chore(deps): update alpine docker tag to v3.24#488
Conversation
renovate
Bot
requested review from
ALARGECOMPANY,
biggest-littlest and
scttbnsn
as code owners
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
renovate
Bot
force-pushed
the
renovate/non-major-dockerfile
branch
from
bd9a5bc to
eec681f
Compare
|
Warning Review limit reached
Next review available in: 5 minutes Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available. How can I continue?After more reviews become available, a review can be triggered using the To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews. How do review limits work?CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability. For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window. Please refer docs for additional details. Review details⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (1)
📝 WalkthroughWalkthroughThe Dockerfile's healthcheck-build stage base image was bumped from alpine:3.21 to alpine:3.24, with the corresponding digest updated. No other build steps or exported entities changed. Changes
Sequence Diagram(s)No sequence diagram generated — single-line base image bump, no behavioral flow change. Related issues: None linked in provided context. Related PRs: None linked in provided context. Suggested labels: dependencies, docker, low-risk Suggested reviewers: None specified. Problem: none functionally — single digest/tag bump. Fix: verify the new alpine:3.24 image still supports static musl-based compilation for the healthcheck binary (check for libc/toolchain differences before merging). Poem: 🚥 Pre-merge checks | ✅ 2✅ Passed checks (2 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@Dockerfile`:
- Around line 41-42: The healthcheck-build stage is pinning Alpine packages to
versions that are not available in the Alpine 3.24 repository, causing the apk
add step to fail. Update the package installation in the Dockerfile’s
healthcheck-build stage by removing the exact version pins or replacing them
with versions compatible with Alpine 3.24, keeping the FROM alpine:3.24 base
unchanged.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro Plus
Run ID: 473f9585-a618-4273-9f16-22104ef745c7
📒 Files selected for processing (1)
Dockerfile
| FROM alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b AS healthcheck-build | ||
| RUN apk add --no-cache gcc=14.2.0-r4 musl-dev=1.2.5-r11 |
There was a problem hiding this comment.
🎯 Functional Correctness | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Check whether gcc=14.2.0-r4 and musl-dev=1.2.5-r11 exist in the alpine v3.24 main repo.
curl -s "https://pkgs.alpinelinux.org/package/v3.24/main/x86_64/gcc" | grep -oE 'gcc-[0-9][^<]*' | head -5
curl -s "https://pkgs.alpinelinux.org/package/v3.24/main/x86_64/musl-dev" | grep -oE 'musl-dev-[0-9][^<]*' | head -5Repository: CodesWhat/drydock
Length of output: 195
🏁 Script executed:
#!/bin/bash
set -euo pipefail
# Show the relevant Dockerfile section with line numbers.
sed -n '1,80p' Dockerfile | nl -ba | sed -n '1,80p'
# Check Alpine v3.24 package pages for the pinned packages and current versions.
for pkg in gcc musl-dev; do
echo "== $pkg =="
curl -fsSL "https://pkgs.alpinelinux.org/package/v3.24/main/x86_64/$pkg" \
| tr '\n' ' ' \
| grep -oE "${pkg}-[0-9][^< ]*" \
| head -5
doneRepository: CodesWhat/drydock
Length of output: 195
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "== Dockerfile context =="
awk 'NR>=1 && NR<=80 { printf "%4d %s\n", NR, $0 }' Dockerfile
echo
echo "== Alpine v3.24 package pages =="
for pkg in gcc musl-dev; do
echo "--- $pkg ---"
html="$(curl -fsSL "https://pkgs.alpinelinux.org/package/v3.24/main/x86_64/$pkg")"
printf '%s\n' "$html" | grep -oE "${pkg}-[0-9][^< ]*" | head -10 || true
doneRepository: CodesWhat/drydock
Length of output: 3550
🏁 Script executed:
#!/bin/bash
set -euo pipefail
tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT
curl -fsSL "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/x86_64/APKINDEX.tar.gz" -o "$tmpdir/APKINDEX.tar.gz"
tar -xzf "$tmpdir/APKINDEX.tar.gz" -C "$tmpdir"
echo "== gcc entries =="
awk '
/^P:gcc$/ { pkg=1 }
pkg && /^V:/ { print; pkg=0 }
' "$tmpdir/APKINDEX" | head -5
echo "== musl-dev entries =="
awk '
/^P:musl-dev$/ { pkg=1 }
pkg && /^V:/ { print; pkg=0 }
' "$tmpdir/APKINDEX" | head -5
echo "== exact pins present? =="
grep -q "^P:gcc$" "$tmpdir/APKINDEX" && grep -q "^V:14.2.0-r4$" "$tmpdir/APKINDEX" && echo "gcc 14.2.0-r4 present" || echo "gcc 14.2.0-r4 absent"
grep -q "^P:musl-dev$" "$tmpdir/APKINDEX" && grep -q "^V:1.2.5-r11$" "$tmpdir/APKINDEX" && echo "musl-dev 1.2.5-r11 present" || echo "musl-dev 1.2.5-r11 absent"Repository: CodesWhat/drydock
Length of output: 292
Update the Alpine 3.24 package pins in Dockerfile:41-42
gcc=14.2.0-r4 and musl-dev=1.2.5-r11 are not in Alpine 3.24’s repo, so this apk add will fail and stop the healthcheck-build stage. Drop the pins here or bump them to the 3.24 versions.
Fix
-RUN apk add --no-cache gcc=14.2.0-r4 musl-dev=1.2.5-r11
+RUN apk add --no-cache gcc=15.2.0-r5 musl-dev=1.2.6-r2📝 Committable suggestion
‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.
| FROM alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b AS healthcheck-build | |
| RUN apk add --no-cache gcc=14.2.0-r4 musl-dev=1.2.5-r11 | |
| FROM alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b AS healthcheck-build | |
| RUN apk add --no-cache gcc=15.2.0-r5 musl-dev=1.2.6-r2 |
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@Dockerfile` around lines 41 - 42, The healthcheck-build stage is pinning
Alpine packages to versions that are not available in the Alpine 3.24
repository, causing the apk add step to fail. Update the package installation in
the Dockerfile’s healthcheck-build stage by removing the exact version pins or
replacing them with versions compatible with Alpine 3.24, keeping the FROM
alpine:3.24 base unchanged.
eec681f to
332ec83
Compare
This PR contains the following updates:
3.21→3.24Configuration
📅 Schedule: (in timezone America/New_York)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.