Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dependabot fails for Docker updates with multiple tags in the same image #11215

Open
1 task done
bartsmykla opened this issue Jan 3, 2025 · 0 comments
Open
1 task done

Dependabot fails for Docker updates with multiple tags in the same image #11215

bartsmykla opened this issue Jan 3, 2025 · 0 comments
Labels
L: docker Docker containers L: ruby:bundler RubyGems via bundler T: bug 🐞 Something isn't working

Comments

@bartsmykla
Copy link

Is there an existing issue for this?

  • I have searched the existing issues

Package ecosystem

Docker

Package manager version

No response

Language version

No response

Manifest location and content before the Dependabot update

tools/releases/dockerfiles/base-root.Dockerfile:

# use only when root is really needed
FROM gcr.io/distroless/base-nossl-debian11:debug@sha256:d66c60eff6c55972af9e661a57c1afe96ef4ddfa4fff37b625a448df41a15820

COPY /tools/releases/templates/LICENSE \
    /tools/releases/templates/README \
    /tools/releases/templates/NOTICE \
    /kuma/

SHELL ["/busybox/busybox", "sh", "-c"]

tools/releases/dockerfiles/base.Dockerfile:

FROM gcr.io/distroless/base-nossl-debian11:debug-nonroot@sha256:934b713496a9ed100550aaa58636270c4d69c27040e44f2aed1fa39594c45eba

COPY /tools/releases/templates/LICENSE \
    /tools/releases/templates/README \
    /tools/releases/templates/NOTICE \
    /kuma/

SHELL ["/busybox/busybox", "sh", "-c"]

dependabot.yml content

kumahq/kuma/.github/dependabot.yml

Updated dependency

No response

What you expected to see, versus what you actually saw

Expected: Dependabot recognizes that both debug and debug-nonroot tags of gcr.io/distroless/base-nossl-debian11 already use the latest digests and runs without errors.
Actual: Dependabot groups both tags into one dependency, compares their digests incorrectly, and fails with "No files changed" error.

