From ff9d1d7ab5477260563d1cb048d09b177f49c657 Mon Sep 17 00:00:00 2001 From: Gero Posmyk-Leinemann Date: Wed, 12 Nov 2025 08:07:16 +0000 Subject: [PATCH 1/2] [image-builder-bob] Bump buildkit alpine 3.22 -> 3.22.2 Co-authored-by: Ona --- components/image-builder-bob/leeway.Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/components/image-builder-bob/leeway.Dockerfile b/components/image-builder-bob/leeway.Dockerfile index 4027cc8e6b77d3..f337022597c688 100644 --- a/components/image-builder-bob/leeway.Dockerfile +++ b/components/image-builder-bob/leeway.Dockerfile @@ -2,7 +2,7 @@ # Licensed under the GNU Affero General Public License (AGPL). # See License.AGPL.txt in the project root for license information. -FROM ghcr.io/gitpod-io/buildkit:v0.20.1-gitpod.3 +FROM ghcr.io/gitpod-io/buildkit:v0.20.1-gitpod.4 USER root RUN apk --no-cache add sudo bash \ From abe2118d16f8a57178b12b5b855a34736a6a1c2e Mon Sep 17 00:00:00 2001 From: Gero Posmyk-Leinemann Date: Wed, 12 Nov 2025 09:47:23 +0000 Subject: [PATCH 2/2] [ws-daemon] Bump runc binary from 1.2.6 -> 1.2.8 --- components/ws-daemon/leeway.Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/components/ws-daemon/leeway.Dockerfile b/components/ws-daemon/leeway.Dockerfile index c6d31e23ec76f1..8f330cf18a7f88 100644 --- a/components/ws-daemon/leeway.Dockerfile +++ b/components/ws-daemon/leeway.Dockerfile @@ -5,7 +5,7 @@ FROM cgr.dev/chainguard/wolfi-base:latest@sha256:815b27b8a70713c70404e44a718eddd52ea6f4a2bfad5f56455b52cd2789a9b2 as dl WORKDIR /dl RUN apk add --no-cache curl file \ - && curl -OsSL https://github.com/opencontainers/runc/releases/download/v1.2.6/runc.amd64 \ + && curl -OsSL https://github.com/opencontainers/runc/releases/download/v1.2.8/runc.amd64 \ && chmod +x runc.amd64 \ && if ! file runc.amd64 | grep -iq "ELF 64-bit LSB pie executable"; then echo "runc.amd64 is not a binary file"; exit 1;fi