deps.yaml

images:
  - name: go1.25
    description: "CI image with Go 1.25 toolchain"
    base: "registry.suse.com/bci/golang:1.25.9@sha256:6ab7d7eb4a23076273da5e885ea71a1f9c72923da07f41fb53fb02e914123c11"
    packages:
      - nodejs24
      - skopeo
    tools:
      - golangci-lint
      - goreleaser
      - govulncheck
      - oras
      - kubectl # the whole kubectl family
    aliases:
      helm_v3: helmv3

  - name: go1.26
    description: "CI image with Go 1.26 toolchain"
    base: "registry.suse.com/bci/golang:1.26.2@sha256:0c1bfe51ea14f3e28b4730c725687331ce6aa24c61acea3b9735286789c873b9"
    packages:
      - nodejs24
      - skopeo
    tools:
      - golangci-lint
      - goreleaser
      - govulncheck
      - oras
      - kubectl # the whole kubectl family
    aliases:
      helm_v3: helmv3

  - name: python3.11
    description: "CI image with Python 3.11 toolchain"
    base: "registry.suse.com/bci/python:3.11.15@sha256:ae46b495c9413de83e4f9b2c8090b2369bbc519df460c66516c5cd8a1f32daed"
    packages:
    tools:

  - name: python3.13
    description: "CI image with Python 3.13 toolchain"
    base: "registry.suse.com/bci/python:3.13.13@sha256:ddc0eb2860df249e2054599e4df0e8452d25254508e05f3af1787359ad757963"
    packages:
    tools:

  - name: node22
    description: "CI image with Node 22 toolchain"
    base: "registry.suse.com/bci/nodejs:22.22.2@sha256:b81c6b8ffd79f8007c621b6ad21d8aa195fb3c6c8024ac6a04923227d9a18a81"
    packages:
    tools:

  - name: node24
    description: "CI image with Node 24 toolchain"
    base: "registry.suse.com/bci/nodejs:24.14.1@sha256:30f4ce0caa9f329dd6c59578f771b14bdd2cd2fb9cea18bd46bbd6222ddc66a5"
    packages:
    tools:

  - name: charts
    description: "Rancher charts build environment"
    base: "registry.suse.com/bci/bci-base:15.7@sha256:3292c81fb9e40b60903e6c88fac34e955b6d5b3acd3eb055d02d5c1538a72aea"
    packages:
      - git
      - patch
    tools:
      - golangci-lint
      - goreleaser
      - charts-build-scripts
      - ob-charts-tool
      - oras
      - kubectl # the whole kubectl family

  - name: nix
    description: "Nix environment"
    base: "registry.suse.com/bci/bci-base:15.7@sha256:3292c81fb9e40b60903e6c88fac34e955b6d5b3acd3eb055d02d5c1538a72aea"
    packages:
      - sudo
      - vim
    tools:
      - nix

packages:
  - gettext-runtime
  - ca-certificates
  - docker
  - gawk
  - git-core
  - gzip
  - jq
  - make
  - tar
  - unzip
  - zstd
  - wget

universal:
  - name: cosign
    source: sigstore/cosign
    version: v3.0.6
    checksums:
      linux/amd64: "c956e5dfcac53d52bcf058360d579472f0c1d2d9b69f55209e256fe7783f4c74"
      linux/arm64: "bedac92e8c3729864e13d4a17048007cfafa79d5deca993a43a90ffe018ef2b8"
    release:
      download_template: "cosign-{os}-{arch}"

  - name: gh
    source: cli/cli
    version: v2.89.0
    checksums:
      linux/amd64: "d0422caade520530e76c1c558da47daebaa8e1203d6b7ff10ad7d6faba3490d8"
      linux/arm64: "9e64a623dfc242990aa5d9b3f507111149c4282f66b68eaad1dc79eeb13b9ce5"
    release:
      download_template: "gh_{version|trimprefix:v}_{os}_{arch}.tar.gz"
      extract: "gh_{version|trimprefix:v}_{os}_{arch}/bin/gh"
      checksum_template: "gh_{version|trimprefix:v}_checksums.txt"

  - name: helmv3
    family: helm
    source: "https://get.helm.sh"
    mode: static
    version: v3.20.2
    checksums:
      linux/amd64: "258e830a9e613c8a7a302d6059b4bb3b9758f2f3e1bb8ea0d707ce10a9a72fea"
      linux/arm64: "5ea2d6bc2cda3f8edf985e028809f5a9278f404fb8ab24044de9b7cb9b79a691"
    release:
      download_template: "{source}/helm-{version}-{os}-{arch}.tar.gz"
      extract: "{os}-{arch}/helm"

  - name: helmv4
    family: helm
    family_default: true
    source: "https://get.helm.sh"
    mode: static
    version: v4.1.4
    checksums:
      linux/amd64: "70b2c30a19da4db264dfd68c8a3664e05093a361cefd89572ffb36f8abfa3d09"
      linux/arm64: "13d03672be289045d2ff00e4e345d61de1c6f21c1257a45955a30e8ae036d8f1"
    release:
      download_template: "{source}/helm-{version}-{os}-{arch}.tar.gz"
      extract: "{os}-{arch}/helm"

  - name: slsactl
    source: rancherlabs/slsactl
    version: v0.1.30
    checksums:
      linux/amd64: "7ed4750766c135ddcae788d194d7ff59a57c6debdc722fd1e52c06460218f10a"
      linux/arm64: "bbbe66089135c82526677177c080f5ca4911ad1989712596338c5acdae4bb383"
    release:
      download_template: "slsactl_{version|trimprefix:v}_{os}_{arch}.tar.gz"
      extract: "slsactl"

  - name: yq
    source: mikefarah/yq
    version: v4.53.2
    checksums:
      linux/amd64: "d56bf5c6819e8e696340c312bd70f849dc1678a7cda9c2ad63eebd906371d56b"
      linux/arm64: "03061b2a50c7a498de2bbb92d7cb078ce433011f085a4994117c2726be4106ea"
    release:
      download_template: "yq_{os}_{arch}"

tools:
  - name: golangci-lint
    source: golangci/golangci-lint
    version: v2.11.4
    checksums:
      linux/amd64: "200c5b7503f67b59a6743ccf32133026c174e272b930ee79aa2aa6f37aca7ef1"
      linux/arm64: "3bcfa2e6f3d32b2bf5cd75eaa876447507025e0303698633f722a05331988db4"
    release:
      download_template: "golangci-lint-{version|trimprefix:v}-{os}-{arch}.tar.gz"
      extract: "golangci-lint-{version|trimprefix:v}-{os}-{arch}/golangci-lint"

  - name: goreleaser
    source: goreleaser/goreleaser
    version: v2.15.2
    checksums:
      linux/amd64: "0ebdbf0353aba566b969dde746cc4e4806f96c27aa2f3971b229a9df7611fedc"
      linux/arm64: "5db66761a98f6693161e49e1a95d28d2673a892ba60cb4a5e16736cafd41c4c9"
    release:
      download_template: "goreleaser_{os|title}_{arch|replace:amd64=x86_64}.tar.gz"
      extract: "goreleaser"

  - name: govulncheck
    source: golang/vuln
    version: v1.2.0
    version_commit: a8075323febce35764797d66a61fa9e19a8d9797
    install:
      method: go-install
      package: "golang.org/x/vuln/cmd/govulncheck@{version_commit}"

  - name: oras
    source: oras-project/oras
    version: v1.3.1
    checksums:
      linux/amd64: "d52c4af76ce6a3ceb8579e51fb751a43ac051cca67f965f973a0b0e897a2bb86"
      linux/arm64: "79946ad57d732836f9242f903f476b6fa484c451d659f121bce54d931ab2a044"
    release:
      download_template: "oras_{version|trimprefix:v}_{os}_{arch}.tar.gz"
      extract: "oras"
      checksum_template: "oras_{version|trimprefix:v}_checksums.txt"

  - name: kuberlr
    family: kubectl
    source: flavio/kuberlr
    version: v0.7.0
    checksums:
      linux/amd64: "2f131dbf61d136eafcafa583f7884262972c6cc4059d8c811fc2e46ac7ca6128"
      linux/arm64: "50a94652653cd067587878d45518326430c9a731e642cb05d0d8e4d3813b18be"
    release:
      download_template: "kuberlr_{version|trimprefix:v}_{os}_{arch}.tar.gz"
      extract: "kuberlr_{version|trimprefix:v}_{os}_{arch}/kuberlr"

  - name: kubectl1.28
    family: kubectl
    source: "https://dl.k8s.io/release"
    mode: static
    version: v1.28.15
    checksums:
      linux/amd64: "1f7651ad0b50ef4561aa82e77f3ad06599b5e6b0b2a5fb6c4f474d95a77e41c5"
      linux/arm64: "7d45d9620e67095be41403ed80765fe47fcfbf4b4ed0bf0d1c8fe80345bda7d3"
    release:
      download_template: "{source}/{version}/bin/{os}/{arch}/kubectl"

  - name: kubectl1.29
    family: kubectl
    source: "https://dl.k8s.io/release"
    mode: static
    version: v1.29.10
    checksums:
      linux/amd64: "24f2f09a635d36b2ce36eaebf191326e2b25097eec541a3e47fee6726ef06cef"
      linux/arm64: "4cfa950fbd354bdc655cc425494aa77fe81710bc8f7d3f95285338aac223cc82"
    release:
      download_template: "{source}/{version}/bin/{os}/{arch}/kubectl"

  - name: kubectl1.30
    family: kubectl
    source: "https://dl.k8s.io/release"
    mode: static
    version: v1.30.6
    checksums:
      linux/amd64: "7a3adf80ca74b1b2afdfc7f4570f0005ca03c2812367ffb6ee2f731d66e45e61"
      linux/arm64: "0b448581f05f46d80219d1a73bd1966de09066c313f64e67e7b75b35e07191cd"
    release:
      download_template: "{source}/{version}/bin/{os}/{arch}/kubectl"

  - name: kubectl1.31
    family: kubectl
    family_default: true
    source: "https://dl.k8s.io/release"
    mode: static
    version: v1.31.2
    checksums:
      linux/amd64: "399e9d1995da80b64d2ef3606c1a239018660d8b35209fba3f7b0bc11c631c68"
      linux/arm64: "bb9fd6e5a92c2e2378954a2f1a8b4ccb2e8ba5a3635f870c3f306a53b359f971"
    release:
      download_template: "{source}/{version}/bin/{os}/{arch}/kubectl"

  # charts-build-scripts is a first-party Rancher tool on the compile-time
  # allowlist. mode: release-checksums means checksums are fetched from the
  # upstream release at generate time; version: latest resolves to the current
  # release tag via the GitHub API. The lock file (deps.lock) records the
  # resolved version and timestamp so CI can detect when it changes.
  - name: charts-build-scripts
    source: rancher/charts-build-scripts
    mode: release-checksums
    version: latest

  - name: ob-charts-tool
    source: rancher/ob-charts-tool
    mode: release-checksums
    version: latest
    release:
      download_template: "ob-charts-tool_{os}_{arch}"
      checksum_template: "ob-charts-tool_{version|trimprefix:v}_checksums.txt"

  - name: nix
    source: "https://releases.nixos.org/nix"
    mode: static
    version: 2.34.7
    checksums:
      linux/amd64: "eafe5042404e818505e28c5ca3d0885f3ec45c31f955489a25bb38258f87560e"
      linux/arm64: "f1cee64ae7a02330c6421924c28f597c41813f2214ff108622087d8056378b08"
    release:
      download_template: "{source}/nix-{version}/nix-{version}-{arch|replace:amd64=x86_64|replace:arm64=aarch64}-{os}.tar.xz"
      extract: "nix-{version}-{arch|replace:amd64=x86_64|replace:arm64=aarch64}-{os}/"
      install_to_path: false