From be87ac7790e04bf536a1ffb56ffcc703b16c799f Mon Sep 17 00:00:00 2001 From: Sungjin1212 Date: Mon, 9 Nov 2026 13:17:03 +0900 Subject: [PATCH] update build image tag (upgrade Go 1.27.3) Signed-off-by: Sungjin1212 --- .github/workflows/distribution.yml | 2 +- .github/workflows/test-build-deploy.yml | 12 ++++++------ CHANGELOG.md | 2 +- Makefile | 2 +- 4 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/distribution.yml b/.github/workflows/distribution.yml index d8cc5594afa..3609012e221 100644 --- a/.github/workflows/distribution.yml +++ b/.github/workflows/distribution.yml @@ -10,7 +10,7 @@ jobs: build-dist: runs-on: ubuntu-24.04 container: - image: quay.io/cortexproject/build-image:master-7bc8b2491b + image: quay.io/cortexproject/build-image:master-c8b29b5f7b steps: - name: Checkout Repo uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 diff --git a/.github/workflows/test-build-deploy.yml b/.github/workflows/test-build-deploy.yml index fe9396eeecb..f06a3020f6c 100644 --- a/.github/workflows/test-build-deploy.yml +++ b/.github/workflows/test-build-deploy.yml @@ -17,7 +17,7 @@ jobs: lint: runs-on: ubuntu-24.04 container: - image: quay.io/cortexproject/build-image:master-7bc8b2491b + image: quay.io/cortexproject/build-image:master-c8b29b5f7b steps: - name: Checkout Repo uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 @@ -51,7 +51,7 @@ jobs: name: test (${{ matrix.name }}) runs-on: ${{ matrix.runner }} container: - image: quay.io/cortexproject/build-image:master-7bc8b2491b + image: quay.io/cortexproject/build-image:master-c8b29b5f7b steps: - name: Checkout Repo uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 @@ -79,7 +79,7 @@ jobs: name: test-no-race (${{ matrix.name }}) runs-on: ${{ matrix.runner }} container: - image: quay.io/cortexproject/build-image:master-7bc8b2491b + image: quay.io/cortexproject/build-image:master-c8b29b5f7b steps: - name: Checkout Repo uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 @@ -160,7 +160,7 @@ jobs: build: runs-on: ubuntu-24.04 container: - image: quay.io/cortexproject/build-image:master-7bc8b2491b + image: quay.io/cortexproject/build-image:master-c8b29b5f7b outputs: image_tag: ${{ steps.image-tag.outputs.image_tag }} steps: @@ -213,7 +213,7 @@ jobs: name: build-integration-tests (${{ matrix.arch }}) runs-on: ${{ matrix.runner }} container: - image: quay.io/cortexproject/build-image:master-7bc8b2491b + image: quay.io/cortexproject/build-image:master-c8b29b5f7b steps: - name: Checkout Repo uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 @@ -447,7 +447,7 @@ jobs: if: (github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/tags/')) && github.repository == 'cortexproject/cortex' runs-on: ubuntu-24.04 container: - image: quay.io/cortexproject/build-image:master-7bc8b2491b + image: quay.io/cortexproject/build-image:master-c8b29b5f7b steps: - name: Checkout Repo uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 diff --git a/CHANGELOG.md b/CHANGELOG.md index e0c9d72936a..ce7f49cf93e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -11,7 +11,7 @@ * [ENHANCEMENT] gRPC: When `-auth.enabled=true`, a gRPC request without the `X-Scope-OrgID` metadata is now rejected with the `UNAUTHENTICATED` status code instead of `UNKNOWN`. #7873 * [ENHANCEMENT] Upgrade promql-engine and Thanos to latest. #7889 * [ENHANCEMENT] Ruler: Retry a notification the Alertmanager failed to accept with a transport error or a 5xx response, instead of dropping it and leaving its alert undelivered until the next evaluation of the rule group. Enable the retries with `-ruler.notification.backoff-retries` (`0`, no retry, by default), and tune the delay between them with `-ruler.notification.backoff-min-period` and `-ruler.notification.backoff-max-period`. The retries are bounded by `-ruler.notification-timeout` and counted by the new `cortex_ruler_notification_retries_total` metric. #7909 -* [ENHANCEMENT] Update Go version to 1.27.3, which includes security fixes to the `crypto/x509` package (CVE-2026-111943). #7906 +* [ENHANCEMENT] Update Go version to 1.27.3, which includes security fixes to the `crypto/x509` package (CVE-2026-111943). #7906 #7923 * [BUGFIX] Update prometheus alertmanager version to v0.34.1 to apply upstream inhibit rule bug fixes. #7877 * [BUGFIX] Tenant Federation: Fix regex tenant federation not working in single binary mode, and failing with `multiple org IDs present` when a matched tenant ID contains regex metacharacters and also matches other tenants as a regex. #7869 * [BUGFIX] Query Frontend: Fix the data selection time window computed for an instant query sent without a `time` parameter. The default evaluation time was passed to `util.ParseTimeParam` in milliseconds, but that helper formats the default and parses it as seconds, so the value overflowed `UnixNano()` and wrapped to a timestamp decades away from `now`. This made the `data_select_min_time` and `data_select_max_time` query stats wrong, and stopped the `time_window` query attribute of query priority and query rejection from matching such queries correctly. #7880 diff --git a/Makefile b/Makefile index 3bd47ff1b9f..ab9cb50d7b5 100644 --- a/Makefile +++ b/Makefile @@ -111,7 +111,7 @@ build-image/$(UPTODATE): build-image/* SUDO := $(shell docker info >/dev/null 2>&1 || echo "sudo -E") BUILD_IN_CONTAINER := true BUILD_IMAGE ?= $(IMAGE_PREFIX)build-image -LATEST_BUILD_IMAGE_TAG ?= master-7bc8b2491b +LATEST_BUILD_IMAGE_TAG ?= master-c8b29b5f7b # TTY is parameterized to allow Google Cloud Builder to run builds, # as it currently disallows TTY devices. This value needs to be overridden