chore(deps): Update testing-tools#1027
Merged
Merged
Conversation
github-actions
Bot
added
dependencies
Contributor
Author
|
github-actions
Bot
force-pushed
the
renovate/testing-tools
branch
from
5e428d3 to
bbf596b
Compare
mchmarny
approved these changes
May 27, 2026
Contributor
Author
Coverage Report ✅
Coverage BadgeNo Go source files changed in this PR. |
mchmarny
added a commit
that referenced
this pull request
May 27, 2026
PR #1027 bumped testing_tools.helmfile v1.5.1 -> v1.5.2 but the Renovate postUpgradeTask that refreshes helmfile_checksums did not run, leaving the four per-arch SHA256 entries pinned at v1.5.1 values. Both .github/actions/install-e2e-tools (via tools/setup-tools) and .github/actions/setup-build-tools verify the downloaded helmfile tarball against these pinned checksums, so E2E and CLI E2E started failing on every PR rebased onto main after #1027 merged (PR #1040 and others). Refresh the four checksums by running tools/update-helmfile-checksums v1.5.2, which is the same script the Renovate postUpgradeTask invokes. No other code or doc references the stale digests.
mchmarny
added a commit
that referenced
this pull request
May 27, 2026
RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS only matched the chainsaw checksum refresh script, so Renovate silently refused to run the helmfile postUpgradeTask defined in .github/renovate.json5. The bump in #1027 advanced testing_tools.helmfile from v1.5.1 to v1.5.2 while leaving testing_tools.helmfile_checksums pinned at v1.5.1 values, which broke E2E and CLI E2E for every PR rebased onto main (already fixed at runtime in 2cd479f). Replace the chainsaw-specific regex with a pattern matching every tools/update-*-checksums script. The two existing scripts (update-chainsaw-checksums, update-helmfile-checksums) share an identical shape: fetch the upstream release's checksums.txt and rewrite the per-arch block in .settings.yaml. Future per-arch checksum-pinned dependencies follow the same pattern, so a broader regex eliminates the dual-edit failure mode without widening the trust boundary beyond "checksum-refresher scripts we author".
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v2.8.7→v2.8.8v1.5.1→v1.5.2Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
fluxcd/flux2 (fluxcd/flux2)
v2.8.8Compare Source
Highlights
Flux v2.8.8 is a patch release that includes CVE fixes via go-git v5.19.1 (source-controller, image-automation-controller), reliability fixes in helm-controller and source-controller, the move of Helm back to upstream v4.2.0, support for GCP sovereign cloud artifact registries, and dependency updates. Users are encouraged to upgrade for the best experience.
ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.
Fixes:
crds/directory (helm-controller)Improvements:
Components changelog
CLI changelog
Full Changelog: fluxcd/flux2@v2.8.7...v2.8.8
helmfile/helmfile (helmfile/helmfile)
v1.5.2Compare Source
What's Changed
New Contributors
Full Changelog: helmfile/helmfile@v1.5.1...v1.5.2
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.