Skip to content

fix(docker): bump curl pin to 8.21.0-r0#519

Open
sbaerlocher wants to merge 1 commit into
mainfrom
fix/curl-pin-bump
Open

fix(docker): bump curl pin to 8.21.0-r0#519
sbaerlocher wants to merge 1 commit into
mainfrom
fix/curl-pin-bump

Conversation

@sbaerlocher

Copy link
Copy Markdown
Member

Summary

The daily security scan build failed with ERROR: unable to select packages: breaks: world[curl=8.20.0-r1]. The pkg.arillso.io caching proxy has rotated curl from 8.20.0-r1 to 8.21.0-r0 for Alpine v3.24, dropping the old release.

Bumps the pinned curl version in both the builder and production apk add blocks. All other pins verified still present on the proxy.

Failing run: https://github.com/arillso/docker.ansible/actions/runs/28696825842

Test plan

  • CI security-scan build succeeds

The pkg.arillso.io proxy dropped curl 8.20.0-r1, breaking apk package selection in the security-scan build. 8.21.0-r0 is the current release.

Signed-off-by: Simon Bärlocher <s.baerlocher@sbaerlocher.ch>

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found.

Verified the curl pin bump from 8.20.0-r1 to 8.21.0-r0:

  • Both apk add blocks (builder line 65, production line 103) updated consistently.
  • Exact-pin format pkg=version-rN preserved and still routed through the pkg.arillso.io proxy.
  • No remaining references to the old 8.20.0-r1 version anywhere in the repo.

Clean proxy-rotation fix. Approving.

@github-actions

github-actions Bot commented Jul 4, 2026

Copy link
Copy Markdown
Contributor

Ansible Container Tests Summary — ✅ SUCCESS

Item Status
Lint
Build
Structure Tests
Security Tests
Performance Tests
Integration Tests
Unit Tests
Upgrade Tests

Statistical Summary

  • Total items: 8
  • Passed: 8 ✅
  • Failed: 0 ❌

Environment Information

  • Run Date: Sat Jul 4 09:01:25 UTC 2026
  • GitHub Run ID: 28701167157
  • Ansible Version: 2.21.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant