From 6eb1c986b71d4471259028173611063a86073cdb Mon Sep 17 00:00:00 2001 From: Tom Hayward Date: Thu, 2 Feb 2023 14:03:54 -0800 Subject: [PATCH 1/3] use Dependabot to keep base image up to date --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..c337aa6 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,10 @@ +version: 2 +updates: +- package-ecosystem: docker + directory: "/" + schedule: + interval: daily +- package-ecosystem: github-actions + directory: "/" + schedule: + interval: daily From ee1d06d94b985b52293c2079891231bea234f16f Mon Sep 17 00:00:00 2001 From: Tom Hayward Date: Thu, 2 Feb 2023 14:05:46 -0800 Subject: [PATCH 2/3] Auto-approve Dependabot PRs --- .github/workflows/dependabot.yaml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 .github/workflows/dependabot.yaml diff --git a/.github/workflows/dependabot.yaml b/.github/workflows/dependabot.yaml new file mode 100644 index 0000000..baea253 --- /dev/null +++ b/.github/workflows/dependabot.yaml @@ -0,0 +1,27 @@ +name: Dependabot auto-merge +on: pull_request + +permissions: + pull-requests: write + contents: write + +jobs: + dependabot: + runs-on: ubuntu-latest + if: ${{ github.actor == 'dependabot[bot]' }} + steps: + - name: Dependabot metadata + id: metadata + uses: dependabot/fetch-metadata@v1.3.6 + with: + github-token: "${{ secrets.GITHUB_TOKEN }}" + - name: Enable auto-merge for all Dependabot PRs + run: gh pr merge --auto --squash "$PR_URL" + env: + PR_URL: ${{github.event.pull_request.html_url}} + GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} + - name: Auto-approve Dependabot PRs + run: gh pr review "$PR_URL" --approve + env: + PR_URL: ${{github.event.pull_request.html_url}} + GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} From c0715b42d3cb14a800834f059d1b0b6b6bd799e8 Mon Sep 17 00:00:00 2001 From: Tom Hayward Date: Thu, 2 Feb 2023 14:08:48 -0800 Subject: [PATCH 3/3] upgrade to ubi9 and use versioned tag for update tracking --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 82cbb1e..25a0a4a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi8/python-39 +FROM registry.access.redhat.com/ubi9/python-39:1-99.1674497380 ARG TARGETOS ARG TARGETARCH