Native package manager behavior

No response

Images of the diff or a link to the PR, issue, or logs

    cli | 2025/01/03 13:01:26 using image ghcr.io/github/dependabot-update-job-proxy/dependabot-update-job-proxy:latest at sha256:9189ea3618c122b3ccef6f2c39e4ac47f74217fbed9f04535cd60e22b51b1510
    cli | 2025/01/03 13:01:26 using image ghcr.io/dependabot/dependabot-updater-docker at sha256:cbfdacd89c235d02f4ef69162112282b33c319b814c025d53eb5910cbe383540
  proxy | WARNING: Skipping duplicate certificate in file ca-cert-orbstack-root.pem
updater | Updating certificates in /etc/ssl/certs...
updater | rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
updater | rehash: warning: skipping duplicate certificate in orbstack-root.pem
updater | 2 added, 0 removed; done.
updater | Running hooks in /etc/ca-certificates/update.d...
updater | done.
  proxy | 2025/01/03 13:01:27 proxy starting, commit: 39f5c2fb29cacce3bbeea1bdf58a1d3430dd0f97
  proxy | 2025/01/03 13:01:27 GitHubAPIHandler has no app access tokens
  proxy | 2025/01/03 13:01:27 Listening (:1080)
updater | 2025/01/03 13:01:28 INFO Starting job processing
updater | 2025/01/03 13:01:28 INFO Job definition: {"job":{"package-manager":"docker","allowed-updates":[{"update-type":"all"}],"debug":false,"dependency-groups":[],"dependencies":null,"dependency-group-to-refresh":null,"existing-pull-requests":[],"existing-group-pull-requests":[],"experiments":null,"ignore-conditions":[],"lockfile-only":false,"requirements-update-strategy":null,"security-advisories":[],"security-updates-only":false,"source":{"provider":"github","repo":"kumahq/kuma","directory":"/tools/releases/dockerfiles","hostname":null,"api-endpoint":null},"update-subdependencies":false,"updating-a-pull-request":false,"vendor-dependencies":false,"reject-external-code":false,"repo-private":false,"commit-message-options":null,"credentials-metadata":[],"max-updater-run-time":0}}
  proxy | 2025/01/03 13:01:28 [002] GET https://github.com:443/kumahq/kuma/info/refs?service=git-upload-pack
  proxy | 2025/01/03 13:01:29 [002] 200 https://github.com:443/kumahq/kuma/info/refs?service=git-upload-pack
  proxy | 2025/01/03 13:01:29 [004] POST https://github.com:443/kumahq/kuma/git-upload-pack
  proxy | 2025/01/03 13:01:29 [004] 200 https://github.com:443/kumahq/kuma/git-upload-pack
  proxy | 2025/01/03 13:01:29 [006] POST https://github.com:443/kumahq/kuma/git-upload-pack
  proxy | 2025/01/03 13:01:29 [006] 200 https://github.com:443/kumahq/kuma/git-upload-pack
updater | 2025/01/03 13:01:31 INFO Base commit SHA: 10a11c35f5c57e4741103593380d229342b652e5
updater | 2025/01/03 13:01:31 INFO Finished job processing
updater | 2025/01/03 13:01:31 INFO Starting job processing
  proxy | 2025/01/03 13:01:31 [007] POST http://host.docker.internal:61412/update_jobs/cli/update_dependency_list
{"data":{"dependencies":[{"name":"distroless/base-nossl-debian11","requirements":[{"file":"base-root.Dockerfile","groups":[],"requirement":null,"source":{"digest":"d66c60eff6c55972af9e661a57c1afe96ef4ddfa4fff37b625a448df41a15820","registry":"gcr.io","tag":"debug"}},{"file":"base.Dockerfile","groups":[],"requirement":null,"source":{"digest":"934b713496a9ed100550aaa58636270c4d69c27040e44f2aed1fa39594c45eba","registry":"gcr.io","tag":"debug-nonroot"}}],"version":"debug"},{"name":"debian","requirements":[{"file":"envoy.Dockerfile","groups":[],"requirement":null,"source":{"digest":"b877a1a3fdf02469440f1768cf69c9771338a875b7add5e80c45b756c92ac20a","tag":"12.8"}}],"version":"12.8"},{"name":"kumahq/base-root-debian11","requirements":[{"file":"kuma-cni.Dockerfile","groups":[],"requirement":null,"source":{"tag":"no-push-"}}],"version":"no-push-"},{"name":"kumahq/static-debian11","requirements":[{"file":"kuma-cp.Dockerfile","groups":[],"requirement":null,"source":{"tag":"no-push-"}}],"version":"no-push-"},{"name":"kumahq/envoy","requirements":[{"file":"kuma-dp.Dockerfile","groups":[],"requirement":null,"source":{"tag":"no-push-"}}],"version":"no-push-"},{"name":"kumahq/base-nossl-debian11","requirements":[{"file":"kuma-dp.Dockerfile","groups":[],"requirement":null,"source":{"tag":"no-push-"}},{"file":"kumactl.Dockerfile","groups":[],"requirement":null,"source":{"tag":"no-push-"}}],"version":"no-push-"},{"name":"k8s-staging-build-image/distroless-iptables","requirements":[{"file":"kuma-init.Dockerfile","groups":[],"requirement":null,"source":{"registry":"gcr.io","tag":"v0.6.6"}}],"version":"v0.6.6"},{"name":"distroless/static-debian11","requirements":[{"file":"static.Dockerfile","groups":[],"requirement":null,"source":{"digest":"55716e80a7d4320ce9bc2dc8636fc193b418638041b817cf3306696bd0f975d1","registry":"gcr.io","tag":"debug-nonroot"}}],"version":"debug-nonroot"}],"dependency_files":["/tools/releases/dockerfiles/base-root.Dockerfile","/tools/releases/dockerfiles/base.Dockerfile","/tools/releases/dockerfiles/envoy.Dockerfile","/tools/releases/dockerfiles/kuma-cni.Dockerfile","/tools/releases/dockerfiles/kuma-cni.Dockerfile.dockerignore","/tools/releases/dockerfiles/kuma-cp.Dockerfile","/tools/releases/dockerfiles/kuma-cp.Dockerfile.dockerignore","/tools/releases/dockerfiles/kuma-dp.Dockerfile","/tools/releases/dockerfiles/kuma-dp.Dockerfile.dockerignore","/tools/releases/dockerfiles/kuma-init.Dockerfile","/tools/releases/dockerfiles/kuma-init.Dockerfile.dockerignore","/tools/releases/dockerfiles/kumactl.Dockerfile","/tools/releases/dockerfiles/kumactl.Dockerfile.dockerignore","/tools/releases/dockerfiles/static.Dockerfile"]},"type":"update_dependency_list"}
  proxy | 2025/01/03 13:01:31 [007] 200 http://host.docker.internal:61412/update_jobs/cli/update_dependency_list
  proxy | 2025/01/03 13:01:31 [008] POST http://host.docker.internal:61412/update_jobs/cli/increment_metric
{"data":{"metric":"updater.started","tags":{"operation":"group_update_all_versions"}},"type":"increment_metric"}
  proxy | 2025/01/03 13:01:31 [008] 200 http://host.docker.internal:61412/update_jobs/cli/increment_metric
updater | 2025/01/03 13:01:31 INFO Starting update job for kumahq/kuma
updater | 2025/01/03 13:01:31 INFO Checking all dependencies for version updates...
updater | 2025/01/03 13:01:31 INFO Checking if distroless/base-nossl-debian11 debug needs updating
updater | 2025/01/03 13:01:31 INFO Latest version is debug
  proxy | 2025/01/03 13:01:32 [010] HEAD https://gcr.io:443/v2/distroless/base-nossl-debian11/manifests/debug
  proxy | 2025/01/03 13:01:33 [010] 200 https://gcr.io:443/v2/distroless/base-nossl-debian11/manifests/debug
updater | 2025/01/03 13:01:33 INFO Requirements to unlock own
updater | 2025/01/03 13:01:33 INFO Requirements update strategy 
  proxy | 2025/01/03 13:01:33 [012] HEAD https://gcr.io:443/v2/distroless/base-nossl-debian11/manifests/debug-nonroot
  proxy | 2025/01/03 13:01:33 [012] 200 https://gcr.io:443/v2/distroless/base-nossl-debian11/manifests/debug-nonroot
updater | 2025/01/03 13:01:33 INFO Updating distroless/base-nossl-debian11 from debug to debug
  proxy | 2025/01/03 13:01:33 [013] POST http://host.docker.internal:61412/update_jobs/cli/record_update_job_error
{"data":{"error-type":"unknown_error","error-details":null},"type":"record_update_job_error"}
  proxy | 2025/01/03 13:01:33 [013] 200 http://host.docker.internal:61412/update_jobs/cli/record_update_job_error
updater | 2025/01/03 13:01:33 ERROR Error processing distroless/base-nossl-debian11 (RuntimeError)
updater | 2025/01/03 13:01:33 ERROR No files changed!
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/docker/lib/dependabot/docker/file_updater.rb:48:in `updated_dependency_files'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `bind_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `validate_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/_methods.rb:277:in `block in _on_method_added'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/dependency_change_builder.rb:143:in `generate_dependency_files'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `bind_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `validate_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/_methods.rb:277:in `block in _on_method_added'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/dependency_change_builder.rb:72:in `run'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `bind_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `validate_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/_methods.rb:277:in `block in _on_method_added'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/dependency_change_builder.rb:44:in `create_from'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `bind_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `validate_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/_methods.rb:277:in `block in _on_method_added'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/update_all_versions.rb:170:in `check_and_create_pull_request'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `bind_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `validate_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/_methods.rb:277:in `block in _on_method_added'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/update_all_versions.rb:94:in `check_and_create_pr_with_error_handling'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `bind_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `validate_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/_methods.rb:277:in `block in _on_method_added'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/update_all_versions.rb:59:in `block in perform'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/update_all_versions.rb:59:in `each'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/update_all_versions.rb:59:in `perform'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `bind_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `validate_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/_methods.rb:277:in `block in _on_method_added'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/group_update_all_versions.rb:137:in `block in run_ungrouped_dependency_updates'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/group_update_all_versions.rb:122:in `each'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/group_update_all_versions.rb:122:in `run_ungrouped_dependency_updates'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `bind_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `validate_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/_methods.rb:277:in `block in _on_method_added'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/group_update_all_versions.rb:65:in `perform'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `bind_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/call_validation.rb:270:in `validate_call'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11577/lib/types/private/methods/_methods.rb:277:in `block in _on_method_added'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/updater.rb:45:in `run'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/update_files_command.rb:44:in `block in perform_job'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/opentelemetry-api-1.4.0/lib/opentelemetry/trace/tracer.rb:37:in `block in in_span'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/opentelemetry-api-1.4.0/lib/opentelemetry/trace.rb:70:in `block in with_span'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/opentelemetry-api-1.4.0/lib/opentelemetry/context.rb:87:in `with_value'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/opentelemetry-api-1.4.0/lib/opentelemetry/trace.rb:70:in `with_span'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/opentelemetry-api-1.4.0/lib/opentelemetry/trace/tracer.rb:37:in `in_span'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/update_files_command.rb:18:in `perform_job'
updater | 2025/01/03 13:01:33 ERROR /home/dependabot/dependabot-updater/lib/dependabot/base_command.rb:37:in `run'
updater | 2025/01/03 13:01:33 ERROR bin/update_files.rb:46:in `<main>'
updater | 2025/01/03 13:01:33 INFO Checking if debian 12.8 needs updating
  proxy | 2025/01/03 13:01:35 [015] GET https://registry.hub.docker.com:443/v2/library/debian/tags/list
  proxy | 2025/01/03 13:01:35 [015] 401 https://registry.hub.docker.com:443/v2/library/debian/tags/list
  proxy | 2025/01/03 13:01:35 [015] Remote response: {"errors":[{"code":"UNAUTHORIZED","message":"authentication required","detail":[{"Type":"repository","Class":"","Name":"library/debian","Action":"pull"}]}]}
  proxy | 2025/01/03 13:01:36 [017] GET https://auth.docker.io:443/token?service=registry.docker.io&scope=repository%3Alibrary%2Fdebian%3Apull&account
  proxy | 2025/01/03 13:01:37 [017] 200 https://auth.docker.io:443/token?service=registry.docker.io&scope=repository%3Alibrary%2Fdebian%3Apull&account
  proxy | 2025/01/03 13:01:37 [019] GET https://registry.hub.docker.com:443/v2/library/debian/tags/list
  proxy | 2025/01/03 13:01:37 [019] 200 https://registry.hub.docker.com:443/v2/library/debian/tags/list
  proxy | 2025/01/03 13:01:38 [021] HEAD https://registry.hub.docker.com:443/v2/library/debian/manifests/latest
  proxy | 2025/01/03 13:01:38 [021] 401 https://registry.hub.docker.com:443/v2/library/debian/manifests/latest
  proxy | 2025/01/03 13:01:38 [023] GET https://auth.docker.io:443/token?service=registry.docker.io&scope=repository%3Alibrary%2Fdebian%3Apull&account
  proxy | 2025/01/03 13:01:38 [023] 200 https://auth.docker.io:443/token?service=registry.docker.io&scope=repository%3Alibrary%2Fdebian%3Apull&account
  proxy | 2025/01/03 13:01:38 [025] HEAD https://registry.hub.docker.com:443/v2/library/debian/manifests/latest
  proxy | 2025/01/03 13:01:38 [025] 200 https://registry.hub.docker.com:443/v2/library/debian/manifests/latest
  proxy | 2025/01/03 13:01:38 [027] HEAD https://registry.hub.docker.com:443/v2/library/debian/manifests/12.8
  proxy | 2025/01/03 13:01:38 [027] 401 https://registry.hub.docker.com:443/v2/library/debian/manifests/12.8
  proxy | 2025/01/03 13:01:38 [029] GET https://auth.docker.io:443/token?service=registry.docker.io&scope=repository%3Alibrary%2Fdebian%3Apull&account
  proxy | 2025/01/03 13:01:38 [029] 200 https://auth.docker.io:443/token?service=registry.docker.io&scope=repository%3Alibrary%2Fdebian%3Apull&account
  proxy | 2025/01/03 13:01:38 [031] HEAD https://registry.hub.docker.com:443/v2/library/debian/manifests/12.8
  proxy | 2025/01/03 13:01:38 [031] 200 https://registry.hub.docker.com:443/v2/library/debian/manifests/12.8
updater | 2025/01/03 13:01:38 INFO Latest version is 12.8
updater | 2025/01/03 13:01:38 INFO No update needed for debian 12.8
updater | 2025/01/03 13:01:38 INFO Checking if kumahq/base-root-debian11 no-push- needs updating
updater | 2025/01/03 13:01:38 INFO Latest version is no-push-
updater | 2025/01/03 13:01:38 INFO No update needed for kumahq/base-root-debian11 no-push-
updater | 2025/01/03 13:01:38 INFO Checking if kumahq/static-debian11 no-push- needs updating
updater | 2025/01/03 13:01:38 INFO Latest version is no-push-
updater | 2025/01/03 13:01:38 INFO No update needed for kumahq/static-debian11 no-push-
updater | 2025/01/03 13:01:38 INFO Checking if kumahq/envoy no-push- needs updating
updater | 2025/01/03 13:01:38 INFO Latest version is no-push-
updater | 2025/01/03 13:01:38 INFO No update needed for kumahq/envoy no-push-
updater | 2025/01/03 13:01:38 INFO Checking if kumahq/base-nossl-debian11 no-push- needs updating
updater | 2025/01/03 13:01:38 INFO Latest version is no-push-
updater | 2025/01/03 13:01:38 INFO No update needed for kumahq/base-nossl-debian11 no-push-
updater | 2025/01/03 13:01:38 INFO Checking if k8s-staging-build-image/distroless-iptables v0.6.6 needs updating
  proxy | 2025/01/03 13:01:39 [033] GET https://gcr.io:443/v2/k8s-staging-build-image/distroless-iptables/tags/list
  proxy | 2025/01/03 13:01:40 [033] 200 https://gcr.io:443/v2/k8s-staging-build-image/distroless-iptables/tags/list
updater | 2025/01/03 13:01:40 INFO Latest version is v0.6.6
updater | 2025/01/03 13:01:40 INFO No update needed for k8s-staging-build-image/distroless-iptables v0.6.6
updater | 2025/01/03 13:01:40 INFO Checking if distroless/static-debian11 debug-nonroot needs updating
updater | 2025/01/03 13:01:40 INFO Latest version is debug-nonroot
  proxy | 2025/01/03 13:01:40 [035] HEAD https://gcr.io:443/v2/distroless/static-debian11/manifests/debug-nonroot
  proxy | 2025/01/03 13:01:40 [035] 200 https://gcr.io:443/v2/distroless/static-debian11/manifests/debug-nonroot
updater | 2025/01/03 13:01:40 INFO No update needed for distroless/static-debian11 debug-nonroot
  proxy | 2025/01/03 13:01:40 [036] PATCH http://host.docker.internal:61412/update_jobs/cli/mark_as_processed
{"data":{"base-commit-sha":"10a11c35f5c57e4741103593380d229342b652e5"},"type":"mark_as_processed"}
  proxy | 2025/01/03 13:01:40 [036] 200 http://host.docker.internal:61412/update_jobs/cli/mark_as_processed
updater | 2025/01/03 13:01:40 INFO Finished job processing
updater | 2025/01/03 13:01:40 INFO Results:
updater | Dependabot encountered '1' error(s) during execution, please check the logs for more details.
updater | +------------------------------------------------+
updater | |         Dependencies failed to update          |
updater | +--------------------------------+---------------+
updater | | distroless/base-nossl-debian11 | unknown_error |
updater | +--------------------------------+---------------+
  proxy | 2025/01/03 13:01:40 Skipping sending metrics because api endpoint is empty
  proxy | 2025/01/03 13:01:40 2/16 calls cached (12%)
    cli | 2025/01/03 13:01:41 updater failure: updater exited with code 1

Smallest manifest that reproduces the issue

I have created small repository to reproduce the issue: bartsmykla/dependabot-docker-debugging which basically consists of two files

FROM gcr.io/distroless/base-nossl-debian11:debug-nonroot@sha256:934b713496a9ed100550aaa58636270c4d69c27040e44f2aed1fa39594c45eba

SHELL ["/busybox/busybox", "sh", "-c"]
FROM gcr.io/distroless/base-nossl-debian11:debug@sha256:d66c60eff6c55972af9e661a57c1afe96ef4ddfa4fff37b625a448df41a15820

SHELL ["/busybox/busybox", "sh", "-c"]
@bartsmykla bartsmykla added the T: bug 🐞 Something isn't working label Jan 3, 2025
@github-actions github-actions bot added L: docker Docker containers L: ruby:bundler RubyGems via bundler labels Jan 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
L: docker Docker containers L: ruby:bundler RubyGems via bundler T: bug 🐞 Something isn't working
Projects
Dependabot
Status: No status
Milestone
No milestone
Development

No branches or pull requests
1 participant
@bartsmykla