-
Notifications
You must be signed in to change notification settings - Fork 237
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Updates "outdated" command to display stale image versions #768
base: main
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This will be a great addition! Left a few comments.
__dolve |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good! Left a comment for a small correction, approving now.
const wantedVersion = latestVersion.split('.').slice(0, version.split('.').length).join('.'); | ||
const wantedTag = tagSuffix ? `${wantedVersion}-${tagSuffix}` : wantedVersion; | ||
const latestVersion = latestSemVersion.split('.').slice(0, version.split('.').length).join('.'); | ||
const wantedTag = tagSuffix ? `${latestVersion}-${tagSuffix}` : latestVersion; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nit: Should this be latestTag
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Update
Recently, we integrated Dependabot and Dev Containers where we get PRs to update
versions
for stale Features.Similarly, for the devcontainer/images, we have been worried of bumping a major version of an image because folks could be left behind on stale images (which doesn't receive security patches). Currently, we don't have a good way of alerting the community when a new image version becomes available (besides putting up notices and announcing in the community channels). Out of public repos, 2600 dev containers are using the stale
mcr.microsoft.com/devcontainers/python
image (older major version which ww don’t support).Hence, this PR updates the
outdated
command to include the stale image versions. It looks for the.devcontainer.json
file, and looks for corresponding images in.devcontainer.json
, Dockerfiles or Compose files (based on the dev container structure)The
outdated
command currently supports only the images hosted from https://github.com/devcontainers/images. Reasoning: I looked at some popular images (eg. python, node, go, php etc), however, they don’t use semantic versioning. Hence, doesn’t make sense to implement for them.Example - Image pinned to semver
Example - Image pinned to major and major.minor