dependencies.yaml

dependencies:
  # repo infra
  - name: "repo-infra"
    version: 0.2.5
    refPaths:
    - path: hack/verify-boilerplate.sh
      match: VERSION=v(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?

  # zeitgeist
  - name: "zeitgeist"
    version: 0.4.1
    refPaths:
    - path: hack/verify-dependencies.sh
      match: VERSION=(?P<major>0|[1-9]\d*)\.(?P<minor>0|[1-9]\d*)\.(?P<patch>0|[1-9]\d*)(?:-(?P<prerelease>(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+(?P<buildmetadata>[0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?

  # CNI plugins
  - name: "CNI plugins"
    version: 1.1.1
    refPaths:
    - path: packages/deb/build.go
      match: currentCNIVersion\s+= "\d+\.\d+.\d+"
    - path: packages/rpm/kubelet.spec
      match: \%global CNI_VERSION \d+\.\d+.\d+
    - path: pkg/kubepkg/kubepkg.go
      match: CurrentCNIVersion\s+= "\d+\.\d+.\d+"

  - name: "CNI plugins: minimum version"
    version: 0.8.6
    refPaths:
    - path: packages/rpm/kubelet.spec
      match: kubernetes-cni >= \d+\.\d+.\d+
    - path: pkg/kubepkg/kubepkg.go
      match: MinimumCNIVersion\s+= "\d+\.\d+.\d+"

  # CRI Tools
  - name: "crictl"
    version: 1.25.0
    refPaths:
    - path: packages/deb/build.go
      match: criToolsVersion\s+= "\d+\.\d+.\d+"
    - path: packages/deb/build_test.go
      match: cri-tools \(>= \d+.\d+.\d+\)
    - path: packages/rpm/kubelet.spec
      match: CRI_TOOLS_VERSION \d+.\d+.\d+

  # cosign
  - name: "ghcr.io/sigstore/cosign/cosign"
    version: v2.2.0@sha256:280b47054876d415f66a279e666e35157cae6881f3538599710290c70bb75369
    refPaths:
    - path: images/build/go-runner/cloudbuild.yaml
      match: ghcr.io/sigstore/cosign/cosign:v(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?@sha256:[a-f0-9]{64}

  # Docker
  # TODO(deps): Not active yet
  #- name: "docker"
  #  version: 19.03

  # Golang
  - name: "golang"
    version: 1.21.1
    refPaths:
    - path: Dockerfile-kubepkg
      match: FROM golang:\d+.\d+(alpha|beta|rc)?\.?(\d+)-(bookworm|bullseye) AS builder
    - path: Dockerfile-kubepkg-rpm
      match: FROM golang:\d+.\d+(alpha|beta|rc)?\.?(\d+)-(bookworm|bullseye) AS builder
    - path: images/build/cross/Makefile
      match: GO_VERSION\ \?=\ \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/build/cross/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"
    - path: images/build/go-runner/Makefile
      match: GO_VERSION\ \?=\ \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/build/go-runner/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"
    - path: images/releng/ci/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"
    - path: packages/deb/Dockerfile
      match: FROM golang:\d+.\d+(alpha|beta|rc)?\.?(\d+)-(bookworm|bullseye)

  # Golang pre-releases are denoted as `1.y<pre-release stage>.z`
  # Example: go1.17rc1
  #
  # This entry is a stub of the major version to allow dependency checks to
  # pass when building Kubernetes using a pre-release of Golang.
  - name: "golang: 1.<major>"
    version: 1.21
    refPaths:
    - path: images/build/cross/Makefile
      match: GO_MAJOR_VERSION\ \?=\ \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/build/cross/variants.yaml
      match: "GO_MAJOR_VERSION: '\\d+.\\d+'"
    - path: images/build/go-runner/Makefile
      match: GO_MAJOR_VERSION\ \?=\ \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/build/go-runner/variants.yaml
      match: "GO_MAJOR_VERSION: '\\d+.\\d+'"

  - name: "golang: go.mod"
    version: 1.20
    refPaths:
    - path: go.mod
      match: go \d+.\d+
    - path: images/build/go-runner/go.mod
      match: go \d+.\d+
    - path: packages/deb/go.mod
      match: go \d+.\d+

  - name: "golang: after kubernetes/kubernetes update"
    version: 1.21.1
    refPaths:
    - path: images/releng/k8s-ci-builder/Makefile
      match: GO_VERSION\ \?=\ \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"

  - name: "go-runner"
    version: v2.3.1
    refPaths:
    - path: images/build/go-runner/VERSION

  # Golang images

  # Represents the targeted Kubernetes version at the time the images
  # are to be created e.g., 'v1.100.0'
  #
  # Note: There is no need to increment the patch version of this variable.
  #       The reason for the inclusion of the patch version here is to satisfy
  #       a SemVer regex on the IMAGE_VERSION.
  #
  # Example:
  # - v1.100.0-go1.17-bullseye.0 satisfies SemVer regex, while:
  # - v1.100-go1.17-bullseye.0 does not
  - name: "Kubernetes version (stable.0)"
    version: v1.29.0
    refPaths:
    - path: images/build/cross/Makefile
      match: KUBERNETES_VERSION\ \?=\ v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
    - path: images/build/cross/variants.yaml
      match: "KUBERNETES_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "Kubernetes version (next candidate.0)"
    version: v1.29.0
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "KUBERNETES_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "gcr.io/k8s-staging-releng/releng-ci: image revision"
    version: 0
    refPaths:
    - path: images/releng/ci/variants.yaml
      match: REVISION:\ '\d+'

  # go-runner
  - name: "registry.k8s.io/build-image/go-runner (go1.21-bookworm)"
    version: v2.3.1-go1.21.1-bookworm.0
    refPaths:
    - path: images/build/go-runner/variants.yaml
      match: v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)

  - name: "registry.k8s.io/build-image/go-runner: image revision (go1.21-bookworm)"
    version: 0
    refPaths:
    - path: images/build/go-runner/Makefile
      match: REVISION \?= \d+
    - path: images/build/go-runner/variants.yaml
      match: REVISION:\ '\d+'

  - name: "registry.k8s.io/build-image/go-runner (go1.20-bullseye)"
    version: v2.3.1-go1.20.8-bullseye.0
    refPaths:
    - path: images/build/go-runner/variants.yaml
      match: v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)

  - name: "registry.k8s.io/build-image/go-runner: image revision (go1.20-bullseye)"
    version: 0
    refPaths:
    - path: images/build/go-runner/Makefile
      match: REVISION \?= \d+
    - path: images/build/go-runner/variants.yaml
      match: REVISION:\ '\d+'

  - name: "registry.k8s.io/build-image/go-runner: image revision (go1.20-bullseye)"
    version: 0
    refPaths:
    - path: images/build/go-runner/Makefile
      match: REVISION \?= \d+
    - path: images/build/go-runner/variants.yaml
      match: REVISION:\ '\d+'

  # kube-cross
  - name: "registry.k8s.io/build-image/kube-cross (v1.29-go1.21)"
    version: v1.29.0-go1.21.1-bullseye.0
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "IMAGE_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/kube-cross: config variant (v1.29-go1.21)"
    version: go1.21-bullseye
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "CONFIG: 'go\\d+.\\d+-bullseye'"

  - name: "registry.k8s.io/build-image/kube-cross: image revision (v1.29-go1.21)"
    version: 0
    refPaths:
    - path: images/build/cross/Makefile
      match: REVISION \?= \d+
    - path: images/build/cross/variants.yaml
      match: REVISION:\ '\d+'

  - name: "registry.k8s.io/build-image/kube-cross (v1.28-go1.20)"
    version: v1.28.0-go1.20.8-bullseye.0
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "IMAGE_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/kube-cross: config variant (v1.28-go1.20)"
    version: go1.20-bullseye
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "CONFIG: 'go\\d+.\\d+-bullseye'"

  - name: "registry.k8s.io/build-image/kube-cross: image revision (v1.28-go1.20)"
    version: 0
    refPaths:
    - path: images/build/cross/Makefile
      match: REVISION \?= \d+
    - path: images/build/cross/variants.yaml
      match: REVISION:\ '\d+'

  - name: "registry.k8s.io/build-image/kube-cross (v1.27-go1.20)"
    version: v1.27.0-go1.20.8-bullseye.0
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "IMAGE_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/kube-cross: config variant (v1.27-go1.20)"
    version: go1.20-bullseye
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "CONFIG: 'go\\d+.\\d+-bullseye'"

  - name: "registry.k8s.io/build-image/kube-cross: image revision (v1.27-go1.20)"
    version: 0
    refPaths:
    - path: images/build/cross/Makefile
      match: REVISION \?= \d+
    - path: images/build/cross/variants.yaml
      match: REVISION:\ '\d+'

  - name: "registry.k8s.io/build-image/kube-cross (v1.26-go1.20)"
    version: v1.26.0-go1.20.8-bullseye.0
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "IMAGE_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/kube-cross: config variant (v1.26-go1.20)"
    version: go1.20-bullseye
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "CONFIG: 'go\\d+.\\d+-bullseye'"

  - name: "registry.k8s.io/build-image/kube-cross: image revision (v1.26-go1.20)"
    version: 0
    refPaths:
    - path: images/build/cross/Makefile
      match: REVISION \?= \d+
    - path: images/build/cross/variants.yaml
      match: REVISION:\ '\d+'

  - name: "registry.k8s.io/build-image/kube-cross (v1.25-go1.20)"
    version: v1.25.0-go1.20.8-bullseye.0
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "IMAGE_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/kube-cross: config variant (v1.25-go1.20)"
    version: go1.20-bullseye
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "CONFIG: 'go\\d+.\\d+-bullseye'"

  - name: "registry.k8s.io/build-image/kube-cross: image revision (v1.25-go1.20)"
    version: 0
    refPaths:
    - path: images/build/cross/Makefile
      match: REVISION \?= \d+
    - path: images/build/cross/variants.yaml
      match: REVISION:\ '\d+'

  - name: "registry.k8s.io/build-image/kube-cross: dependents k8s-cloud-builder (v1.29-cross1.21)"
    version: v1.29.0-go1.21.1-bullseye.0
    refPaths:
    - path: images/k8s-cloud-builder/variants.yaml
      match: "KUBE_CROSS_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/kube-cross: dependents k8s-cloud-builder (v1.28-cross1.20)"
    version: v1.28.0-go1.20.8-bullseye.0
    refPaths:
    - path: images/k8s-cloud-builder/variants.yaml
      match: "KUBE_CROSS_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/kube-cross: dependents k8s-cloud-builder (v1.27-cross1.20)"
    version: v1.27.0-go1.20.8-bullseye.0
    refPaths:
    - path: images/k8s-cloud-builder/variants.yaml
      match: "KUBE_CROSS_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/kube-cross: dependents k8s-cloud-builder (v1.26-cross1.20)"
    version: v1.26.0-go1.20.8-bullseye.0
    refPaths:
    - path: images/k8s-cloud-builder/variants.yaml
      match: "KUBE_CROSS_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/kube-cross: dependents k8s-cloud-builder (v1.25-cross1.20)"
    version: v1.25.0-go1.20.8-bullseye.0
    refPaths:
    - path: images/k8s-cloud-builder/variants.yaml
      match: "KUBE_CROSS_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/kube-cross: protobuf version"
    version: 23.4
    refPaths:
    - path: images/build/cross/default/Dockerfile
      match: "PROTOBUF_VERSION [0-9]+\\.[0-9]+"

  # Golang (next candidate)
  - name: "golang (next candidate)"
    version: 1.21
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"
    - path: images/build/go-runner/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"
    - path: images/releng/ci/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"

  # Golang images (next candidate)
  - name: "gcr.io/k8s-staging-releng/releng-ci: image revision (next candidate)"
    version: 0
    refPaths:
    - path: images/releng/ci/variants.yaml
      match: REVISION:\ '\d+'

  - name: "registry.k8s.io/build-image/kube-cross: config variant (next candidate)"
    version: go1.21-bullseye
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "CONFIG: 'go\\d+.\\d+-bullseye'"

  # Golang (previous release branches: 1.28)
  - name: "golang (previous release branches: 1.28)"
    version: 1.20.8
    refPaths:
    - path: images/build/cross/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/build/go-runner/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/releng/ci/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?

  - name: "golang: after kubernetes/kubernetes update (previous release branches: master)"
    version: 1.21.1
    refPaths:
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?

  - name: "golang: after kubernetes/kubernetes update (previous release branches: 1.28)"
    version: 1.20.8
    refPaths:
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?

  # Golang (previous release branches: 1.27)
  - name: "golang (previous release branches: 1.27)"
    version: 1.20.8
    refPaths:
    - path: images/build/cross/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/build/go-runner/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/releng/ci/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?

  - name: "golang: after kubernetes/kubernetes update (previous release branches: 1.27)"
    version: 1.20.8
    refPaths:
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?

  # Golang (previous release branches: 1.26)
  - name: "golang (previous release branches: 1.26)"
    version: 1.20.8
    refPaths:
    - path: images/build/cross/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/build/go-runner/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/releng/ci/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?

  - name: "golang: after kubernetes/kubernetes update (previous release branches: 1.26)"
    version: 1.20.8
    refPaths:
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?

 # Golang (previous release branches: 1.25)
  - name: "golang (previous release branches: 1.25)"
    version: 1.20.8
    refPaths:
    - path: images/build/cross/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/build/go-runner/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/releng/ci/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?

  - name: "golang: after kubernetes/kubernetes update (previous release branches: 1.25)"
    version: 1.20.8
    refPaths:
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?

  # Golang images (for previous release branches)
  - name: "gcr.io/k8s-staging-releng/releng-ci: image revision (for previous release branches)"
    version: 0
    refPaths:
    - path: images/releng/ci/variants.yaml
      match: REVISION:\ '\d+'

  # golangci-lint-version
  - name: "golangci-lint"
    version: v1.53
    refPaths:
    - path: .github/workflows/lint.yml
      match: "version: v\\d+.\\d+?\\.?(\\d+)?"

  # Base images
  # # Use bullseye for kube-cross to achieve maximum glibc compatibility.
  - name: "Debian: codename (bullseye)"
    version: bullseye
    refPaths:
    - path: images/build/cross/Makefile
      match: OS_CODENAME\ \?=\ bullseye
    - path: packages/deb/Dockerfile
      match: FROM golang:\d+.\d+(alpha|beta|rc)?\.?(\d+)-bullseye

  - name: "Debian: codename (default)"
    version: bullseye
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "OS_CODENAME: 'bullseye'"
    # TODO: revert once all images are on bookworm
    # - path: images/build/debian-base/Makefile
    #   match: CONFIG\ \?=\ bullseye
    # - path: images/build/debian-base/variants.yaml
    #   match: "CONFIG: 'bullseye'"
    # Must match distroless Debian version as well
    # - path: images/build/go-runner/Makefile
    #   match: OS_CODENAME\ \?=\ bullseye
    - path: images/build/go-runner/variants.yaml
      match: "OS_CODENAME: 'bullseye'"
    # TODO: revert once all images are on bookworm
    # - path: images/build/setcap/Makefile
    #  match: CONFIG\ \?=\ bullseye
    # - path: images/build/setcap/variants.yaml
    #   match: "CONFIG: 'bullseye'"
    # - path: images/releng/ci/variants.yaml
    #   match: "OS_CODENAME: 'bullseye'"
    - path: images/releng/k8s-ci-builder/Makefile
      match: OS_CODENAME\ \?=\ bullseye
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: "OS_CODENAME: 'bullseye'"


  - name: "Debian: codename (next candidate)"
    version: bookworm
    refPaths:
    # TODO: revert once all images are on bookworm
    # - path: images/build/cross/variants.yaml
    #   match: "OS_CODENAME: 'bullseye'"
    - path: images/build/debian-base/variants.yaml
      match: "CONFIG: 'bookworm'"
    # - path: images/build/go-runner/variants.yaml
    #   match: "OS_CODENAME: 'bullseye'"
    # - path: images/releng/ci/variants.yaml
    #   match: "OS_CODENAME: 'bullseye'"
    # - path: images/releng/k8s-ci-builder/variants.yaml
    #   match: "OS_CODENAME: 'bullseye'"

  - name: "registry.k8s.io/build-image/debian-base"
    version: bookworm-v1.0.0
    refPaths:
    - path: images/build/debian-base/Makefile
      match: IMAGE_VERSION\ \?=\ bookworm-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
    - path: images/build/debian-base/variants.yaml
      match: "IMAGE_VERSION: 'bookworm-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/debian-base: dependents"
    version: bookworm-v1.0.0
    refPaths:
    - path: images/build/setcap/Makefile
      match: DEBIAN_BASE_VERSION\ \?=\ bookworm-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
    - path: images/build/setcap/variants.yaml
      match: "DEBIAN_BASE_VERSION: 'bookworm-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/distroless-iptables"
    version: v0.3.2
    refPaths:
    - path: images/build/distroless-iptables/Makefile
      match: IMAGE_VERSION\ \?=\ v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
    - path: images/build/distroless-iptables/variants.yaml
      match: IMAGE_VERSION:\ \'v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)\'

  - name: "registry.k8s.io/build-image/go-runner: dependents"
    version: v2.3.1-go1.21.1-bookworm.0
    refPaths:
    - path: images/build/distroless-iptables/Makefile
      match: GORUNNER_VERSION \?= v\d+\.\d+\.\d+-go\d+.\d+(alpha|beta|rc)?\.?(\d+)?-bookworm\.\d+

  - name: "registry.k8s.io/build-image/setcap"
    version: bookworm-v1.0.0
    refPaths:
    - path: images/build/setcap/Makefile
      match: IMAGE_VERSION\ \?=\ bookworm-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
    - path: images/build/setcap/variants.yaml
      match: "IMAGE_VERSION: 'bookworm-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  # Base images (next candidate)
  - name: "registry.k8s.io/build-image/debian-base (next candidate)"
    version: bookworm-v1.0.0
    refPaths:
    - path: images/build/debian-base/variants.yaml
      match: "IMAGE_VERSION: 'bookworm-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/debian-base: dependents (next candidate)"
    version: bookworm-v1.0.0
    refPaths:
    - path: images/build/setcap/variants.yaml
      match: "DEBIAN_BASE_VERSION: 'bookworm-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "registry.k8s.io/build-image/setcap (next candidate)"
    version: bookworm-v1.0.0
    refPaths:
    - path: images/build/setcap/variants.yaml
      match: "IMAGE_VERSION: 'bookworm-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  # Build environments
  - name: "gcr.io/k8s-staging-test-infra/gcb-docker-gcloud"
    version: v20210917-12df099d55
    refPaths:
    - path: images/build/cross/cloudbuild.yaml
      match: "name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v[0-9]{8}-[a-z0-9]{10}'"
    - path: images/build/debian-base/cloudbuild.yaml
      match: "name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v[0-9]{8}-[a-z0-9]{10}'"
    - path: images/build/go-runner/cloudbuild.yaml
      match: "name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v[0-9]{8}-[a-z0-9]{10}'"
    - path: images/build/setcap/cloudbuild.yaml
      match: "name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v[0-9]{8}-[a-z0-9]{10}'"
    - path: images/releng/k8s-ci-builder/cloudbuild.yaml
      match: "name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v[0-9]{8}-[a-z0-9]{10}'"

  - name: qemu
    version: 7.2.0-1
    refPaths:
    - path: images/build/distroless-iptables/Makefile
      match: QEMUVERSION
    - path: images/build/setcap/Makefile
      match: QEMUVERSION
    - path: images/build/debian-base/Makefile
      match: QEMUVERSION

  - name: Docker buildx
    version: 0.10.2
    refPaths:
    - path: images/releng/k8s-ci-builder/Dockerfile
      match: DOCKER_BUILDX_VERSION