Skip to content

[release-1.4] NO-ISSUE: Refresh Red Hat base images and align Go dependencies - #878

Draft
celdrake wants to merge 1 commit into
flightctl:release-1.4from
celdrake:refresh-base-images-v1.4
Draft

celdrake wants to merge 1 commit into
flightctl:release-1.4from
celdrake:refresh-base-images-v1.4

Conversation

@celdrake

@celdrake celdrake commented Nov 4, 2026

Copy link
Copy Markdown
Collaborator

Update all pinned Red Hat base image tags to current catalog releases:

Builder images:

  • ubi9/go-toolset: 1.26.7-1787774815 -> 1.26.10-1793621864
  • ubi10/go-toolset: 1.26.7-1787775323 -> 1.26.10-1793622842

Node.js builder images (pinned from :latest to exact tags):

  • ubi9/nodejs-22-minimal: latest -> 9.8-1793616223
  • ubi10/nodejs-22-minimal: latest -> 10.2-1793210640

Go toolchain directive: go1.26.7 -> go1.26.10

Align shared Go module dependencies with flightctl core baseline:

  • lestrrat-go/jwx/v2: v2.1.4 -> v2.1.0
  • decred/secp256k1/v4: v4.4.0 -> v4.3.0 (indirect)
  • lestrrat-go/httprc: v1.0.6 -> v1.0.5 (indirect)
  • kin-openapi: retained at v0.149.0 (matching core; fixes GHSA-74vm-87hj-r66f, GHSA-vrcc-3ch7-hppw, GHSA-g8cf-rcjf-c8cf)
  • jsonschema/v6: v6.0.2 -> v6.0.3 (transitive from kin-openapi v0.149.0)

Proxy build and tests verified passing with aligned dependencies.

(cherry picked from commit 2e262f5) Made-with: Cursor

…core (flightctl#874)

Update all pinned Red Hat base image tags to current catalog releases:

Builder images:
- ubi9/go-toolset: 1.26.7-1787774815 -> 1.26.10-1793621864
- ubi10/go-toolset: 1.26.7-1787775323 -> 1.26.10-1793622842

Node.js builder images (pinned from :latest to exact tags):
- ubi9/nodejs-22-minimal: latest -> 9.8-1793616223
- ubi10/nodejs-22-minimal: latest -> 10.2-1793210640

Go toolchain directive: go1.26.7 -> go1.26.10

Align shared Go module dependencies with flightctl core baseline:
- lestrrat-go/jwx/v2: v2.1.4 -> v2.1.0
- decred/secp256k1/v4: v4.4.0 -> v4.3.0 (indirect)
- lestrrat-go/httprc: v1.0.6 -> v1.0.5 (indirect)
- kin-openapi: retained at v0.149.0 (matching core; fixes
  GHSA-74vm-87hj-r66f, GHSA-vrcc-3ch7-hppw, GHSA-g8cf-rcjf-c8cf)
- jsonschema/v6: v6.0.2 -> v6.0.3 (transitive from kin-openapi v0.149.0)

Proxy build and tests verified passing with aligned dependencies.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
(cherry picked from commit 2e262f5)
Made-with: Cursor
@coderabbitai

coderabbitai Bot commented Nov 4, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

🗂️ Base branches to auto review: 1
  • main

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review

@celdrake

celdrake commented Nov 4, 2026

Copy link
Copy Markdown
Collaborator Author

Keeping as Draft. Will be part of 1.4.1, not 1.4.0-rc4

@celdrake
celdrake marked this pull request as draft November 4, 2026 14:48
@celdrake celdrake changed the title NO-ISSUE: Refresh Red Hat base images and align Go dependencies [release-1.4] NO-ISSUE: Refresh Red Hat base images and align Go dependencies Nov 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants