From 7ca0a77a570b45c12e27c49fd88d2a54952dbde8 Mon Sep 17 00:00:00 2001 From: Patrick Hermann Date: Wed, 7 Oct 2026 13:44:17 +0000 Subject: [PATCH] fix: blueprints module pins -> v3.11.0 (argocd, flux, repository-linting) By hand instead of waiting for Renovate's rate-limited 1.x/2.x/3.x branches. call-terraform-vault stays on v1.85.0 (#205, #208). - argocd v2.4.0/v2.7.0 -> v3.11.0: every flag of create-vault-kubernetes-auth, create-vault-issuer and bootstrap-clusterbook-cluster exists in v3.11.0. The v3.0.0 break (ClusterIssuer out of CreateVaultKubernetesAuth) does not reach these templates: v2.7.0 had no issuer flags, and v3's CA phase only runs with --ca-secret-name, which the template does not pass. - repository-linting v1.15.0/v1.17.0 -> v3.11.0: validate-multiple-technologies takes all flags. - flux v3.10.3 -> v3.11.0: only the helm dependency moved (credential leak fix). Co-Authored-By: Claude Opus 5.5 --- .github/workflows/call-argocd-bootstrap.yaml | 2 +- .github/workflows/call-create-vault-issuer.yaml | 2 +- .github/workflows/call-create-vault-k8s-auth.yaml | 2 +- .github/workflows/call-flux-bootstrap.yaml | 2 +- .github/workflows/call-flux-destroy.yaml | 2 +- .github/workflows/call-repository-linting.yaml | 2 +- .github/workflows/this-lint-repo.yaml | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/call-argocd-bootstrap.yaml b/.github/workflows/call-argocd-bootstrap.yaml index 90d3edb..1f43134 100644 --- a/.github/workflows/call-argocd-bootstrap.yaml +++ b/.github/workflows/call-argocd-bootstrap.yaml @@ -197,7 +197,7 @@ on: required: false type: string # renovate: datasource=github-releases depName=stuttgart-things/blueprints - default: v2.4.0 + default: v3.11.0 sops-module-version: description: "Version of stuttgart-things/dagger/sops (for kubeconfig decrypt step)" required: false diff --git a/.github/workflows/call-create-vault-issuer.yaml b/.github/workflows/call-create-vault-issuer.yaml index 3dd9c81..fe0b723 100644 --- a/.github/workflows/call-create-vault-issuer.yaml +++ b/.github/workflows/call-create-vault-issuer.yaml @@ -78,7 +78,7 @@ on: required: false type: string # renovate: datasource=github-releases depName=stuttgart-things/blueprints - default: v2.4.0 + default: v3.11.0 permissions: contents: read diff --git a/.github/workflows/call-create-vault-k8s-auth.yaml b/.github/workflows/call-create-vault-k8s-auth.yaml index 5feb841..985f5cf 100644 --- a/.github/workflows/call-create-vault-k8s-auth.yaml +++ b/.github/workflows/call-create-vault-k8s-auth.yaml @@ -105,7 +105,7 @@ on: # --bound-service-account-names. On anything older the four inputs above # are silently rejected by the module, so they move together. # renovate: datasource=github-releases depName=stuttgart-things/blueprints - default: v2.7.0 + default: v3.11.0 permissions: contents: read diff --git a/.github/workflows/call-flux-bootstrap.yaml b/.github/workflows/call-flux-bootstrap.yaml index ce3788f..13a9380 100644 --- a/.github/workflows/call-flux-bootstrap.yaml +++ b/.github/workflows/call-flux-bootstrap.yaml @@ -51,7 +51,7 @@ on: required: false type: string # renovate: datasource=github-releases depName=stuttgart-things/blueprints - default: v3.10.3 + default: v3.11.0 flux-cli-image: description: "Flux CLI image used for the reconciliation wait" required: false diff --git a/.github/workflows/call-flux-destroy.yaml b/.github/workflows/call-flux-destroy.yaml index 7ec3810..c4f67f0 100644 --- a/.github/workflows/call-flux-destroy.yaml +++ b/.github/workflows/call-flux-destroy.yaml @@ -44,7 +44,7 @@ on: required: false type: string # renovate: datasource=github-releases depName=stuttgart-things/blueprints - default: v3.10.3 + default: v3.11.0 sops-module-version: description: "SOPS Dagger module version" required: false diff --git a/.github/workflows/call-repository-linting.yaml b/.github/workflows/call-repository-linting.yaml index 14c9c6b..c88b533 100644 --- a/.github/workflows/call-repository-linting.yaml +++ b/.github/workflows/call-repository-linting.yaml @@ -31,7 +31,7 @@ on: required: false type: string # renovate: datasource=github-releases depName=stuttgart-things/blueprints - default: v1.15.0 + default: v3.11.0 environment-name: required: false type: string diff --git a/.github/workflows/this-lint-repo.yaml b/.github/workflows/this-lint-repo.yaml index 3d8af44..c48cd14 100644 --- a/.github/workflows/this-lint-repo.yaml +++ b/.github/workflows/this-lint-repo.yaml @@ -23,6 +23,6 @@ jobs: continue-error: "true" dagger-version: v0.21.10 # renovate: datasource=github-releases depName=stuttgart-things/blueprints - dagger-module-version: v1.17.0 + dagger-module-version: v3.11.0 branch-name: ${{ github.head_ref || github.ref_name }} secrets: inherit # pragma: allowlist secret