Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump taskcluster from 68.0.4 to 81.0.3 in /tools #50848

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 20, 2025

Bumps taskcluster from 68.0.4 to 81.0.3.

Release notes

Sourced from taskcluster's releases.

v81.0.3

GENERAL

▶ [patch] #7532 Generic Worker (windows): fix cache ownership issues. Clean up ACLs so prior task users aren't referenced anymore.

USERS

▶ [patch] #5727 Fixes an issue introduced in Generic Worker 81.0.0 where the Chain of Trust certificate would not contain all of the additional data specified in the task-provided chain-of-trust-additional-data.json file.

Generic Worker 81.0.0 enhanced the Chain of Trust task payload feature to support adding arbitrary additional data to the public/chain-of-trust.json artifact. This was implemented in [PR #7507](taskcluster/taskcluster#7507) by allowing the task to write additional data to the file chain-of-trust-additional-data.json in the task directory. The feature was meant to merge the content of this file with the generated chain-of-trust.json file before publishing it as an artifact. However, the merge of the two json objects was broken if they contained common ancestors. For example, the generated chain-of-trust.json file contains a top level object property environment. If the task-provided chain-of-trust-additional-data.json file also contained a top level object property environment containing further properties, they would be omitted from the resulting environment property in the published Chain of Trust certificate.

▶ [patch] #7014 Generic Worker now adds environment.imageHash (always), and environment.imageArtifactHash (when present) to public/chain-of-trust.json when running Docker Worker Chain of Trust tasks, to match Docker Worker behaviour.

DEVELOPERS

▶ [patch] #7479 Add a way to update d2g test expectations by setting the D2G_UPDATE_TEST_EXPECTATIONS environment variable while running tests

v81.0.2

WORKER-DEPLOYERS

▶ [patch] #7521 Generic Worker: fixes an issue introduced in v81.0.0 where TASK_USER_CREDENTIALS env var wasn't written to the task's environment if task.payload.features.runTaskAsCurrentUser was enabled.

Automated Package Updates

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v81.0.3

GENERAL

▶ [patch] #7532 Generic Worker (windows): fix cache ownership issues. Clean up ACLs so prior task users aren't referenced anymore.

USERS

▶ [patch] #5727 Fixes an issue introduced in Generic Worker 81.0.0 where the Chain of Trust certificate would not contain all of the additional data specified in the task-provided chain-of-trust-additional-data.json file.

Generic Worker 81.0.0 enhanced the Chain of Trust task payload feature to support adding arbitrary additional data to the public/chain-of-trust.json artifact. This was implemented in [PR #7507](taskcluster/taskcluster#7507) by allowing the task to write additional data to the file chain-of-trust-additional-data.json in the task directory. The feature was meant to merge the content of this file with the generated chain-of-trust.json file before publishing it as an artifact. However, the merge of the two json objects was broken if they contained common ancestors. For example, the generated chain-of-trust.json file contains a top level object property environment. If the task-provided chain-of-trust-additional-data.json file also contained a top level object property environment containing further properties, they would be omitted from the resulting environment property in the published Chain of Trust certificate.

▶ [patch] #7014 Generic Worker now adds environment.imageHash (always), and environment.imageArtifactHash (when present) to public/chain-of-trust.json when running Docker Worker Chain of Trust tasks, to match Docker Worker behaviour.

DEVELOPERS

▶ [patch] #7479 Add a way to update d2g test expectations by setting the D2G_UPDATE_TEST_EXPECTATIONS environment variable while running tests

v81.0.2

WORKER-DEPLOYERS

▶ [patch] #7521 Generic Worker: fixes an issue introduced in v81.0.0 where TASK_USER_CREDENTIALS env var wasn't written to the task's environment if task.payload.features.runTaskAsCurrentUser was enabled.

Automated Package Updates

... (truncated)

Commits
  • da740f7 v81.0.3
  • 0468467 Merge pull request #7510 from taskcluster/issue7014
  • 8ace379 Issue 7014: Add Generic Worker D2G Chain of Trust tests
  • 006425b Issue 7014: Update D2G lexical tests
  • daf8f6b Issue 7014: D2G: Store imageHash/imageArtifactHash in CoT cert
  • c5713cf Rename D2G tests to have prefix TestD2G
  • 474dbb3 Merge pull request #7534 from taskcluster/matt-boris/gwFixWindowsCaches
  • 04df4ec fix(generic-worker): clean up cache ACLs and fix permission issues on windows
  • 923694c Merge pull request #7515 from Eijebong/d2g-expectations-auto-update
  • f83f71b Merge branch 'main' into d2g-expectations-auto-update
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [taskcluster](https://github.com/taskcluster/taskcluster) from 68.0.4 to 81.0.3.
- [Release notes](https://github.com/taskcluster/taskcluster/releases)
- [Changelog](https://github.com/taskcluster/taskcluster/blob/main/CHANGELOG.md)
- [Commits](taskcluster/taskcluster@v68.0.4...v81.0.3)

---
updated-dependencies:
- dependency-name: taskcluster
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ci dependencies Pull requests that update a dependency file infra python Pull requests that update Python code requirements_tests.txt
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants