Make sure all alpine packages are updated to their latest versions.

[othomann]

Changes

Make sure all alpine packages are updated to their latest versions.

Submitter Checklist

These are the criteria that every PR should meet, please check them off as you
review them:

• [n/a ] Includes tests (if functionality changed/added)
• [n/a] Includes docs (if user facing)
• [n/a] Commit messages follow commit message best practices

See the contribution guide for more details.

Double check this list of stuff that's easy to miss:

• If you are adding a new binary/image to the cmd dir, please update
  the release Task to build and release this image.

Reviewer Notes

If API changes are included, additive changes must be approved by at least two OWNERS and backwards incompatible changes must be approved by more than 50% of the OWNERS, and they must first be added in a backwards compatible way.

Release Notes

Future releases won't include vulnerabilities fixed in the alpine packages but not yet built into the alpine:latest docker image.

[tekton-robot]

Hi @othomann. Thanks for your PR.

I'm waiting for a tektoncd member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[vdemeester]

@othomann thanks for the PR, can you update the commit message to add the description instead of the message Fix … ?

Make sure all alpine packages are updated to their latest versions.

The git commit title and description should contains what the commit does, not which issue number it fixes (in case we would use something else that GitHub in the future, or…)

[vdemeester]

/ok-to-test

[bobcatfish]

To expand on @vdemeester 's request, a few more things:

• Usually the title of the PullRequest will describe the change, e.g. in this case maybe "Make sure all alpine packages are updated to their latest versions."
• These are the commit message guidelines, as he mentioned the commit message should be descriptive: https://github.com/tektoncd/community/blob/master/standards.md#commit-messages
• The "release notes" section is intended for you to fill in with anything that is relevant in future releases - in this case you might say something about how future releases won't include such and such vulnerabilities

[vdemeester]

/lgtm

[tekton-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: vdemeester

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [vdemeester]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[othomann]

/retest

[othomann]

@vdemeester I added a new line at the end of the Dockerfile. I cannot explain why the integration tests are failing with only this change.

[vdemeester]

@othomann might be flakyness 😓

[othomann]

the lgtm flag has been removed because of my latest change (addition of an empty line at the end of the Dockerfile).

[othomann]

@vdemeester all tests are green now.

[chmouel]

/lgtm

[othomann]

Not sure why the pipeline build tests now reports:

I0109 19:19:45.108] ===============================
I0109 19:20:32.325] pkg/client/resource/informers/externalversions/generic.go:54:2: singleCaseSwitch: should rewrite switch statement to if statement (gocritic)
I0109 19:20:32.326] 	switch resource {
I0109 19:20:32.326] 	^
I0109 19:20:32.429] ============================

[othomann]

/test pull-tekton-pipeline-build-tests