Skip to content

Conversation

red-hat-konflux[bot]
Copy link

This PR contains the following updates:

Package Type Update Change
registry.access.redhat.com/ubi9/ubi stage minor 9.5 -> 9.6-1755678605

Configuration

📅 Schedule: Branch creation - "before 5am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

mythi and others added 30 commits February 11, 2025 13:20
While testing on an environment as close as possible to the Kata
Containers CI, I've noticed that we need to build ITA based on nodeport
in order to get it working as expected there.

The tests I ran earlier, in a different environment, already had this
based on nodeport, but I didn't realise it while reviewing bdaa4b2.

Signed-off-by: Fabiano Fidêncio <[email protected]>
Bumps [libloading](https://github.com/nagisa/rust_libloading) from 0.8.3 to 0.8.5.
- [Commits](nagisa/rust_libloading@0.8.3...0.8.5)

---
updated-dependencies:
- dependency-name: libloading
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [scientific](https://github.com/alexkazik/scientific) from 0.5.2 to 0.5.3.
- [Commits](https://github.com/alexkazik/scientific/commits)

---
updated-dependencies:
- dependency-name: scientific
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
- fix the ITA kbs docker image pushing
- add latest tag for released images

Signed-off-by: Xynnn007 <[email protected]>
Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.1.12 to 1.1.19.
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.1.12...cc-v1.1.19)

---
updated-dependencies:
- dependency-name: cc
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [autocfg](https://github.com/cuviper/autocfg) from 1.2.0 to 1.3.0.
- [Commits](cuviper/autocfg@1.2.0...1.3.0)

---
updated-dependencies:
- dependency-name: autocfg
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Pawel Proskurnicki <[email protected]>
Signed-off-by: Xynnn007 <[email protected]>
Bumps [unicode-width](https://github.com/unicode-rs/unicode-width) from 0.1.12 to 0.1.14.
- [Commits](unicode-rs/unicode-width@v0.1.12...v0.1.14)

---
updated-dependencies:
- dependency-name: unicode-width
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [native-tls](https://github.com/sfackler/rust-native-tls) from 0.2.11 to 0.2.12.
- [Release notes](https://github.com/sfackler/rust-native-tls/releases)
- [Changelog](https://github.com/sfackler/rust-native-tls/blob/master/CHANGELOG.md)
- [Commits](sfackler/rust-native-tls@v0.2.11...v0.2.12)

---
updated-dependencies:
- dependency-name: native-tls
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [k256](https://github.com/RustCrypto/elliptic-curves) from 0.13.3 to 0.13.4.
- [Commits](RustCrypto/elliptic-curves@k256/v0.13.3...k256/v0.13.4)

---
updated-dependencies:
- dependency-name: k256
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Updated Attestation Token Configuration section in documentation which describes supported trusted_certs_paths values:

- Local PEM file
- Valid URL (local and remote) pointing to JWKSet

Signed-off-by: Pawel Proskurnicki <[email protected]>
USER_AGENT missing was noticed being missing in a review. Add an identity
for "Coco trustee kbs" originated requests.

Signed-off-by: Mikko Ylinen <[email protected]>
Jwk was recently added as a new Attestation Token Verifier
type. Update attestation_token_config documentation accordingly.

Signed-off-by: Mikko Ylinen <[email protected]>
With the latest bump in the upload/download github actions, there has
been a change we need to accomodate. we need to specify the artifacts in
a single workflow run:

https://github.com/actions/upload-artifact?tab=readme-ov-file#breaking-changes

Signed-off-by: Magnus Kulke <[email protected]>
The current "s390x" overlay support is currently very SE specific,
whereas deploying on non-SE s390x with the sample KBS is still
an important scenario for our testing without specialised hardware.

This scenario deployment matches the x86_64 deployment scenario,
so let's go back to having a standard deployment, with a special
case for ibm-se rather to reduce duplication.

Update the documentation to clarify when and where `IBM_SE_CREDS_DIR`
is needed.

Signed-off-by: stevenhorsman <[email protected]>
For doctests, there is no keyword `no-run`.
Doctests recognizes `no_run`, but this still compiles the code,
which will fail in this case.

We could fixup these examples with some hidden lines so that they
compile, but since we don't really use rustdoc currently, let's
just have the compiler ignore these examples.

Signed-off-by: Tobin Feldman-Fitzthum <[email protected]>
Bumps [security-framework](https://github.com/kornelski/rust-security-framework) from 2.10.0 to 2.11.0.
- [Release notes](https://github.com/kornelski/rust-security-framework/releases)
- [Commits](kornelski/rust-security-framework@v2.10.0...v2.11.0)

---
updated-dependencies:
- dependency-name: security-framework
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
In confidential-containers#521 I re-worked the deploy-kbs script with overlays and didn't factor in
that the key.bin needed to go to a different place for ibm-se, so it was causing:
```
trustee/kbs/config/kubernetes$ ls overlays/key.bin
ls: cannot access 'overlays/key.bin': No such file or directory
```
on an SE system.

I think the least bad way to resolve this is to move the ibm-se logic
up before the key.bin check and rely on the updated `DEPLOYMENT_DIR`

Also update the deployment doc instructions to add the ibm-se case

Signed-off-by: stevenhorsman <[email protected]>
Bumps [quinn](https://github.com/quinn-rs/quinn) from 0.11.3 to 0.11.5.
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-0.11.3...quinn-0.11.5)

---
updated-dependencies:
- dependency-name: quinn
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [superboring](https://github.com/jedisct1/rust-superboring) from 0.1.2 to 0.1.3.
- [Release notes](https://github.com/jedisct1/rust-superboring/releases)
- [Commits](jedisct1/rust-superboring@0.1.2...0.1.3)

---
updated-dependencies:
- dependency-name: superboring
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) from 1 to 2.
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](lycheeverse/lychee-action@v1...v2)

---
updated-dependencies:
- dependency-name: lycheeverse/lychee-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [serde_spanned](https://github.com/toml-rs/toml) from 0.6.7 to 0.6.8.
- [Commits](toml-rs/toml@serde_spanned-v0.6.7...serde_spanned-v0.6.8)

---
updated-dependencies:
- dependency-name: serde_spanned
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.12.5 to 0.12.8.
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.5...v0.12.8)

---
updated-dependencies:
- dependency-name: reqwest
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
red-hat-konflux bot and others added 24 commits July 12, 2025 09:33
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: Leonardo Milleri <[email protected]>
Update onpush pipeline for s390x build
Signed-off-by: Leonardo Milleri <[email protected]>
Signed-off-by: Leonardo Milleri <[email protected]>
Fix trustee onpush output image
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
chore(deps): update konflux references
…temslib to v0.9.1

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
…om-secure-systems-lab-go-securesystemslib-0.x

chore(deps): update module github.com/secure-systems-lab/go-securesystemslib to v0.9.1
…o-library-rust-1.x

chore(deps): update docker.io/library/rust docker tag to v1.89.0
chore(deps): update dependency go to v1.24.6
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
…rg-x-sys-0.x

chore(deps): update module golang.org/x/sys to v0.35.0
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
…rg-x-crypto-0.x

chore(deps): update module golang.org/x/crypto to v0.41.0
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
… v9.6-1755678605

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@lmilleri lmilleri force-pushed the main branch 2 times, most recently from ebd88b8 to 88b526b Compare August 26, 2025 10:57
Copy link
Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@openshift-merge-robot openshift-merge-robot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Aug 26, 2025
@openshift-merge-robot
Copy link

PR needs rebase.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD.

Projects

None yet

Development

Successfully merging this pull request may close these issues.