Skip to content

chore(deps): update docker.io/powerman/dockerize docker digest to aea7a9d#4247

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/docker.io-powerman-dockerize
Open

chore(deps): update docker.io/powerman/dockerize docker digest to aea7a9d#4247
renovate[bot] wants to merge 1 commit intomainfrom
renovate/docker.io-powerman-dockerize

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 28, 2026

This PR contains the following updates:

Package Type Update Change
docker.io/powerman/dockerize final digest e645b37aea7a9d

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Configuration

📅 Schedule: Branch creation - "every weekend" in timezone US/Eastern, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


# digest for docker.io/powerman/dockerize:0.19.0 --platform=linux/amd64
COPY --from=docker.io/powerman/dockerize@sha256:e645b37f160acfc20d49f545a8b917e402a1a10a31839912945fa78e4a35416b /usr/local/bin/dockerize /usr/local/bin/dockerize
COPY --from=docker.io/powerman/dockerize@sha256:aea7a9d7fea00b3c7e5f000b56adb33c19e7ac0ceb22037addfdee89a3921346 /usr/local/bin/dockerize /usr/local/bin/dockerize
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: The dependency update in the Dockerfile is not applied in production because the build process uses an Earthfile with a different, un-updated digest.
Severity: MEDIUM

Suggested Fix

To ensure the dependency is updated in production, update the dockerize digest in dockerfiles/openedx-edxapp/Earthfile to match the new digest in the Dockerfile. This will align the dependencies used in both the Dockerfile and the production build process.

Prompt for AI Agent
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: dockerfiles/openedx-edxapp/Dockerfile#L70

Potential issue: The pull request updates the digest for the `dockerize` dependency in
the `Dockerfile`. However, the production build process does not use this file. Instead,
it uses an `Earthfile` which references a different, older digest for the same
dependency. As a result, the intended dependency update will not be applied to the
production build, leaving the system running on the older version. This creates an
inconsistency in dependency management and means any security or stability improvements
from the new version will not be realized in production.

Did we get this right? 👍 / 👎 to inform future reviews.

@renovate renovate bot force-pushed the renovate/docker.io-powerman-dockerize branch 12 times, most recently from 01a0c6a to 1248b36 Compare March 3, 2026 22:56

# digest for docker.io/powerman/dockerize:0.19.0 --platform=linux/amd64
COPY --from=docker.io/powerman/dockerize@sha256:e645b37f160acfc20d49f545a8b917e402a1a10a31839912945fa78e4a35416b /usr/local/bin/dockerize /usr/local/bin/dockerize
COPY --from=docker.io/powerman/dockerize@sha256:aea7a9d7fea00b3c7e5f000b56adb33c19e7ac0ceb22037addfdee89a3921346 /usr/local/bin/dockerize /usr/local/bin/dockerize
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: The dockerize digest is updated in the Dockerfile, but not in the Earthfile used for production builds, so the production environment will not receive the intended update.
Severity: MEDIUM

Suggested Fix

Update the dockerize target in the Earthfile to use the new digest aea7a9d7fea00b3c7e5f000b56adb33c19e7ac0ceb22037addfdee89a3921346. This will ensure the production build process is consistent with the dependency update in the Dockerfile.

Prompt for AI Agent
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: dockerfiles/openedx-edxapp/Dockerfile#L70

Potential issue: The pull request updates the `dockerize` digest in
`dockerfiles/openedx-edxapp/Dockerfile`, but the production build process relies on an
`Earthfile` which has not been updated. The `Earthfile` still references the old digest
(`f3ecfd5ac0f74eed3990782309ac6bf8b700f4eca0ea9e9ef507b11742c19cc6`). Consequently, the
production image will be built with the outdated dependency, nullifying the intended
update from this PR. This creates a discrepancy between the repository's declared
dependencies and the deployed version, posing a maintenance risk and potentially leading
to build failures if the old digest is ever removed from the registry.

@renovate renovate bot force-pushed the renovate/docker.io-powerman-dockerize branch 16 times, most recently from ae0d488 to c4fb55c Compare March 7, 2026 10:51
@renovate renovate bot force-pushed the renovate/docker.io-powerman-dockerize branch 29 times, most recently from e4506ca to 2f5c0be Compare March 16, 2026 18:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants