From 71a08ae9c7908fbe3599f1acb07ee1d3b122a91f Mon Sep 17 00:00:00 2001 From: Miguel Martinez Trivino Date: Thu, 27 Aug 2026 00:09:52 +0200 Subject: [PATCH] fix(migrations): upgrade atlas image to v1.3.2 to clear Go CVEs Bump the pinned arigaio/atlas image used by the control-plane migrations container from v1.2.3-97b7881-canary to the v1.3.2 stable release, which is built with an updated Go toolchain and dependencies. Also align the ATLAS_VERSION used to install the atlas CLI in common.mk and the test workflow with the same release. Assisted-by: Claude Code Signed-off-by: Miguel Martinez Trivino Chainloop-Trace-Sessions: 3b0034ff-20f8-4a32-9614-ff00d93fdb95 --- .github/workflows/test.yml | 2 +- app/controlplane/Dockerfile.migrations | 8 ++++---- common.mk | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index bae8fafb1..5e6ad0413 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -44,7 +44,7 @@ jobs: - name: Generate migrations if: ${{ matrix.app == 'controlplane' }} env: - ATLAS_VERSION: v1.2.0 + ATLAS_VERSION: v1.3.2 run: | wget -q https://release.ariga.io/atlas/atlas-linux-amd64-$ATLAS_VERSION -O /tmp/atlas sudo install /tmp/atlas /usr/local/bin/atlas diff --git a/app/controlplane/Dockerfile.migrations b/app/controlplane/Dockerfile.migrations index 863622fa8..e9d9e7bf4 100644 --- a/app/controlplane/Dockerfile.migrations +++ b/app/controlplane/Dockerfile.migrations @@ -1,9 +1,9 @@ # Container image built by go-releaser that's used to run migrations against the database during deployment # See https://atlasgo.io/guides/deploying/image -# from: arigaio/atlas:latest (v1.2.3-97b7881-canary) -# docker run arigaio/atlas@sha256:7470216c7ecc93db7a51d895fbc9c3e7d3885763c424f07d115b1da9410256bb version -# atlas version v1.2.3-97b7881-canary -FROM arigaio/atlas@sha256:7470216c7ecc93db7a51d895fbc9c3e7d3885763c424f07d115b1da9410256bb as base +# from: arigaio/atlas:1.3.2 +# docker run arigaio/atlas@sha256:1e4fe2e242281555f8fc41a95f09b94ccd47f85ee3a6bc1e808e1e48d27e4b39 version +# atlas version v1.3.2 +FROM arigaio/atlas@sha256:1e4fe2e242281555f8fc41a95f09b94ccd47f85ee3a6bc1e808e1e48d27e4b39 as base FROM scratch # Update permissions to make it readable by the user diff --git a/common.mk b/common.mk index c09e814f3..a5df2d3ab 100644 --- a/common.mk +++ b/common.mk @@ -9,7 +9,7 @@ init: init-api-tools # in the community version anymore https://github.com/ariga/atlas/issues/2388#issuecomment-1864287189 # install golangci-lint with Go 1.25 support curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $$(go env GOPATH)/bin v2.4.0 - curl -sSf https://atlasgo.sh | ATLAS_VERSION=v1.2.0 sh -s -- -y + curl -sSf https://atlasgo.sh | ATLAS_VERSION=v1.3.2 sh -s -- -y # initialize API tooling .PHONY: init-api-tools