ci: pin cilium/cilium actions to v1.19.4, avoid digest updates#3240
Merged
Conversation
1 task
viktor-kurchenko
approved these changes
May 20, 2026
Commit d46dbc7 ("renovate: do not pin digests for cilium/cilium GitHub actions") changed the renovate config to avoid bumping digests for cilium/cilium GitHub actions. However, this did not work as intended[^1]. Instead, pin the action to a stable branch matching cilium_version in the action, so renovate would track it as a version update rather than a digest update and it would be grouped with the existing cilium package rule. [^1]: #3239 (review) Also do not let renvoate update digests for cilium/cilium GitHub actions. Version updates are handled by the renovate config cilium group. Signed-off-by: Tobias Klauser <tobias@cilium.io>
tklauser
force-pushed
the
pr/tklauser/pin-cilium-versioned
branch
from
bfed270 to
955c25b
Compare
tklauser
changed the title
aanm
approved these changes
May 20, 2026
maintainer-s-little-helper
Bot
added
the
ready-to-merge
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Commit d46dbc7 ("renovate: do not pin digests for cilium/cilium GitHub actions") changed the renovate config to avoid bumping digests for cilium/cilium GitHub actions. However, this did not work as intended1. Instead, pin the action to a stable branch matching cilium_version in the action, so renovate would track it as a version update rather than a digest update and it would be grouped with the existing cilium package rule.
Also do not let renvoate update digests for cilium/cilium GitHub actions. Version updates are handled by the renovate config cilium group.
Footnotes
https://github.com/cilium/cilium-cli/pull/3239#pullrequestreview-4327107625 ↩