Skip to content

[pull] stable-f44 from main - #2563

Closed
pull[bot] wants to merge 78 commits into
stable-f44from
main
Closed

[pull] stable-f44 from main#2563
pull[bot] wants to merge 78 commits into
stable-f44from
main

Conversation

@pull

@pull pull Bot commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

ubot-7274 Bot and others added 30 commits July 1, 2026 05:02
…digest to 51c7b27 (#2475)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to e7338ae (#2479)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 9c79b8a (#2481)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 97ae835 (#2486)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to a93e788 (#2488)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 390a9dc (#2490)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: inffy <10782843+inffy@users.noreply.github.com>
This didn't break anything in CI, this is why this went unnoticed.

fixup of cfd014f.
…t to c00fc6b (#2494)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 59c7dc8 (#2500)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
taken from blue-build[1], this also happens to make updates smaller by
100MB. Might fix the following issues like [2] and [3]. I could not
reproduce these issues myself and just using chunkah made it possible
for me to overlay firefox with rpm-ostree.

[1]: blue-build/cli@b6f36bd
[2]: #2209
[3]: #2492

Co-authored-by: Daniel Hast <32797673+HastD@users.noreply.github.com>
If you specified --kernel-pin from cli it will now correctly verify and
donwload the right version (instead of the newest one), if it's
specified in the Justfile and CLI then CLI wins.

The pin that is always set to an empty string would override it.
* feat(ci): rootless CI

26.04 runners use sudo-rs, which does not support this flag. It doesn't
seem to have broken too much, Only thing I could see is the github token
not being passed to the build.

```
sudo: preserving the entire environment is not supported, '-E' is ignored
```

So this is a good time to move over to a rootless CI I guess.

* chore: unset target-dir for container-storage-action

This defaults to the user container storage
* fix(just): disk-image recipe

follow up of: cfd014f

* run recipe as root in CI

* fix: do load-rootful before disk-image
The --retry flags for podman/buildah pull/build do not seem to do
anything on transient network issues. Notably our base image pull from
quay is failing quite often, this should make this less likely to
happen in the future.

fixes: #2381
xref: #2337
* feat(ci): package cache with OCI artifacts

We are hitting a couple limitations in regards to actions/cache [1] with
our new testing branch workflow, as we previously relied on scheduled
builds from the main branch, which we no longer do with this model.

Now we make new cache on merge_group on the first build on Sundays, I
chose Sundays just because. Which means we run only a single build with
no cache per week and use that same build to generate a new fresh cache.

Else we would end up with 3 versions of vscode in our cache.
There is no point uploading cache on *every* PR.

For simplicity sake this has no handling/differentiation for our stable
and main branch. When we bump the fedora version of our main/testing
images then the cache for stable will just get stale.

We are mixing root/rootless usage of oras/cosign, I made it use root or
else we will get premission issues.

[1]: actions/cache#1537

fixes: #2351

* define blessed day

* chore: remove command -v prefixes

not needed, running everything rootless now
…ee15 (#2509)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 92c80b6 (#2510)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to b85b98e (#2512)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to dbcd1f0 (#2515)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 3889933 (#2516)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 050d2dd (#2518)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 0e3dabc (#2521)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…bc94 (#2525)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
we haven't used this for over a year, might as well remove it.

This used to be needed in a time before we had renovate, before the
bluefin split, we build way less images now in general and also latest
and stable do not build from the main branch anymore.
renner0e and others added 4 commits July 18, 2026 06:35
These are already included in our base image as configuration files,
there is no need to specify them on the cli again.

See: https://gitlab.com/fedora/ostree/ci-test/-/blob/5f1f192f007b2a7049d027b967b4ed58a0454143/initramfs.yaml
This is needed to display characters like: ꨄ.
…digest to 770d609 (#2577)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…d832 (#2576)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
ubot-7274 Bot and others added 24 commits July 20, 2026 05:01
…digest to d8bbff5 (#2582)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
* chore(deps): update actions/checkout digest to 3d3c42e

* chore: use full tags for actions/checkout

---------

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: renner <renner0@posteo.de>
The libdnf5 package owns various files under /usr/lib/sysimage/libdnf5
that are getting generated during the build, for instance, the
transaction history (dnf history list), which changes with every build
due to timestamps and package versions.

This means that every single image build has a unique libdnf5 package,
which results in every update unnecessarily downloading it, although
nothing that we care about changed.

dnf history is not useful here; you can look in the build logs if you
really wanted to see what transactions are being done. On the client
side, things like dnf history undo don't work or are largely not the
right tool for the job in custom image builds.

xref: #2579
…digest to fb1e601 (#2589)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
* chore(ci): add gh token to release generator

Seems we need to pass the token to gh cli in workflows too

https://github.com/ublue-os/aurora/actions/runs/29793388914/job/88563341082#step:7:13

* consistency

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
…t to 222e448 (#2592)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: renner <80410025+renner0e@users.noreply.github.com>
When you make a PR to aurora on a Sunday before the daily renovate bump
kicked off (POINT=1) (before 4AM UTC) then this run would not have any
cache.

PRs always should have cache.
…digest to 91a2029 (#2599)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 686b3b8 (#2601)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
)

* chore(deps): update github/codeql-action digest to e064762

* set proper version

---------

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: renner <renner0@posteo.de>
…digest to aa63217 (#2607)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to a89ec80 (#2609)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to 8ea3db2 (#2614)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…digest to f737d3b (#2617)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Stable builds are currently failing because of this
* feat: delete /run leftovers from the image

This is to make bootc container lint happy.

We should probably make warnings fatal so we fix new offenders.

Related: bootc-dev/bootc#2051

* chore: remove unused rm

No idea why this is here, probably some super old leftover.

* do dx specific things as well
…digest to 4825b41 (#2623)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…a0f6 (#2621)

Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
* feat: add ZFS deprecation notifier

This will spawn a one-time notification that has to be dismissed by the
user if ZFS is being used.

xref: #1765
resolves: #2210

* fix typo

* be more explicit in msg

Co-authored-by: Adam Fidel <ledif@users.noreply.github.com>

* run it always every week

The chance that people will see it are way bigger this way.

* only actually enable on systems that have ship zfs

---------

Co-authored-by: Adam Fidel <ledif@users.noreply.github.com>
@renner0e renner0e closed this Jul 26, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants