Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 3, 2025

This PR contains the following updates:

Package Update Change
concourse/concourse minor 7.12.1 -> 7.14.2

Release Notes

concourse/concourse (concourse/concourse)

v7.14.2

Compare Source

🛠️ Changes

📦 Bundled Resource Types

v7.14.1

Compare Source

🛠️ Changes

📦 Bundled Resource Types

Full Changelog: concourse/concourse@v7.14.0...v7.14.1

v7.14.0

Compare Source

What's Changed

🦾 Official ARM Build

This is the first release that includes an ARM version of concourse and fly (Linux and macOS). The ARM version of concourse only supports the containerd runtime (See garden/#​378).

🐙 Wolfi-based Images

The concourse/concourse container image and all base resource-types now use Wolfi as their base image. This was done to support building the ARM version of Concourse.

✈️ Features
🐞 Bug Fixes
🛠️ Misc. Changes

New Contributors

📦 Bundled Resource Types

Full Changelog: concourse/concourse@v7.13.2...v7.14.0

v7.13.2

Compare Source

🛠️ Changes

  • Upgraded CNI Plugins to v1.7.1 which should resolve #​9027
  • Upgraded Containerd to v2.1.1
  • Bumped registry-image resource to v1.12.0
    • Pushes multi-arch OCI images correctly now
  • Bumped S3 resource to v2.2.0
    • Fixed more auth related bugs

📦 Bundled resource types

v7.13.1

Compare Source

📦 Bundled resource types

This release only updates the bundled resource-types, specifically the s3 and registry-image resources. Both resources had bugs related to their upgrade to v2 of the AWS Go SDK.

v7.13.0

Compare Source

🚨 Breaking Changes

  • Remove CONCOURSE_POSTGRES_BINARY_PARAMETERS flag (#​9068) @​taylorsilva 🔗
    • BREAKING: Removed the CONCOURSE_POSTGRES_BINARY_PARAMETERS flag. This was a lib/pq specific flag. We are now using Pgx as our Postgresql driver, therefore this flag is no longer relevant. If you are using PgBouncer we recommend being on the latest version (v1.24.0) which now supports prepared statements by default, though any version >1.21.0 may also work. This flag has been removed from both the Helm chart and Bosh release.

✈️ Features

  • Building with Go 1.24.0 (#​9074) @​taylorsilva 🔗

  • go-concourse:connection client prints response body to the end user (#​9011) @​aliculPix4D 🔗

  • improve the error message given to the end user when setting the pipeline (#​9012) @​aliculPix4D 🔗

  • Log policy checker error messages (#​9013) @​aliculPix4D 🔗

    • Log detailed OPA error messages in web nodes logs and show a friendlier error message to the end user
  • Introduce privileged-mode (#​9017) @​A1kmm 🔗

    • Added a new --containerd-privileged-mode/CONCOURSE_CONTAINERD_PRIVILEGED_MODE option to the worker, which accepts full (default, original behaviour), fuse-only (privileged: true tasks can use tools like buildah and podman, but can't escape if user namespaces are used to run the worker), ignore (privileged: true tasks have no extra access compared to privileged: false tasks)
  • pgx Migration (Removing lib/pq) (#​9066) @​taylorsilva 🔗

    • Replace lib/pq with pgx as the Postgresql driver.
      • PgBouncer users: The Pgx driver docs state that its out-of-the-box configuration does not support PgBouncer, but recent discussion indicates that may not be the case if you're using PgBouncer >1.21.0. The recent 1.24.0 release also says prepared statement support is on by default, so this may be a non-issue if you're on the most recent version of PgBouncer.
  • atc: exec: ignore task input/output paths that reference parent directories (#​9078) @​taylorsilva 🔗

    • Task inputs and outputs can be placed using absolute or relative paths inside task containers now. This was changed back in v7.5.0 (#​6597) but never properly announced. Paths that reference parent directories (../) will be treated as relative paths and no parent directory traversal will occur.
  • worker runtime: concurrent process killing (#​9084) @​analytically 🔗

    • Worker runtime: make process killing concurrent for faster container cleanup
  • worker runtime: make container deletion more robust (#​9090) @​taylorsilva 🔗

    • Make container deletion more robust by continuing to delete a container even if we get errors related to reading the containers /etc/host file
  • Mount /sys/fs/cgroup as cgroup2 type if supported (#​9094) @​mariash 🔗

    • Enable cgroupv2 support for the Guardian runtime by mounting /sys/fs/cgroup as cgroup2 type if supported. Requires Garden v1.67.0 or greater
  • fly: improve performance of fly watch (#​9097) @​analytically 🔗

  • Add --team flag to clear-resource-cache command (#​9106) @​IvanChalukov 🔗

  • Add --team flag to containers command (#​9107) @​IvanChalukov 🔗

    • Added --team flag to fly command containers. Use:
      fly -t ci containers --team custom-team
  • Support custom pipeline background image styling (#​9117) @​analytically 🔗

    • Add background_filter option for pipeline background images which takes in string of CSS filters. Defaults to the current filters opacity(30%) grayscale(100%)
  • runtime: Seccomp update (#​9173) @​taylorsilva 🔗

    • Update seccomp profile to be in sync with Docker/Containerd's default profiles
  • CF API v3 is now supported by our fork of Dex which will ensure CF Auth does not break when the CF v2 API is officially gone. Work done by @​Kump3r @​IvanChalukov in concourse/dex#148

  • Add support for Strict-Transport-Security header (#​9076) @​taylorsilva 🔗

  • Add ESC key shortcut to hide keyboard help (#​9111) @​analytically 🔗

    • Can use the Escape key to close the Help menu in the Web UI

🐞 Bug Fixes

  • make sure to drop item from secret cache after default duration if calculated duration is equal or less than 0 (#​9049) @​carlo-blohm 🔗

    • Fix a bug in credential caching where a secret would be cached forever
  • 8529/fix chrome login (#​9051) @​taylorsilva 🔗

    • Have fly handle preflight requests from Chromium browsers. Users will no longer get a "your token could not be sent to fly" error if they login to fly using a Chormium browser
  • Properly close process IO (#​9061) @​taylorsilva 🔗

    • Fix a bug where builds could not be aborted because the underlying process had a lock on stdout that Concourse would wait for the process to release. If the underlying process never released it then Concourse would wait forever and the build would never be aborted.
  • fix the policy-checker-handler logger session name (#​9081) @​aliculPix4D 🔗

  • Fix bug in maxValidFromFile using hardcoded path (#​9082) @​analytically 🔗

  • Use github.com/google/uuid to generate UUIDv4 (#​9083) @​taylorsilva 🔗

    • Use github.com/google/uuid to generate UUID's (v4). The previous library incorrectly implemented UUID generation and would sometimes generate the same UUID twice. Therefore it was possible for two containers or volumes to be created with the same UUID. The second container/volume would fail to create due to the UUID collision.
  • atc: Various small fixes (#​9092) @​taylorsilva 🔗

    • Fix unbounded goroutine creation in resource scanner (lidar)
    • Fix potential race condition in Tracker.IterateInterpolatedCreds
    • Optimize SequenceGenerator using atomic types
    • Fix error message in container placement strategy. Previously an unknown placement strategy would result in an error which showed the successfully parsed part of the chain. Now the error will show the unknown strategy that was passed in.
    • Fix: redirect var source diffs to output writer & improve nil handling
  • CI: only run baggageclaimcmd test on linux (#​9093) @​taylorsilva 🔗

  • Gracefully recover from containerd TaskNotFound errors (#​9100) @​taylorsilva 🔗

    • Gracefully recover from task retrieval: no running task found errors
  • Fix --team flag in order-pipelines command (#​9102) @​IvanChalukov 🔗

    • Fix order-pipelines command with --team Option
  • web: avoid duplicate in-memory checks (#​9103) @​taylorsilva 🔗

  • Fix: Preserve existing browser session during fly login (#​9109) @​IvanChalukov 🔗

    • Fix: Corrected CSRF token header format for proper validation.
  • Fix fish shell completion generation (#​9113) @​analytically 🔗

🤷 Miscellaneous

📦 Bundled resource types


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/concourse-concourse-7.x branch from c9c64a1 to 26422a6 Compare April 9, 2025 17:51
@renovate renovate bot changed the title chore(deps): update dependency concourse/concourse to v7.13.0 chore(deps): update dependency concourse/concourse to v7.13.1 Apr 9, 2025
@renovate renovate bot changed the title chore(deps): update dependency concourse/concourse to v7.13.1 chore(deps): update dependency concourse/concourse to v7.13.2 May 23, 2025
@renovate renovate bot force-pushed the renovate/concourse-concourse-7.x branch from 26422a6 to b9777e1 Compare June 10, 2025 12:13
@renovate renovate bot force-pushed the renovate/concourse-concourse-7.x branch from b9777e1 to 835c486 Compare June 18, 2025 12:21
@renovate renovate bot force-pushed the renovate/concourse-concourse-7.x branch from 835c486 to 0828450 Compare July 22, 2025 15:49
@renovate renovate bot force-pushed the renovate/concourse-concourse-7.x branch 6 times, most recently from 5787da1 to b772c8a Compare August 6, 2025 11:46
@renovate renovate bot force-pushed the renovate/concourse-concourse-7.x branch from b772c8a to cd7eb4d Compare August 12, 2025 16:11
@renovate renovate bot changed the title chore(deps): update dependency concourse/concourse to v7.13.2 chore(deps): update dependency concourse/concourse to v7.14.0 Aug 12, 2025
@renovate renovate bot force-pushed the renovate/concourse-concourse-7.x branch from cd7eb4d to 78af733 Compare August 18, 2025 23:47
@renovate renovate bot changed the title chore(deps): update dependency concourse/concourse to v7.14.0 chore(deps): update dependency concourse/concourse to v7.14.1 Aug 18, 2025
@renovate renovate bot force-pushed the renovate/concourse-concourse-7.x branch from 78af733 to dadd110 Compare August 28, 2025 15:37
@renovate renovate bot force-pushed the renovate/concourse-concourse-7.x branch from dadd110 to a83ddbc Compare October 7, 2025 03:26
@renovate renovate bot changed the title chore(deps): update dependency concourse/concourse to v7.14.1 chore(deps): update dependency concourse/concourse to v7.14.2 Oct 7, 2025
@renovate renovate bot force-pushed the renovate/concourse-concourse-7.x branch 5 times, most recently from 55fb72c to a0ebab4 Compare October 14, 2025 16:41
@renovate renovate bot force-pushed the renovate/concourse-concourse-7.x branch from a0ebab4 to d7770be Compare October 21, 2025 13:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

1 participant