Skip to content

Update piped-base container image version#6018

Merged
khanhtc1202 merged 5 commits into
masterfrom
update-piped-containers-base
Jul 12, 2025
Merged

Update piped-base container image version#6018
khanhtc1202 merged 5 commits into
masterfrom
update-piped-containers-base

Conversation

@khanhtc1202
Copy link
Copy Markdown
Member

@khanhtc1202 khanhtc1202 commented Jul 11, 2025

What this PR does:

Update piped-base container image version for

  • piped container
  • launcher container
  • piped-okd-base container

Why we need it:

Which issue(s) this PR fixes:

Fixes #

Does this PR introduce a user-facing change?:

  • How are users affected by this change:
  • Is this breaking change:
  • How to migrate (if breaking change):

@khanhtc1202
Update piped container base image
bee6c14 
Signed-off-by: khanhtc1202 <khanhtc1202@gmail.com>
@khanhtc1202
Update launcher container image base
7f7ceef 
Signed-off-by: khanhtc1202 <khanhtc1202@gmail.com>
@khanhtc1202
Update piped container image base
478d9d1 
Signed-off-by: khanhtc1202 <khanhtc1202@gmail.com>
@khanhtc1202 khanhtc1202 requested a review from a team as a code owner July 11, 2025 07:09
@codecov
Copy link
Copy Markdown

codecov Bot commented Jul 11, 2025 •
edited
Loading

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 28.28%. Comparing base (0fb3b13) to head (7d26b29).
Report is 4 commits behind head on master.

Additional details and impacted files 
@@           Coverage Diff           @@
##           master    #6018   +/-   ##
=======================================
  Coverage   28.28%   28.28%           
=======================================
  Files         523      523           
  Lines       56135    56135           
=======================================
  Hits        15879    15879           
  Misses      39005    39005           
  Partials     1251     1251
Flag Coverage Δ
. 23.27% <ø> (ø)
.-pkg-app-pipedv1-plugin-kubernetes 65.94% <ø> (ø)
.-pkg-app-pipedv1-plugin-kubernetes_multicluster 67.33% <ø> (ø)
.-pkg-app-pipedv1-plugin-scriptrun 66.66% <ø> (ø)
.-pkg-app-pipedv1-plugin-terraform 80.26% <ø> (ø)
.-pkg-app-pipedv1-plugin-wait 35.51% <ø> (ø)
.-pkg-plugin-sdk 50.71% <ø> (ø)
.-tool-actions-gh-release 19.23% <ø> (ø)
.-tool-actions-plan-preview 25.30% <ø> (ø)
.-tool-codegen-protoc-gen-auth 0.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Warashi
Warashi previously approved these changes Jul 11, 2025
View reviewed changes
Copy link
Copy Markdown
Member

@Warashi Warashi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

We have to update Dockerfile-okd to use the updated piped-base-okd image after merging this PR.

@khanhtc1202
Update glibc version for piped-base-okd image
1b6792a 
Signed-off-by: khanhtc1202 <khanhtc1202@gmail.com>
@khanhtc1202 khanhtc1202 enabled auto-merge (squash) July 11, 2025 14:05
@khanhtc1202 khanhtc1202 merged commit 0c99936 into master Jul 12, 2025
49 checks passed
@khanhtc1202 khanhtc1202 deleted the update-piped-containers-base branch July 12, 2025 05:13
@khanhtc1202 khanhtc1202 mentioned this pull request Jul 14, 2025
Merged
@ffjlabo
Copy link
Copy Markdown
Member

ffjlabo commented Jul 14, 2025

We updated image to resolve git CVE https://www.cve.org/CVERecord?id=CVE-2025-48384
After this PR, we can install git version 2.47.3, which is the patched version resolved the CVE.

% docker run --rm -it --entrypoint sh ghcr.io/pipe-cd/piped-base@sha256:fc2bde38211a80ee0df6d90ed168c817f30a7d0dbe8a0aff872a93ffb7d40a66
/ $ git --version
git version 2.47.3

This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.

github-actions Bot pushed a commit that referenced this pull request Jul 14, 2025
@khanhtc1202 @pipecd-bot
Update piped-base container image version (#6018)
0c89598 
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>
This was referenced Jul 14, 2025
Closed
Merged
github-actions Bot pushed a commit that referenced this pull request Jul 14, 2025
@khanhtc1202 @pipecd-bot
Update piped-base container image version (#6018)
5bdb35e 
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>
@github-actions github-actions Bot mentioned this pull request Jul 14, 2025
Merged
ffjlabo added a commit that referenced this pull request Jul 14, 2025
@github-actions @mohammedfirdouss
@khanhtc1202 @ffjlabo
Cherry-pick to release-v0.52.x (#6028)
961cf67 
* refactor metricsAnalyzer to render queries before execution. (#6010)

Signed-off-by: mohammedfirdouss <mohammedfirdousaraoye@gmail.com>
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>

* Update piped-base container image version (#6018)

Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>

* Update piped-base-okd image for piped and launcher (#6023)

Signed-off-by: khanhtc1202 <khanhtc1202@gmail.com>
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>

* Cut release v0.52.2 (#6027)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: ffjlabo <40124947+ffjlabo@users.noreply.github.com>
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>

---------

Signed-off-by: mohammedfirdouss <mohammedfirdousaraoye@gmail.com>
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>
Signed-off-by: khanhtc1202 <khanhtc1202@gmail.com>
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Mohammed Firdous <124298708+mohammedfirdouss@users.noreply.github.com>
Co-authored-by: Khanh Tran <32532742+khanhtc1202@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: ffjlabo <40124947+ffjlabo@users.noreply.github.com>
@github-actions github-actions Bot mentioned this pull request Aug 15, 2025
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Warashi Warashi Warashi approved these changes

@t-kikuc t-kikuc t-kikuc approved these changes

@ffjlabo ffjlabo Awaiting requested review from ffjlabo ffjlabo is a code owner automatically assigned from pipe-cd/pipecd-approvers

Assignees

No one assigned

Labels

area/go area/tool cherry-pick v0.52.2

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@khanhtc1202 @ffjlabo @Warashi @t-kikuc