Skip to content

Automated update for image history#1821

Open
Kaniska244 wants to merge 4 commits intomainfrom
automated-update-for-image-history-23750163498
Open

Automated update for image history#1821
Kaniska244 wants to merge 4 commits intomainfrom
automated-update-for-image-history-23750163498

Conversation

@Kaniska244
Copy link
Copy Markdown
Contributor

Automated update for image history

@Kaniska244 Kaniska244 requested a review from a team as a code owner March 30, 2026 20:16
Copilot AI review requested due to automatic review settings March 30, 2026 20:16
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Automates the routine refresh of devcontainer image “history” markdowns to reflect newly built image digests and updated tool/runtime versions, and updates cgmanifest.json to match current component versions.

Changes:

  • Updated image digests and reported tool/runtime versions across multiple src/*/history/dev.md files (Node/TypeScript, Python, Go, Java, .NET, etc.).
  • Updated Go image history to include new 1.26 variants and remove older 1.24 entries.
  • Refreshed cgmanifest.json component registrations (e.g., pip/npm/go/cargo versions, git/Oh My Zsh/vcpkg commits) and removed the Yarn registration.

Reviewed changes

Copilot reviewed 19 out of 19 changed files in this pull request and generated 3 comments.

Show a summary per file
File Description
src/universal/history/dev.md Refreshes Universal image digest/tool versions; includes updated runtime and tool inventory.
src/typescript-node/history/dev.md Updates digests and Node/TypeScript + tool/package versions for each variant.
src/rust/history/dev.md Updates digests and Rust toolchain versions across variants.
src/python/history/dev.md Updates digests and Python versions across variants; refreshes tool inventories.
src/php/history/dev.md Updates digests and PHP/Xdebug/Composer versions across variants.
src/miniconda/history/dev.md Updates digest and conda/Python-related tool versions.
src/jekyll/history/dev.md Updates digests and Ruby/Bundler/tool versions across variants.
src/javascript-node/history/dev.md Updates digests and Node/eslint + tool/package versions across variants.
src/java/history/dev.md Updates digests and Java versions across variants.
src/java-8/history/dev.md Updates digests and Java 8 version reporting for trixie/bookworm variants.
src/go/history/dev.md Adds/updates 1.26 variants, refreshes tool versions, removes 1.24 sections.
src/dotnet/history/dev.md Updates digests and .NET SDK versions across variants.
src/cpp/history/dev.md Updates digests and tool/package inventory across variants.
src/base-ubuntu/history/dev.md Updates digest and Ubuntu base package/tool versions.
src/base-debian/history/dev.md Updates digests and Debian base package/tool versions across variants.
src/base-alpine/history/dev.md Updates digests and Alpine package inventory across variants.
src/anaconda/history/dev.md Updates digest and conda Python/Jupyter package versions.
cgmanifest.json Refreshes component registration versions/commits and removes Yarn registration.

Comment on lines 1 to 5
{
"Registrations": [
{
"Component": {
"Type": "linux",
"Linux": {
"Name": "yarn",
"Version": "1.22.22-1",
"Distribution": "debian",
"Release": "12",
"Pool-URL": "https://dl.yarnpkg.com/debian",
"Key-URL": "https://dl.yarnpkg.com/debian/pubkey.gpg"
}
}
},
{
"Component": {
"Type": "Pip",
Copy link

Copilot AI Mar 30, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cgmanifest.json no longer registers Yarn as a component, but src/universal/history/dev.md still lists Yarn (via Corepack) in the image contents. For compliance/traceability, these should be consistent.

Either remove Yarn from the Universal history if it’s not actually shipped, or add an appropriate Yarn/Corepack component registration (reflecting how Yarn is delivered) back into the manifest.

Copilot uses AI. Check for mistakes.
Kaniska244 and others added 2 commits April 2, 2026 19:08
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@Kaniska244
Copy link
Copy Markdown
Contributor Author

Hi @abdurriq

Changes incorporated. The JSON linter is failing with ESLint configuration issue which I have fixed as part of PR

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 19 out of 19 changed files in this pull request and generated 1 comment.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 19 out of 19 changed files in this pull request and generated 4 comments.

| Tool | Version | Path |
|------|---------|------|
| [git](https://github.com/git/git) | 2.52.0 |
| [git](https://github.com/git/git) | 2.39.5 |
Copy link

Copilot AI Apr 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For the rust bookworm variant, the history reports git 2.39.5, but other bookworm-based images in this repo (e.g., src/base-debian/history/dev.md) report git 2.53.0 while still listing the distro git package separately. Please verify the intended git version for this image and ensure the “Other tools and utilities” git version is consistent with the repo-wide convention/output.

Suggested change
| [git](https://github.com/git/git) | 2.39.5 |
| [git](https://github.com/git/git) | 2.53.0 |

Copilot uses AI. Check for mistakes.
"Type": "other",
"Other": {
"Name": "git",
"Version": "2.39.5",
Copy link

Copilot AI Apr 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cgmanifest.json now includes an additional “git” component at version 2.39.5, while it already registers git 2.53.0 elsewhere. Unless there are distinct images actually shipping different git binaries, this looks like an accidental duplicate/mis-version that can make the SBOM ambiguous. Please confirm the correct git versions per image and de-duplicate or scope these registrations accordingly.

Suggested change
"Version": "2.39.5",
"Version": "2.53.0",

Copilot uses AI. Check for mistakes.
| Tool | Version | Path |
|------|---------|------|
| [git](https://github.com/git/git) | 2.52.0 |
| [git](https://github.com/git/git) | 2.53.0 |
Copy link

Copilot AI Apr 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The Alpine history reports git as 2.53.0 here, but the “Additional linux tools and packages” section lists the git package as 2.52.0-r0. Please ensure the history-generation reports the version of the git binary actually present in the image (and keep it consistent with the package list).

Suggested change
| [git](https://github.com/git/git) | 2.53.0 |
| [git](https://github.com/git/git) | 2.52.0 |

Copilot uses AI. Check for mistakes.
Comment on lines 1 to 5
{
"Registrations": [
{
"Component": {
"Type": "linux",
"Linux": {
"Name": "yarn",
"Version": "1.22.22-1",
"Distribution": "debian",
"Release": "12",
"Pool-URL": "https://dl.yarnpkg.com/debian",
"Key-URL": "https://dl.yarnpkg.com/debian/pubkey.gpg"
}
}
},
{
"Component": {
"Type": "Pip",
Copy link

Copilot AI Apr 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cgmanifest.json no longer contains a Yarn component registration, but src/universal/history/dev.md still lists Yarn as included. Please either restore the Yarn registration (if it’s still shipped, e.g. via Corepack) or remove Yarn from the generated history so SBOM and docs stay consistent.

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants