Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 20, 2025

Bumps github.com/shipwright-io/build from 0.15.7 to 0.16.2.

Release notes

Sourced from github.com/shipwright-io/build's releases.

Shipwright Build release v0.16.2

Release changes since v0.16.1

None. This is a rebuild of all components to address vulnerabilities in the underlying base images.

To see a list of addressed vulnerabilities, please refer to shipwright-io/build#1910

Features

Fixes

API Changes

Docs

Misc

Shipwright Build release v0.16.1

Release changes since v0.16.0

None. This is a rebuild of all components to address vulnerabilities in the underlying base images.

To see a list of addressed vulnerabilities, please refer to shipwright-io/build#1910

Features

Fixes

API Changes

Docs

Misc

Shipwright Build release v0.16.0

Release changes since v0.15.0

Features

#1890 by @​ayushsatyam146: The source.git.depth Was added to the Build resource to specify the depth of the Git history. If not specified the default value is 1 which means that no history is cloned at all. This is the fastest way to clone a Git repository and in most cases enough as long as you don't have anything in your build logic relying on it. Any value greater than 1 will create a clone with the specified depth. For a full git history clone, depth must be set to 0. Note: If you specify a commit sha as revision, then the full history is always cloned before this commit is checked out.

#1869 by @​SaschaSchwarze0: Improve resource consumption by only caching shipwright-related taskruns and pods

Fixes

#1905 by @​Bryce-huang: TaskRuns that timed out without a timeout in their spec do not anymore cause the controller to panic

#1880 by @​SaschaSchwarze0: When specifying a Git source with a revision value which is a full commit SHA, then the source step now clones the repository at that point with the provided depth (default 1). Previously, when the revision was a commit SHA, it has always cloned the full history. This continues to be the case when you provide a short commit SHA. Note that this new approach is only used if Git supports the revision flag on git clone. This is not the case with the ubi9-based images that Shipwright provides.

API Changes

... (truncated)

Commits
  • 73a170b Merge pull request #1907 from shipwright-io/update-readme-tag-refs
  • 05326d1 Update Readme with new Tag v0.16.1
  • ef6ea46 Merge pull request #1906 from shipwright-io/dependabot/go_modules/github.com/...
  • a228136 Merge pull request #1905 from Bryce-huang/main
  • eb39964 Bump github.com/go-git/go-git/v5 from 5.16.0 to 5.16.1
  • 7b27b1e Fix #1904: If taskrun has no timeout, it will cause the controller to exit
  • 8c45c1c Merge pull request #1902 from shipwright-io/dependabot/go_modules/github.com/...
  • ee57baa Bump github.com/docker/cli
  • 39da9ad Merge pull request #1900 from shipwright-io/dependabot/go_modules/github.com/...
  • dd8f44f Bump github.com/go-logr/logr from 1.4.2 to 1.4.3
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/shipwright-io/build](https://github.com/shipwright-io/build) from 0.15.7 to 0.16.2.
- [Release notes](https://github.com/shipwright-io/build/releases)
- [Commits](shipwright-io/build@v0.15.7...v0.16.2)

---
updated-dependencies:
- dependency-name: github.com/shipwright-io/build
  dependency-version: 0.16.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Copy link
Contributor

openshift-ci bot commented Jun 20, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign saschaschwarze0 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 30, 2025

Superseded by #141.

@dependabot dependabot bot closed this Jun 30, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/shipwright-io/build-0.16.2 branch June 30, 2025 08:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/dependency-change Categorizes issue or PR as related to changing dependencies release-note-none
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

1 participant