-config.yaml.j2 @@ -11,7 +11,9 @@ repos: # typos has no layered configuration (https://github.com/crate-ci/typos/issues/193). # A templated config can currently not be extended locally. - repo: https://github.com/crate-ci/typos - rev: 00f422f3b19c57bc6338715ebfe3316d38768461 # v1.50.3 + # NOTE (@Techassi): As of 2026-11-03, 1.52.0 isn't yet available in PyPi. + # See https://github.com/crate-ci/typos/issues/1641 + rev: 7f9d0819ca1c008ade73f4b41fa9d258d48f605b # v1.51.1 hooks: - id: typos # Drop the upstream default `--write-changes` so the hook only @@ -42,7 +44,7 @@ repos: args: ["--strict"] - repo: https://github.com/igorshubovych/markdownlint-cli - rev: a4d5d37e66ebcd6b3705204a1d6dbb56dea66338 # 0.49.0 + rev: cbcdc463be5464e25e3e955a511599a67b9b987f # 0.50.0 hooks: - id: markdownlint types: [text] @@ -62,7 +64,7 @@ repos: # If you do not, you will need to delete the cached ruff binary shown in the # error message - repo: https://github.com/astral-sh/ruff-pre-commit - rev: c59bba8fb259db0fec2bbb77ad8ba51ea7341b56 # 0.15.20 + rev: 25bcf95026b96e2dd3c0aec3090c3d6ef6ca2e6c # 0.17.3 hooks: # Run the linter. - id: ruff-check @@ -75,7 +77,7 @@ repos: - id: actionlint - repo: https://github.com/hadolint/hadolint - rev: 57e1618d78fd469a92c1e584e8c9313024656623 # 2.14.0 + rev: 2eece55955ced00200be9729e9728cb7dacca505 # 2.15.1 hooks: - id: hadolint From be92b7b973526b49e48e1e5aa8b8693227171b4b Mon Sep 17 00:00:00 2001 From: Techassi Date: Tue, 3 Nov 2026 15:47:24 +0100 Subject: [PATCH 06/11] chore(template): Bump Rust toolchain to 1.99.0 --- config/versions.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/versions.yaml b/config/versions.yaml index 9897b0e6..02a39762 100644 --- a/config/versions.yaml +++ b/config/versions.yaml @@ -2,7 +2,7 @@ # IMPORTANT # If you change the Rust toolchain version here, make sure to also change # docker-images/ubi10-rust-builder/Dockerfile -rust_version: 1.97.1 +rust_version: 1.99.0 # This nightly version is only used for cargo fmt invocations, because we use nightly-only # rustfmt config options in rustfmt.toml. The version should be kept in line with the version From 6770cd0c30d85618dcf36d805b92081f133500ef Mon Sep 17 00:00:00 2001 From: Techassi Date: Tue, 3 Nov 2026 15:47:48 +0100 Subject: [PATCH 07/11] chore(template): Bump nightly Rust toolchain to nightly-2026-11-02 --- config/versions.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/versions.yaml b/config/versions.yaml index 02a39762..f5a19700 100644 --- a/config/versions.yaml +++ b/config/versions.yaml @@ -7,7 +7,7 @@ rust_version: 1.99.0 # This nightly version is only used for cargo fmt invocations, because we use nightly-only # rustfmt config options in rustfmt.toml. The version should be kept in line with the version # used in the operator-rs repository. -rust_nightly_version: nightly-2026-08-23 +rust_nightly_version: nightly-2026-11-02 # This edition is mostly used for rustfmt commands and the rustfmt config file. The edition should # be kept in line with the edition in the operator-rs repository. From 7be4def0c269c09704fdbf59afdaab464be3ee66 Mon Sep 17 00:00:00 2001 From: Techassi Date: Tue, 3 Nov 2026 15:48:14 +0100 Subject: [PATCH 08/11] chore(template): Bump Hadolint to v2.15.1 --- config/versions.yaml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/config/versions.yaml b/config/versions.yaml index f5a19700..34488c82 100644 --- a/config/versions.yaml +++ b/config/versions.yaml @@ -16,8 +16,11 @@ rust_edition: 2024 # IMPORTANT # If you change the Hadolint version here, make sure to also change the hook # refs in the local and templated .pre-commit-config.yaml files. -# And due to a bug you also need to update the version in .github/workflows/pr_pre_commit.yml -hadolint_version: v2.14.0 +# See https://github.com/hadolint/hadolint/releases for the latest release. +# +# And due to a bug you also need to update the version in .github/workflows/pr_prek.yaml +# See https://github.com/hadolint/hadolint/issues/886. +hadolint_version: v2.15.1 # IMPORTANT # If you change the Python version here, make sure to also change it in From 4ea858151a6418748fcdce54b55785a85e69cf9d Mon Sep 17 00:00:00 2001 From: Techassi Date: Tue, 3 Nov 2026 15:48:54 +0100 Subject: [PATCH 09/11] chore(template): Bump nix version to 2.35.4 --- config/versions.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/versions.yaml b/config/versions.yaml index 34488c82..32ac54a5 100644 --- a/config/versions.yaml +++ b/config/versions.yaml @@ -32,7 +32,7 @@ python_version: 3.14 # https://github.com/NixOS/nix/tags # Usually the latest version should just work and as such the version here can # be bumped without any constraints. -nix_pkg_manager_version: 2.33.3 +nix_pkg_manager_version: 2.35.4 # Check https://pypi.org/project/jinja2-cli/#history for updates jinja2_cli_version: 1.0.0 From 63312db0df486285709efe709f41733c27fa7552 Mon Sep 17 00:00:00 2001 From: Techassi Date: Tue, 3 Nov 2026 15:49:28 +0100 Subject: [PATCH 10/11] chore(template): Bump Jinja2 CLI to 1.0.1 --- config/versions.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/versions.yaml b/config/versions.yaml index 32ac54a5..bbcaed87 100644 --- a/config/versions.yaml +++ b/config/versions.yaml @@ -35,4 +35,4 @@ python_version: 3.14 nix_pkg_manager_version: 2.35.4 # Check https://pypi.org/project/jinja2-cli/#history for updates -jinja2_cli_version: 1.0.0 +jinja2_cli_version: 1.0.1 From 7e7f2bcb0bd48d42cfa939f433c9eeaed2472b9f Mon Sep 17 00:00:00 2001 From: Techassi Date: Tue, 3 Nov 2026 15:52:46 +0100 Subject: [PATCH 11/11] chore(template): Run niv update --- template/nix/sources.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/template/nix/sources.json b/template/nix/sources.json index 150ec884..bf17112d 100644 --- a/template/nix/sources.json +++ b/template/nix/sources.json @@ -17,10 +17,10 @@ "homepage": "", "owner": "kolloch", "repo": "crate2nix", - "rev": "5e1ecfd2d15b34ec90c2e51fdffbe8116595a767", - "sha256": "1kgzi3r7714v957w2qnisc9axlrymrqaz5qqclzay1d83jzzp7nv", + "rev": "1cb60331b14f15dad145dbd4e207c1ec110e5675", + "sha256": "07sj81qdn4bg7sabmyghj0ihyd4vh90xj84v3nx0csbvl306nqsb", "type": "tarball", - "url": "https://github.com/kolloch/crate2nix/archive/5e1ecfd2d15b34ec90c2e51fdffbe8116595a767.tar.gz", + "url": "https://github.com/kolloch/crate2nix/archive/1cb60331b14f15dad145dbd4e207c1ec110e5675.tar.gz", "url_template": "https://github.com///archive/.tar.gz" }, "nixpkgs": { @@ -29,10 +29,10 @@ "homepage": "", "owner": "NixOS", "repo": "nixpkgs", - "rev": "f205b5574fd0cb7da5b702a2da51507b7f4fdd1b", - "sha256": "0jx39hv3n59r7rkwyaz5qiz8dl15bvcylva06f6y2yrg5c6j9l7w", + "rev": "9a6cbf4722bdbbef65f9e0400452ca088e31dc4b", + "sha256": "1cq7zs9z66apmm0ld0kcfvcqrhk6dh3gbd8570r0drbcgkpgvf9j", "type": "tarball", - "url": "https://github.com/NixOS/nixpkgs/archive/f205b5574fd0cb7da5b702a2da51507b7f4fdd1b.tar.gz", + "url": "https://github.com/NixOS/nixpkgs/archive/9a6cbf4722bdbbef65f9e0400452ca088e31dc4b.tar.gz", "url_template": "https://github.com///archive/.tar.gz" } }