Skip to content

🐛 fix(ci-runners): bump pinned GitHub CLI to 2.103.2 (apt dropped 2.102.0) - #14341

Merged
hivecommons-hive[bot] merged 4 commits into
v5from
scanner/ci-runner-gh-2.103.2
Oct 26, 2026
Merged

🐛 fix(ci-runners): bump pinned GitHub CLI to 2.103.2 (apt dropped 2.102.0)#14341
hivecommons-hive[bot] merged 4 commits into
v5from
scanner/ci-runner-gh-2.103.2

Conversation

@hivecommons-hive

@hivecommons-hive hivecommons-hive Bot commented Oct 26, 2026

Copy link
Copy Markdown
Contributor

Build (PR gate, no push) fails on every PR that triggers the runner-image workflow (e.g. #14338) with:

E: Version '2.102.0' for 'gh' was not found

cli.github.com's apt stable index now serves only gh 2.103.2 (released 2026-10-23), so the Dockerfile's pin can no longer resolve. This bumps GITHUB_CLI_VERSION to 2.103.2; the keyring SHA and install shape are unchanged, and ci_runner_dockerfile_test.go only asserts the ARG is used.

Not run locally; CI is the verdict.

— hive: agent=scanner backend=copilot model=claude-fable-5.1 copilot=1.0.88

@hivecommons-hive
fix(ci-runners): bump pinned GitHub CLI to 2.103.2
ba6b1c4 
cli.github.com's apt repo only serves 2.103.2 now, so the image build
fails with "Version '2.102.0' for 'gh' was not found" on every PR that
triggers the runner-image gate.

Signed-off-by: scanner <280983584+hivecommons-hive[bot]@users.noreply.github.com>
@kubestellar-prow kubestellar-prow Bot added the dco-signoff: yes Indicates the PR's author has signed the DCO. label Oct 26, 2026
@kubestellar-prow

kubestellar-prow Bot commented Oct 26, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign clubanderson for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubestellar-prow kubestellar-prow Bot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Oct 26, 2026
@hivecommons-hive @github-actions
changelog: fragment for #14341
8f8942f 
Generated by changelog-fragment-guard from the PR title (#5675).
Edit the wording freely, or replace this file with the no-changelog
label if the change is not user-visible.

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: hivecommons-hive[bot] <280983584+hivecommons-hive[bot]@users.noreply.github.com>
@github-actions

github-actions Bot commented Oct 26, 2026

Copy link
Copy Markdown
Contributor

Open PR overlap check

Base branch: v5

Conflicts are checked with every PR merged onto the current tip of v5, so a PR that only needs a rebase is not reported as conflicting with its siblings.

No conflicting open PRs or same-file overlaps were found.

@hivecommons-hive

hivecommons-hive Bot commented Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

hive/awaiting-ci: CI pending — sweep will merge when green.

🐝 Hive Agent: scanner | Instance: hosted-available-oke-11-placeholder-r05x | SHA: unknown

— hive: agent=scanner backend=copilot model=claude-fable-5.1 copilot=1.0.88

@hivecommons-hive hivecommons-hive Bot mentioned this pull request Oct 26, 2026
Merged
@hivecommons-hive

hivecommons-hive Bot commented Oct 26, 2026

Copy link
Copy Markdown
Contributor Author
8f8942f

ℹ️ Sentinel notice — informational; author is trusted (hive agent), merge is not blocked

Hive flagged this PR (author @hivecommons-hive[bot], head 8f8942fb2e5f) because it matches behaviors that can override security controls, escalate privileges or damage the codebase. This is a heuristic, not an accusation — a maintainer should confirm the change is intended before it merges.

  • sensitive_path — changes 1 sensitive path(s) (Touches a sensitive path (OWNERS, workflows, policies, hive config, security docs, …))
    • src/deploy/ci-runners/Dockerfile

Hive did not add the sentinel-alert label because this author is trusted. The finding remains recorded for audit and the dashboard Security tab; set sentinel.trusted_authors_block: true to require the blocking label for trusted authors too.

@hivecommons-hive hivecommons-hive Bot added author/hive This repository's own hive (the App or one of its agent lanes) authored this PR dco All commits are DCO signed-off role/trusted Author is trusted for unattended merge (trusted-author role or registry/claim tier in require_tiers) stage/050-review-pending Review swarm requested; awaiting a verdict for the current head labels Oct 26, 2026
@hivecommons-hive
changelog: drop unbulleted duplicate fragment for #14341
fea4482 
The hive autofixer already added changelog.d/fixed-14341.md with the
required '- ' entry bullet; the hand-written fragment lacked it and
failed changelog-fragment-guard.

Signed-off-by: scanner <280983584+hivecommons-hive[bot]@users.noreply.github.com>
@hivecommons-hive

hivecommons-hive Bot commented Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

hive/awaiting-ci: removed the unbulleted duplicate fragment (the autofixer's changelog.d/fixed-14341.md stays). CI pending — sweep will merge when green.

🐝 Hive Agent: scanner | Instance: hosted-available-oke-11-placeholder-r05x | SHA: unknown

— hive: agent=scanner backend=copilot model=claude-fable-5.1 copilot=1.0.88

@hivecommons-hive
hivecommons-hive Bot merged commit 84409f4 into v5 Oct 26, 2026
71 of 72 checks passed
@kubestellar-prow
kubestellar-prow Bot deleted the scanner/ci-runner-gh-2.103.2 branch October 26, 2026 03:51
@hivecommons-hive

hivecommons-hive Bot commented Oct 26, 2026

Copy link
Copy Markdown
Contributor Author
Evidence bundle `#14341fea4482` sha256:75599e7e79baeab2fa3cb86e53dbd110be44a37ef7b61ed53979b5404df3aaf0 — download from the dashboard or `hivectl review evidence #14341`.

@github-actions

github-actions Bot commented Oct 26, 2026

Copy link
Copy Markdown
Contributor

Thank you for your contribution! Your PR has been merged.

We'd love to hear how your experience was: share feedback

@hivecommons-hive hivecommons-hive Bot removed role/trusted Author is trusted for unattended merge (trusted-author role or registry/claim tier in require_tiers) stage/050-review-pending Review swarm requested; awaiting a verdict for the current head labels Oct 26, 2026
clubanderson added a commit that referenced this pull request Oct 27, 2026
@clubanderson
fix(ci-runners): bump pinned GitHub CLI to 2.103.3 (apt dropped 2.103.2)
ac00147 
The CI Runner Image PR gate installs gh=${GITHUB_CLI_VERSION} from
cli.github.com, which only serves the newest patch; 2.103.2 was replaced
by 2.103.3 on 2026-10-27, the same drift #14341 fixed for 2.102.0. v5
carries the same pin and will need the same bump.

Signed-off-by: Andrew Anderson <andy@clubanderson.com>
This was referenced Oct 27, 2026
Closed
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@clubanderson clubanderson Awaiting requested review from clubanderson clubanderson is a code owner
@hanthor hanthor Awaiting requested review from hanthor hanthor is a code owner
@Danathar Danathar Awaiting requested review from Danathar Danathar is a code owner

Assignees

No one assigned

Labels

author/hive This repository's own hive (the App or one of its agent lanes) authored this PR copilot dco All commits are DCO signed-off dco-signoff: yes Indicates the PR's author has signed the DCO. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants