Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tempo/2.7.0 package update #39434

Merged
merged 2 commits into from
Jan 14, 2025

Conversation

octo-sts[bot]
Copy link
Contributor

@octo-sts octo-sts bot commented Jan 13, 2025

@octo-sts octo-sts bot added request-version-update request for a newer version of a package automated pr P1 This label indicates our scanning found High, Medium or Low CVEs for these packages. labels Jan 13, 2025
Copy link
Contributor Author

octo-sts bot commented Jan 13, 2025

⚠️ EXPERIMENTAL

Please use 👍 or 👎 on this comment to indicate if you agree or disagree with the recommendation.

To provide more detailed feedback please comment on the recommendation prefixed with /ai-verify:

e.g. /ai-verify partially helpful but I also added bash to the build environment

Gen AI suggestions to solve the build error:

• Detected Error: "go: go.mod requires go >= 1.23.3 (running go 1.22.10; GOTOOLCHAIN=local)"

• Error Category: Version/Dependency

• Failure Point: Go version compatibility check during build

• Root Cause Analysis: The package requires Go 1.23.3 or higher according to the go.mod file, but the build environment is using Go 1.22.10. This version mismatch is preventing the build from proceeding.

• Suggested Fix:

  1. Update the go dependency in the melange.yaml file:
environment:
  contents:
    packages:
      - build-base
      - busybox
      - ca-certificates-bundle
      - go-1.23   # Update from go-1.22

• Explanation: The error is occurring because Tempo v2.7.0 has updated its Go requirements to version 1.23.3 or higher. The current melange.yaml is specifying go-1.22 which is too old. Updating to go-1.23 will provide a compatible Go version for building.

• Additional Notes:

  • The changelog mentions "Update Go to 1.23.3" as a change in Tempo v2.7.0
  • If go-1.23 isn't available in the Wolfi package repository yet, you may need to:
    a) Wait for go-1.23 to be available in Wolfi
    b) Pin to an older version of Tempo that supports Go 1.22
    c) Request go-1.23 to be added to Wolfi

• References:

@octo-sts octo-sts bot added the ai/skip-comment Stop AI from commenting on PR label Jan 13, 2025
@hbh7 hbh7 self-assigned this Jan 13, 2025
@octo-sts octo-sts bot added the bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. label Jan 13, 2025
@hbh7 hbh7 requested a review from a team January 13, 2025 22:43
@philroche philroche merged commit 2c00af9 into main Jan 14, 2025
14 checks passed
@philroche philroche deleted the wolfictl-f86d559b-d0ff-460f-8993-6bd859cca40d branch January 14, 2025 11:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ai/skip-comment Stop AI from commenting on PR automated pr bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. manual/review-needed P1 This label indicates our scanning found High, Medium or Low CVEs for these packages. request-version-update request for a newer version of a package
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants