Skip to content

feat: bump pulp-repo-versions.yml - 2026.1 - #2714

Closed
jackhodgkiss wants to merge 7 commits into
stackhpc/2026.1from
2026.1/pulp-repo-20261026095430
Closed

jackhodgkiss wants to merge 7 commits into
stackhpc/2026.1from
2026.1/pulp-repo-20261026095430

Conversation

@jackhodgkiss

Copy link
Copy Markdown
Contributor

No description provided.

@jackhodgkiss
jackhodgkiss requested a review from a team as a code owner October 26, 2026 09:54
@github-actions github-actions Bot added the waiting-review PR is waiting for a review label Oct 26, 2026
@coderabbitai

coderabbitai Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

Important

Review skipped

Auto incremental reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
Walkthrough

The pull request updates timestamps for selected Pulp repository versions and adds a release note that states the update was made in response to recent CVEs.

Changes: Pulp repository version update

Layer / File(s) Summary
Update repository versions
etc/kayobe/pulp-repo-versions.yml, releasenotes/notes/*
Timestamps changed for selected Docker CE Ubuntu Noble, EPEL 10, Grafana, RHEL 9 RabbitMQ Erlang, Rocky Linux 10.2 and Ubuntu repositories. A release note records the version update.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~4 minutes

Possibly related PRs

Merge Risk: Low · previous review 78e2b

The change is otherwise low risk, but the release note should accurately identify the updated file.

Pre-merge checks: Passed 3
Check name Status Explanation
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (2 skipped: 2 unsupported.)

  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1


Review info
Run configuration
Commits

Reviewing files that changed from the base of the PR and between 0a15957 and 78e2bcb.

Files selected for processing: 2
  • etc/kayobe/pulp-repo-versions.yml
  • releasenotes/notes/bump-pulp-repo-versions-d6b7ea30b037defd.yaml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

@jackhodgkiss
jackhodgkiss force-pushed the 2026.1/pulp-repo-20261026095430 branch from 78e2bcb to d8956b7 Compare October 26, 2026 11:16
@jackhodgkiss
jackhodgkiss force-pushed the 2026.1/pulp-repo-20261026095430 branch from b60d3c2 to f1c7ed8 Compare October 26, 2026 15:27
@jackhodgkiss jackhodgkiss changed the title feat: bump pulp-repo-versions.yml feat: bump pulp-repo-versions.yml - 2026.1 Oct 26, 2026
jovial
jovial previously approved these changes Oct 27, 2026
@jackhodgkiss
jackhodgkiss marked this pull request as draft October 27, 2026 10:44
@github-actions github-actions Bot added waiting-author-response PR is waiting for the author to respond and removed waiting-review PR is waiting for a review labels Oct 27, 2026
Signed-off-by: Jack Hodgkiss <jack@stackhpc.com>
Signed-off-by: Jack Hodgkiss <jack@stackhpc.com>
Allow `opensearch-dashboard` to be built with `GHSA-cg2g-xh64-v4q7` as
the exploit requires privileged access to perform. However, new images
will be made available at the earliest possible convenience.

Signed-off-by: Jack Hodgkiss <jack@stackhpc.com>
Permit a series of `Horizon` vulnerabilities tied to `pillow` python
package;
  - CVE-2026-112393
  - CVE-2026-112398
  - CVE-2026-112403
  - CVE-2026-112900
  - CVE-2026-96639

New image will be provided once `pillow v13` has been tested.

Signed-off-by: Jack Hodgkiss <jack@stackhpc.com>
All `kolla` images have been rebuilt in response to the comprimised
intermediate certificate authorities.

https://access.redhat.com/security/vulnerabilities/RHSB-2026-012

Signed-off-by: Jack Hodgkiss <jack@stackhpc.com>
@jackhodgkiss
jackhodgkiss force-pushed the 2026.1/pulp-repo-20261026095430 branch from 2de6899 to 59b72e3 Compare October 27, 2026 11:56
Signed-off-by: Jack Hodgkiss <jack@stackhpc.com>
Due to change of naming convention in `centos.org` IPA image builds fail
for `x86_64` architecture. Therefore, we need to use an updated
upper-constraints file until this has been resolved directly in
`openstack/requirements`

Signed-off-by: Jack Hodgkiss <jack@stackhpc.com>

This branch had an error being deployed

1 failed deployment
SMS Lab — 8b1edaa7 Deployed Oct 29, 2026 by jackhodgkiss via Build IPA images (x86_64) #165
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

waiting-author-response PR is waiting for the author to respond

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants