ci(ubi9-upstream-digests): update red hat ubi9 base image digests - #63
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
renovate
Bot
force-pushed
the
renovate/red-hat-ubi9-base-image-digests
branch
3 times, most recently
from
July 12, 2026 19:00
8c571db to
6114905
Compare
NWarila
added a commit
that referenced
this pull request
Jul 12, 2026
…digests (#79) ## Summary - Refresh the digest-pinned Red Hat UBI 9 minimal and micro base images across all nine configured sites. - Update the architecture-specific canonical rootfs reproducibility baselines proven by the prior refresh run. - Record the artifact-changing refresh in the changelog. ## Digest changes - `ubi9/ubi-minimal`: `ae09ecc3d754bc1726cbda3e2599cc7839e09fe1cc547ce173cf669b645be3cc` → `463cae32c6f6f5594b11a5c22de275016bd8545ce58a6373388e8b24f13fc15c` - `ubi9/ubi-micro`: `b498b3ea26111ab4b81d65139f2ebd2ef9a2abb7a4588b7fdcc54889f95e9caa` → `35de56a9413112f1474e392ebc35e0cf6f0fb484c8e8877bbae59b513694b41f` - amd64 canonical rootfs: `02ebc1b90cae0c06836b12d0536d52249ee4c8da029c47f8de7bbebe67c04c1b` → `3b2a8a220847d9edc939c126208697b9de221b7a7371b26521857534a0179bea` - arm64 canonical rootfs: `851544a92f4cadef30e28048405f154558b70e2ecbe71e517b80c73307605af4` → `4f4d1b58c0352d8d3a6c2435b5bde2f802f0eb93e89593139d62a72d241626d5` ## Reproducibility evidence PR #63 reproducibility run 29200750883 built each architecture byte-identically twice with the refreshed bases and reported the new canonical rootfs values above. It also re-proved the recorded rpmdb hashes unchanged: amd64 `610f66e9974a9c970323b08b9bee54ae3900d85cd54142baabf832960adebcf6`, arm64 `af600c390b5d0cb9d0dbf20dc13d74936f610d170b145ea1c3e18ff13359b60c`. The recorded `fips_so_sha256` values were likewise re-proven unchanged for both architectures. Because main now uses Dockerfile frontend 1.25 and Buildx v4, this PR seeds the #63 rootfs values as predictions; this PR’s own reproducibility gates are authoritative and will prove or correct them. ## Verification - `python3 tools/verify.py`
Owner
|
Superseded by #79 (F8b), which adopted this UBI9 base refresh across all nine digest sites plus the coupled reproducibility-baseline supersession, merged to main. This PR's partial 4-file bump is obsolete. |
renovate
Bot
force-pushed
the
renovate/red-hat-ubi9-base-image-digests
branch
2 times, most recently
from
July 15, 2026 12:52
6114905 to
647bd86
Compare
Contributor
|
| Arch | STIG | Secret findings | Footprint passed |
|---|---|---|---|
| amd64 | unavailable | unavailable | unavailable |
| arm64 | unavailable | unavailable | unavailable |
Footprint: amd64 unavailable
renovate
Bot
force-pushed
the
renovate/red-hat-ubi9-base-image-digests
branch
from
July 21, 2026 02:13
647bd86 to
ab3b7ac
Compare
renovate
Bot
force-pushed
the
renovate/red-hat-ubi9-base-image-digests
branch
3 times, most recently
from
July 28, 2026 23:37
647c03d to
0facb1e
Compare
renovate
Bot
force-pushed
the
renovate/red-hat-ubi9-base-image-digests
branch
3 times, most recently
from
August 5, 2026 10:13
ac8752d to
227d965
Compare
renovate
Bot
force-pushed
the
renovate/red-hat-ubi9-base-image-digests
branch
3 times, most recently
from
August 17, 2026 03:08
3510a9f to
906cd4b
Compare
renovate
Bot
force-pushed
the
renovate/red-hat-ubi9-base-image-digests
branch
from
August 17, 2026 21:05
906cd4b to
96199f1
Compare
renovate
Bot
force-pushed
the
renovate/red-hat-ubi9-base-image-digests
branch
2 times, most recently
from
August 26, 2026 23:10
79c528e to
0bef615
Compare
renovate
Bot
force-pushed
the
renovate/red-hat-ubi9-base-image-digests
branch
2 times, most recently
from
September 3, 2026 21:58
d9e2fd5 to
092aae3
Compare
renovate
Bot
force-pushed
the
renovate/red-hat-ubi9-base-image-digests
branch
4 times, most recently
from
September 14, 2026 05:48
7dc0369 to
a5d477f
Compare
renovate
Bot
force-pushed
the
renovate/red-hat-ubi9-base-image-digests
branch
2 times, most recently
from
September 15, 2026 15:57
915e06f to
d105a95
Compare
renovate
Bot
force-pushed
the
renovate/red-hat-ubi9-base-image-digests
branch
from
September 16, 2026 11:40
d105a95 to
a7e6b87
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
35de56a→7a0454c35de56a→7a0454c35de56a→7a0454c463cae3→7b8e25a463cae3→7b8e25aWarning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.