Skip to content

Update wolfi (versioned) (main)#142948

Merged
elasticsearchmachine merged 1 commit intomainfrom
renovate/main-wolfi-versioned
Feb 24, 2026
Merged

Update wolfi (versioned) (main)#142948
elasticsearchmachine merged 1 commit intomainfrom
renovate/main-wolfi-versioned

Conversation

@elastic-renovate-prod
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
docker.elastic.co/wolfi/chainguard-base final digest 4a82c70 -> 568df5f
docker.elastic.co/wolfi/chainguard-base stage digest 4a82c70 -> 568df5f
docker.elastic.co/wolfi/chainguard-base-fips final digest efc70f0 -> e4cb920
docker.elastic.co/wolfi/chainguard-base-fips stage digest efc70f0 -> e4cb920

Configuration

📅 Schedule: Branch creation - "after 1pm on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@elastic-renovate-prod elastic-renovate-prod bot requested a review from a team as a code owner February 24, 2026 13:28
@elastic-renovate-prod elastic-renovate-prod bot added :Delivery/Build Build or test infrastructure :Delivery/Packaging RPM and deb packaging, tar and zip archives, shell and batch scripts >non-issue auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) Team:Delivery Meta label for Delivery team labels Feb 24, 2026
@elasticsearchmachine
Copy link
Copy Markdown
Collaborator

Pinging @elastic/es-delivery (Team:Delivery)

@elasticsearchmachine elasticsearchmachine merged commit a05cb3c into main Feb 24, 2026
37 checks passed
@elasticsearchmachine elasticsearchmachine deleted the renovate/main-wolfi-versioned branch February 24, 2026 14:32
sidosera pushed a commit to sidosera/elasticsearch that referenced this pull request Feb 24, 2026
This PR contains the following updates:

| Package | Type | Update | Change | |---|---|---|---| |
docker.elastic.co/wolfi/chainguard-base | final | digest | `4a82c70` ->
`568df5f` | | docker.elastic.co/wolfi/chainguard-base | stage | digest |
`4a82c70` -> `568df5f` | | docker.elastic.co/wolfi/chainguard-base-fips
| final | digest | `efc70f0` -> `e4cb920` | |
docker.elastic.co/wolfi/chainguard-base-fips | stage | digest |
`efc70f0` -> `e4cb920` |

---

### Configuration

📅 **Schedule**: Branch creation - "after 1pm on tuesday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once
you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyI6RGVsaXZlcnkvQnVpbGQiLCI6RGVsaXZlcnkvUGFja2FnaW5nIiwiPm5vbi1pc3N1ZSIsIlRlYW06RGVsaXZlcnkiLCJhdXRvLW1lcmdlLXdpdGhvdXQtYXBwcm92YWwiXX0=-->
szybia added a commit to szybia/elasticsearch that referenced this pull request Feb 24, 2026
…on-sliced-reindex

* upstream/main:
  Activity logging improvements (elastic#142901)
  Fix serialization of NodeGpuStatsResponse when no GPU is present (elastic#142937)
  Add doc on master elections in DistributedArchitectureGuide (elastic#142435)
  ESQL: Account for missing StubRelation due to SurrogateExpressions replacement (elastic#142882)
  Add BulkByScrollTask Serialization Tests (elastic#142697)
  Rebalance CI test partitions to reduce Part3 bottleneck (elastic#142930)
  Mute org.elasticsearch.xpack.esql.qa.multi_node.EsqlClientYamlIT test {p0=esql/40_tsdb/to_aggregate_metric_double with multi_values} elastic#142964
  Bump OpenTelemetry dependencies (elastic#142323)
  SQL: add support for API key to JDBC and CLI (elastic#142021)
  Ensure requested capability exists (elastic#142695)
  Warn and fall back to local branches.json (elastic#142606)
  [CI] Mute testWithFetchFailures, testAddCompletionListenerScheduleErr… (elastic#142926)
  ESQL: Add support for ORC file format (elastic#142900)
  Update wolfi (versioned) (elastic#142948)
  Add BulkByScrollResponse Serialization Tests (elastic#142688)
  Run 25_id_generation with and without synthetic id (elastic#142770)
@breskeby
Copy link
Copy Markdown
Contributor

breskeby commented Feb 27, 2026

Having an the package updates within the image listed here would be useful

@breskeby breskeby removed the auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) label Feb 27, 2026
@elasticsearchmachine
Copy link
Copy Markdown
Collaborator


Update Summary
This PR updates the Chainguard Wolfi base images used for building Elasticsearch Docker images:

Image Old Digest New Digest
docker.elastic.co/wolfi/chainguard-base:latest 4a82c70 568df5f
docker.elastic.co/wolfi/chainguard-base-fips:latest efc70f0 e4cb920

Package Differences

chainguard-base (standard image)

Package Old Version New Version
N/A N/A N/A (unable to compute here: docker.elastic.co auth required to pull the digests)

chainguard-base-fips (FIPS-compliant image)

Package Old Version New Version
N/A N/A N/A (unable to compute here: docker.elastic.co auth required to pull the digests)

To generate the full package-diff tables once authenticated to docker.elastic.co:

set -euo pipefail

BASE_OLD='docker.elastic.co/wolfi/chainguard-base:latest@sha256:4a82c706003370964df94913adfc47aab9a55b4fb2490260e7f7ebcf27cc4240'
BASE_NEW='docker.elastic.co/wolfi/chainguard-base:latest@sha256:568df5fb0e237c3a2139399d4bd8e80994f24321fa8469aec565b8566704e83a'
FIPS_OLD='docker.elastic.co/wolfi/chainguard-base-fips:latest@sha256:efc70f02cdc8aaa7eb5196c5d17719098a3f4bba347aa966a85f7e5452d0a0ca'
FIPS_NEW='docker.elastic.co/wolfi/chainguard-base-fips:latest@sha256:e4cb92038b58c8c881962a17ec0b9970857a801c0a52f75550258f92f1e93ca1'

# Pull all digests
docker pull "$BASE_OLD"
docker pull "$BASE_NEW"
docker pull "$FIPS_OLD"
docker pull "$FIPS_NEW"

# Extract installed package inventories (one "name-version" per line)
docker run --rm --entrypoint apk "$BASE_OLD" info -v | sort -u > base.old.pkgs
docker run --rm --entrypoint apk "$BASE_NEW" info -v | sort -u > base.new.pkgs
docker run --rm --entrypoint apk "$FIPS_OLD" info -v | sort -u > fips.old.pkgs
docker run --rm --entrypoint apk "$FIPS_NEW" info -v | sort -u > fips.new.pkgs

# Review full changes
diff -u base.old.pkgs base.new.pkgs || true
diff -u fips.old.pkgs fips.new.pkgs || true

# Optional: convert diffs into "Package | Old Version | New Version" tables
# - parse "name-version" by splitting on the last '-' (apk naming convention)
# - join by package name

Key Observations

  1. The Wolfi digest bumps occur in both the builder stage and the final stage:
    • distribution/docker/src/docker/dockerfiles/wolfi/Dockerfile (chainguard-base)
    • distribution/docker/src/docker/dockerfiles/cloud_ess_fips/Dockerfile (chainguard-base-fips)
  2. No build scan links, linked issues, or failures were called out in the PR body/comments.

Impact

  • The PR is merged; no additional impact data was provided in-thread (no build scans / failure reports).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

:Delivery/Build Build or test infrastructure :Delivery/Packaging RPM and deb packaging, tar and zip archives, shell and batch scripts >non-issue Team:Delivery Meta label for Delivery team v9.4.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants