Skip to content

build(deps): Bump regclient/actions/regctl-installer from 148669fe4b19151fcab6e00c6df2db43b9e2b097 to dd58ad94f76adb73d8ac1bf75ed25f01545d5b32 - #3053

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/regclient/actions/regctl-installer-dd58ad94f76adb73d8ac1bf75ed25f01545d5b32
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/regclient/actions/regctl-installer-dd58ad94f76adb73d8ac1bf75ed25f01545d5b32

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps regclient/actions/regctl-installer from 148669fe4b19151fcab6e00c6df2db43b9e2b097 to dd58ad94f76adb73d8ac1bf75ed25f01545d5b32.

Changelog

Sourced from regclient/actions/regctl-installer's changelog.

Release Notes

Release v0.2.0

This release is primarily to pull in various dependency updates. Very little has changed in the actions code itself.

Changes:

  • Fix: Manage Go version in GHA with version-bump. (PR 47)
  • Chore: Add copyright headers and markdown linting. (PR 59)
  • Feat: Run the version command after installing. (PR 67)
  • Chore: Refactor release process. (PR 71)

Contributors:

Release v0.1.0

  • Fix: Handle special characters in the inputs. (PR 20)
  • Feat: Support passing additional options to regctl registry login like --skip-check. (PR 20)
  • Chore: Pin cosign to v2. (PR 29)
  • Feat: Add installers for each regclient command. (PR 32)
  • Fix: Fixing installer for separate commands. (PR 34)
  • Feat: Add support for cosign v3 bundles. (PR 35)
  • Chore: Allow action to be manually tested. (PR 37)
  • Fix: Expand $HOME variable in default install directory. (PR 41)
  • Fix: Add the path to main releases. (PR 42)
  • Feat: Add a release workflow. ([PR 44][pr-44])

Contributors:

... (truncated)

Commits
  • dd58ad9 Merge pull request #73 from sudo-bmitch/pr-v0.2.0
  • 596d5b9 Release v0.2.0
  • b7d935a Merge pull request #72 from sudo-bmitch/pr-v0.2.0-rc1
  • a4b93f1 Release v0.2.0-rc1
  • 9f7c790 Merge pull request #71 from sudo-bmitch/pr-release-refactor
  • 85202ff Chore: Refactor release process
  • ecbb5c2 Merge pull request #70 from sudo-bmitch/pr-update-20261005
  • 271d7a1 Version bump
  • bb562fa Merge pull request #68 from HastD/curl
  • 433238a fix: make curl usage more robust
  • Additional commits viewable in compare view


Devin Review

@dependabot
dependabot Bot requested a review from a team as a code owner October 12, 2026 22:16
@dependabot dependabot Bot added dependencies Issue/PR Pull about a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 12, 2026
@copy-pr-bot

copy-pr-bot Bot commented Oct 12, 2026

Copy link
Copy Markdown

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

Bumps [regclient/actions/regctl-installer](https://github.com/regclient/actions) from 148669fe4b19151fcab6e00c6df2db43b9e2b097 to dd58ad94f76adb73d8ac1bf75ed25f01545d5b32.
- [Release notes](https://github.com/regclient/actions/releases)
- [Changelog](https://github.com/regclient/actions/blob/main/RELEASE.md)
- [Commits](regclient/actions@148669f...dd58ad9)

---
updated-dependencies:
- dependency-name: regclient/actions/regctl-installer
  dependency-version: dd58ad94f76adb73d8ac1bf75ed25f01545d5b32
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/regclient/actions/regctl-installer-dd58ad94f76adb73d8ac1bf75ed25f01545d5b32 branch from 6d00a04 to 095bbc8 Compare October 23, 2026 23:25

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 potential issue.

Devin Review


- name: Install regctl
uses: regclient/actions/regctl-installer@148669fe4b19151fcab6e00c6df2db43b9e2b097
uses: regclient/actions/regctl-installer@dd58ad94f76adb73d8ac1bf75ed25f01545d5b32

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Bundle jobs retain the old installer

The regctl-installer bump leaves bundle jobs on the old revision. setup-olm-bundle-tools still pins the previous commit, so the same publishing workflow uses two installer versions.

Learn more

The direct installer steps now use the new commit, but the setup-olm-bundle-tools composite action still pins the old one. The publish-main-bundle job and release-rc-assets use that composite action. The dependency bump is therefore incomplete across workflows.

Example: A daily publish runs the updated installer for chart preparation, then runs the previous installer when preparing the OLM bundle.

Recommended fix: Update the pin in setup-olm-bundle-tools to the same new commit, so all workflows use one revision.

Devin Review


Was this helpful? React with 👍 or 👎 to provide feedback.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Issue/PR Pull about a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants