Skip to content

feat(deps): update dependency pack to v0.35.0

GitLab Dependency Bot requested to merge gitlab-renovate-forks/auto-build-image:renovate/pack-0.x into master

This MR contains the following updates:

Package Update Change
pack minor v0.34.2 -> v0.35.0

MR created with the help of gitlab-org/frontend/renovate-gitlab-bot

Release Notes

buildpacks/pack (pack)

v0.35.0: pack v0.35.0

Compare Source

Prerequisites

  • A container runtime such as Docker or podman must be available to execute builds.

Install

For instructions on installing pack, see our installation docs.

Run

Run the command pack.

You should see the following output

CLI for building apps using Cloud Native Buildpacks

Usage:
  pack [command]

Available Commands:
  build                 Generate app image from source code
  builder               Interact with builders
  buildpack             Interact with buildpacks
  extension             Interact with extensions
  config                Interact with your local pack config file
  inspect               Show information about a built app image
  stack                 (deprecated) Interact with stacks
  rebase                Rebase app image with latest run image
  sbom                  Interact with SBoM
  completion            Outputs completion script location
  report                Display useful information for reporting an issue
  version               Show current 'pack' version
  help                  Help about any command

Flags:
      --force-color   Force color output
  -h, --help          Help for 'pack'
      --no-color      Disable color output
  -q, --quiet         Show less output
      --timestamps    Enable timestamps in output
  -v, --verbose       Show more output
      --version       Show current 'pack' version

Use "pack [command] --help" for more information about a command.

Info

Builders created with this release of the pack CLI contain lifecycle v0.19.6 by default.

Changelog

Features
  • Fixes from security review (#​2217 by @​natalieparellano)
    • Ensure ownership of build and launch cache volumes
    • Validate application names do not match trusted build inputs
    • Warn if NOT --pull-policy=always in container
    • Run build containers with userns=host and set security-opt field to no-new-privileges:true
    • Run build containers in a separate ephemeral Docker bridge network
    • Use the untrusted flow when buildpacks are added to a trusted builder
  • Update the Google builder in the list of known builders (#​2203 by @​hhiroshell)
  • Don't create an ephemeral builder if it isn't truly needed (#​2196 by @​natalieparellano)
Bugfixes

Contributors

We'd like to acknowledge that this release wouldn't be as good without the help of the following amazing contributors:

@​AidanDelaney, @​anjannath, @​colincasey, @​edmorley, @​dependabot[bot], @​hhiroshell, @​jjbustamante, @​natalieparellano

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Merge request reports