fix(flux): use shell semantics for file redirection by jamietanna · Pull Request #40324 · renovatebot/renovate

jamietanna · 2026-01-08T10:14:17Z

Changes

As reported in #40275, since f430552
we've seen Flux failing to update.

We can take advantage of the new shell option to handle this safe
shell semantics usage for file redirection.

Context

Depends on #40323

Please select one of the following:

This closes an existing Issue, Closes: Flux update fails with 'Unknown command ">" for "flux install" since 42.68.5 #40302
This doesn't close an Issue, but I accept the risk that this PR may be closed if maintainers disagree with its opening or implementation

AI assistance disclosure

Did you use AI tools to create any part of this pull request?

Please select one option and, if yes, briefly describe how AI was used (e.g., code, tests, docs) and which tool(s) you used.

No — I did not use AI for this contribution.
Yes — minimal assistance (e.g., IDE autocomplete, small code completions, grammar fixes).
Yes — substantive assistance (AI generated non‑trivial portions of code, tests, or documentation).
Yes — other (please describe):

Documentation (please check one with an [x])

I have updated the documentation, or
No documentation update is required

How I've tested my work (please select one)

I have verified these changes via:

Code inspection only, or
Newly added/modified unit tests, or
No unit tests but ran on a real repository, or
Both unit tests + ran on a real repository

The public repository: https://github.com/agriessbosch/renovate-repro-40302

Before (7c467de):

DEBUG: Executing command (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)
       "command": "install-tool flux v2.7.5"
DEBUG: exec completed (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)
       "durationMs": 2526,
       "stdout": "[10:21:01.879] DEBUG (69): discovered distro\n    distro: {\n      \"name\": \"Ubuntu\",\n      \"versionCode\": \"noble\",\n      \"versionId\": \"24.04\"\n    }\n[10:21:01.880] DEBUG (69): prepare commands\n[10:21:01.88
2] DEBUG (69): Try resolving version for flux@2.7.5 ...\n[10:21:01.882] INFO (69): Installing tool flux@2.7.5...\n[10:21:01.897] DEBUG (69): setting path mode\n    path: \"/opt/containerbase/data/types.nedb\"\n    mode: 436\n    s: 420\n[1
0:21:01.897] DEBUG (69): setting path mode\n    path: \"/opt/containerbase/data/state.nedb\"\n    mode: 436\n    s: 420\n[10:21:01.898] DEBUG (69): setting path mode\n    path: \"/opt/containerbase/data/versions.nedb\"\n    mode: 436\n
s: 420\n[10:21:01.898] DEBUG (69): setting path mode\n    path: \"/opt/containerbase/data/links.nedb\"\n    mode: 436\n    s: 420\n[10:21:01.901] DEBUG (69): ipc server started\n[10:21:01.901] DEBUG (69): validate tool\n    tool: \"flux\"\
n[10:21:01.901] DEBUG (69): install tool\n    tool: \"flux\"\n[10:21:01.901] DEBUG (69): downloading file\n    url: \"https://github.com/fluxcd/flux2/releases/download/v2.7.5/flux_2.7.5_checksums.txt\"\n[10:21:02.051] DEBUG (69): downloadi
ng file\n    url: \"https://github.com/fluxcd/flux2/releases/download/v2.7.5/flux_2.7.5_linux_arm64.tar.gz\"\n    expectedChecksum: \"89d3ebb47ee5f7a0def33217e8dcb885e0bec41d01d0e23fc84e9aba0416c24e\"\n    checksumType: \"sha256\"\n[10:21:
04.027] DEBUG (69): creating dir\n    path: \"/opt/containerbase/tools/flux\"\n[10:21:04.029] DEBUG (69): setting path mode\n    path: \"/opt/containerbase/tools/flux\"\n    mode: 509\n    s: 493\n[10:21:04.029] DEBUG (69): creating dir\n
   path: \"/opt/containerbase/tools/flux/2.7.5\"\n[10:21:04.167] DEBUG (69): link tool\n    tool: \"flux\"\n[10:21:04.169] DEBUG (69): setting path mode\n    path: \"/opt/containerbase/bin/flux\"\n    mode: 509\n    s: 420\n[10:21:04.169]
DEBUG (69): post-install tool\n    tool: \"flux\"\n[10:21:04.169] DEBUG (69): linked tools\n    tool: \"flux\"\n    version: \"2.7.5\"\n    links: [\n      \"flux\"\n    ]\n[10:21:04.170] DEBUG (69): test tool\n    tool: \"flux\"\nflux ver
sion 2.7.5\n[10:21:04.288] DEBUG (69): cleaning apt caches\n[10:21:04.296] INFO (69): Install tool flux succeeded in 2.4s.\n",
       "stderr": ""
DEBUG: Executing command (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)
       "command": "flux install --export --components source-controller,kustomize-controller,helm-controller,notification-controller > cluster/flux-system/gotk-components.yaml"
DEBUG: rawExec err (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)
       "err": {
         "cmd": "flux install --export --components source-controller,kustomize-controller,helm-controller,notification-controller > cluster/flux-system/gotk-components.yaml",
         "stderr": "✗ unknown command \">\" for \"flux install\"\n",
         "stdout": "",
         "options": {
           "cwd": "/tmp/renovate/repos/github/agriessbosch/renovate-repro-40302",
           "env": ["HOME", "PATH", "LC_ALL", "LANG", "CONTAINERBASE_CACHE_DIR"],
           "maxBuffer": 10485760,
           "timeout": 900000,
           "stdin": "pipe",
           "stdout": "pipe",
           "stderr": "pipe"
         },
         "exitCode": 1,
         "name": "ExecError",
         "message": "Command failed: flux install --export --components source-controller,kustomize-controller,helm-controller,notification-controller > cluster/flux-system/gotk-components.yaml\n✗ unknown command \">\" for \"flux install\"
\n",
         "stack": "ExecError: Command failed: flux install --export --components source-controller,kustomize-controller,helm-controller,notification-controller > cluster/flux-system/gotk-components.yaml\n✗ unknown command \">\" for \"flux
install\"\n\n    at ChildProcess.<anonymous> (/app/lib/util/exec/common.ts:159:13)\n    at ChildProcess.emit (node:events:520:35)\n    at ChildProcess.emit (node:domain:489:12)\n    at Process.ChildProcess._handle.onexit (node:internal/chi
ld_process:294:12)"
       },
       "durationMs": 112
DEBUG: Error generating new Flux system manifests (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)
       "err": {
         "cmd": "flux install --export --components source-controller,kustomize-controller,helm-controller,notification-controller > cluster/flux-system/gotk-components.yaml",
         "stderr": "✗ unknown command \">\" for \"flux install\"\n",
         "stdout": "",
         "options": {
           "cwd": "/tmp/renovate/repos/github/agriessbosch/renovate-repro-40302",
           "env": ["HOME", "PATH", "LC_ALL", "LANG", "CONTAINERBASE_CACHE_DIR"],
           "maxBuffer": 10485760,
           "timeout": 900000,
           "stdin": "pipe",
           "stdout": "pipe",
           "stderr": "pipe"
         },
         "exitCode": 1,
         "name": "ExecError",
         "message": "Command failed: flux install --export --components source-controller,kustomize-controller,helm-controller,notification-controller > cluster/flux-system/gotk-components.yaml\n✗ unknown command \">\" for \"flux install\"
\n",
         "stack": "ExecError: Command failed: flux install --export --components source-controller,kustomize-controller,helm-controller,notification-controller > cluster/flux-system/gotk-components.yaml\n✗ unknown command \">\" for \"flux
install\"\n\n    at ChildProcess.<anonymous> (/app/lib/util/exec/common.ts:159:13)\n    at ChildProcess.emit (node:events:520:35)\n    at ChildProcess.emit (node:domain:489:12)\n    at Process.ChildProcess._handle.onexit (node:internal/chi
ld_process:294:12)"
       }
DEBUG: Updated 1 package files (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)

After:

DEBUG: Using containerbase dynamic installs (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)
DEBUG: Executing command (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)
       "command": "install-tool flux v2.7.5"
DEBUG: exec completed (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)
       "durationMs": 4273,
       "stdout": "[10:23:03.969] DEBUG (65): discovered distro\n    distro: {\n      \"name\": \"Ubuntu\",\n      \"versionCode\": \"noble\",\n      \"versionId\": \"24.04\"\n    }\n[10:23:03.969] DEBUG (65): prepare commands\n[10:23:03.97
2] DEBUG (65): Try resolving version for flux@2.7.5 ...\n[10:23:03.972] INFO (65): Installing tool flux@2.7.5...\n[10:23:03.987] DEBUG (65): setting path mode\n    path: \"/opt/containerbase/data/links.nedb\"\n    mode: 436\n    s: 420\n[1
0:23:03.987] DEBUG (65): setting path mode\n    path: \"/opt/containerbase/data/types.nedb\"\n    mode: 436\n    s: 420\n[10:23:03.987] DEBUG (65): setting path mode\n    path: \"/opt/containerbase/data/versions.nedb\"\n    mode: 436\n
s: 420\n[10:23:03.987] DEBUG (65): setting path mode\n    path: \"/opt/containerbase/data/state.nedb\"\n    mode: 436\n    s: 420\n[10:23:03.990] DEBUG (65): ipc server started\n[10:23:03.990] DEBUG (65): validate tool\n    tool: \"flux\"\
n[10:23:03.991] DEBUG (65): install tool\n    tool: \"flux\"\n[10:23:03.991] DEBUG (65): downloading file\n    url: \"https://github.com/fluxcd/flux2/releases/download/v2.7.5/flux_2.7.5_checksums.txt\"\n[10:23:05.129] DEBUG (65): downloadi
ng file\n    url: \"https://github.com/fluxcd/flux2/releases/download/v2.7.5/flux_2.7.5_linux_arm64.tar.gz\"\n    expectedChecksum: \"89d3ebb47ee5f7a0def33217e8dcb885e0bec41d01d0e23fc84e9aba0416c24e\"\n    checksumType: \"sha256\"\nflux ve
rsion 2.7.5\n[10:23:07.268] DEBUG (65): creating dir\n    path: \"/opt/containerbase/tools/flux\"\n[10:23:07.269] DEBUG (65): setting path mode\n    path: \"/opt/containerbase/tools/flux\"\n    mode: 509\n    s: 493\n[10:23:07.270] DEBUG (
65): creating dir\n    path: \"/opt/containerbase/tools/flux/2.7.5\"\n[10:23:07.405] DEBUG (65): link tool\n    tool: \"flux\"\n[10:23:07.407] DEBUG (65): setting path mode\n    path: \"/opt/containerbase/bin/flux\"\n    mode: 509\n    s:
420\n[10:23:07.407] DEBUG (65): post-install tool\n    tool: \"flux\"\n[10:23:07.407] DEBUG (65): linked tools\n    tool: \"flux\"\n    version: \"2.7.5\"\n    links: [\n      \"flux\"\n    ]\n[10:23:07.407] DEBUG (65): test tool\n    tool
: \"flux\"\n[10:23:07.523] DEBUG (65): cleaning apt caches\n[10:23:07.531] INFO (65): Install tool flux succeeded in 3.5s.\n",
       "stderr": ""
DEBUG: Executing command (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)
       "command": "flux install --export --components source-controller,kustomize-controller,helm-controller,notification-controller > cluster/flux-system/gotk-components.yaml"
DEBUG: exec completed (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)
       "durationMs": 224,
       "stdout": "",
       "stderr": ""
DEBUG: Updated 1 package files (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)
DEBUG: Updated 1 lock files (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)
       "updatedArtifacts": ["cluster/flux-system/gotk-components.yaml"]
DEBUG: 1 file(s) to commit (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)
DEBUG: Preparing files for committing to branch renovate/fluxcd-flux2-2.x (repository=agriessbosch/renovate-repro-40302, branch=renovate/fluxcd-flux2-2.x)

As reported in #40275, since f430552 we've seen Flux failing to update. We can take advantage of the new `shell` option to handle this safe shell semantics usage for file redirection.

github-actions · 2026-01-08T15:12:10Z

🎉 This PR is included in version 42.74.5 🎉

The release is available on:

GitHub release
42.74.5

Your semantic-release bot 📦🚀

##### [\`42.76.3\`](https://github.com/renovatebot/renovate/releases/tag/42.76.3) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.21.4 (main) ([#40362](renovatebot/renovate#40362)) ([e6ae60d](renovatebot/renovate@e6ae60d)) --- ##### [\`42.76.2\`](https://github.com/renovatebot/renovate/releases/tag/42.76.2) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.21.3 (main) ([#40349](renovatebot/renovate#40349)) ([2ef2a3b](renovatebot/renovate@2ef2a3b)) --- ##### [\`42.76.1\`](https://github.com/renovatebot/renovate/releases/tag/42.76.1) ##### Bug Fixes - **deps:** update ghcr.io/containerbase/sidecar docker tag to v13.25.22 (main) ([#40354](renovatebot/renovate#40354)) ([0455850](renovatebot/renovate@0455850)) ##### Miscellaneous Chores - **deps:** update ghcr.io/containerbase/devcontainer docker tag to v13.25.22 (main) ([#40353](renovatebot/renovate#40353)) ([216a1ca](renovatebot/renovate@216a1ca)) --- ##### [\`42.76.0\`](https://github.com/renovatebot/renovate/releases/tag/42.76.0) ##### Features - **pre-commit:** support golang additional dependencies ([#39469](renovatebot/renovate#39469)) ([cbcc72d](renovatebot/renovate@cbcc72d)) --- ##### [\`42.75.1\`](https://github.com/renovatebot/renovate/releases/tag/42.75.1) ##### Bug Fixes - **datasource:** Update MetaCPAN query for new Elasticsearch version ([#40335](renovatebot/renovate#40335)) ([5994b38](renovatebot/renovate@5994b38)) --- ##### [\`42.75.0\`](https://github.com/renovatebot/renovate/releases/tag/42.75.0) ##### Features - **bitbucket:** increase max body length ([#40345](renovatebot/renovate#40345)) ([75aa561](renovatebot/renovate@75aa561)) ##### Bug Fixes - **bitbucket:** markdown massaging for release notes ([#40344](renovatebot/renovate#40344)) ([3854945](renovatebot/renovate@3854945)) --- ##### [\`42.74.7\`](https://github.com/renovatebot/renovate/releases/tag/42.74.7) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.21.1 (main) ([#40343](renovatebot/renovate#40343)) ([1eb2554](renovatebot/renovate@1eb2554)) ##### Miscellaneous Chores - **deps:** update dependency pdm to v2.26.4 (main) ([#40342](renovatebot/renovate#40342)) ([8cc8242](renovatebot/renovate@8cc8242)) --- ##### [\`42.74.6\`](https://github.com/renovatebot/renovate/releases/tag/42.74.6) ##### Bug Fixes - **presets:** allow `pin` to not be governed by `minimumReleaseAge` ([#40289](renovatebot/renovate#40289)) ([7728d0e](renovatebot/renovate@7728d0e)), closes [#40288](renovatebot/renovate#40288) --- ##### [\`42.74.5\`](https://github.com/renovatebot/renovate/releases/tag/42.74.5) ##### Bug Fixes - **flux:** use shell semantics for file redirection ([#40324](renovatebot/renovate#40324)) ([b48e962](renovatebot/renovate@b48e962)), closes [#40275](https://github.com/renovatebot/renovate/issues/40275) --- ##### [\`42.74.4\`](https://github.com/renovatebot/renovate/releases/tag/42.74.4) ##### Bug Fixes - **yarn:** don't rely on shell semantics for ignoring command failures ([#40292](renovatebot/renovate#40292)) ([4e6e29f](renovatebot/renovate@4e6e29f)), closes [#40294](renovatebot/renovate#40294) ##### Miscellaneous Chores - **util/exec:** allow specifying `shell` on `CommandWithOptions` ([#40323](renovatebot/renovate#40323)) ([f903dcd](renovatebot/renovate@f903dcd)) --- ##### [\`42.74.3\`](https://github.com/renovatebot/renovate/releases/tag/42.74.3) ##### Bug Fixes - **composer:** don't rely on shell semantics for ignoring command failures ([#40291](renovatebot/renovate#40291)) ([7c467de](renovatebot/renovate@7c467de)), closes [#40284](renovatebot/renovate#40284) - **util/exec:** allow ignoring failures per-command ([#40290](renovatebot/renovate#40290)) ([9f3db00](renovatebot/renovate@9f3db00)) ##### Miscellaneous Chores - require specific version for "Request Help" Discussions ([#40321](renovatebot/renovate#40321)) ([9abf5f1](renovatebot/renovate@9abf5f1)) --- ##### [\`42.74.2\`](https://github.com/renovatebot/renovate/releases/tag/42.74.2) ##### Bug Fixes - **jsonata:** ensure all evaluations use a new environment ([#40312](renovatebot/renovate#40312)) ([8efdad4](renovatebot/renovate@8efdad4)) ##### Miscellaneous Chores - **deps:** update prom/prometheus docker tag to v3.9.1 (main) ([#40313](renovatebot/renovate#40313)) ([efda1ab](renovatebot/renovate@efda1ab)) ##### Code Refactoring - **git:** add debug logging for `baseBranch` ([#40307](renovatebot/renovate#40307)) ([bc86d73](renovatebot/renovate@bc86d73)) --- ##### [\`42.74.1\`](https://github.com/renovatebot/renovate/releases/tag/42.74.1) ##### Bug Fixes - **gitlab:** skip on unknown reviewers ([#39619](renovatebot/renovate#39619)) ([1413d5a](renovatebot/renovate@1413d5a)) ##### Documentation - add note for no backslashes in `matchStrings` ([#40061](renovatebot/renovate#40061)) ([1272688](renovatebot/renovate@1272688)) --- ##### [\`42.74.0\`](https://github.com/renovatebot/renovate/releases/tag/42.74.0) ##### Features - **http:** Prevent writes of already cached responses ([#38986](renovatebot/renovate#38986)) ([2e9edba](renovatebot/renovate@2e9edba)) --- ##### [\`42.73.0\`](https://github.com/renovatebot/renovate/releases/tag/42.73.0) ##### Features - make config filename lookup platform-specific ([#40065](renovatebot/renovate#40065)) ([d447c1a](renovatebot/renovate@d447c1a)) ##### Documentation - Use `matchPackageNames` in `dependencyDashboardApproval` example ([#40301](renovatebot/renovate#40301)) ([d300868](renovatebot/renovate@d300868)) --- ##### [\`42.72.0\`](https://github.com/renovatebot/renovate/releases/tag/42.72.0) ##### Features - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.21.0 (main) ([#40300](renovatebot/renovate#40300)) ([eeea6f2](renovatebot/renovate@eeea6f2)) ##### Miscellaneous Chores - **deps:** update dependency pnpm to v10.27.0 (main) ([#40299](renovatebot/renovate#40299)) ([6a9c714](renovatebot/renovate@6a9c714)) - **deps:** update otel/opentelemetry-collector-contrib docker tag to v0.143.0 (main) ([#40295](renovatebot/renovate#40295)) ([80f0335](renovatebot/renovate@80f0335)) - **deps:** update otel/opentelemetry-collector-contrib docker tag to v0.143.1 (main) ([#40297](renovatebot/renovate#40297)) ([0355125](renovatebot/renovate@0355125)) - **deps:** update prom/prometheus docker tag to v3.9.0 (main) ([#40296](renovatebot/renovate#40296)) ([88aa5eb](renovatebot/renovate@88aa5eb)) --- ##### [\`42.71.4\`](https://github.com/renovatebot/renovate/releases/tag/42.71.4) ##### Bug Fixes - **auto-replace:** prevent digest corruption when using replacementNameTemplate ([#40170](renovatebot/renovate#40170)) ([2d88578](renovatebot/renovate@2d88578)), closes [#40169](renovatebot/renovate#40169) ##### Documentation - fix grammar ([#40286](renovatebot/renovate#40286)) ([d6c4b46](renovatebot/renovate@d6c4b46)) ##### Tests - **util/exec:** clarify how errors are thrown ([#40287](renovatebot/renovate#40287)) ([2ac386d](renovatebot/renovate@2ac386d)) --- ##### [\`42.71.3\`](https://github.com/renovatebot/renovate/releases/tag/42.71.3) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.20.12 (main) ([#40283](renovatebot/renovate#40283)) ([920ebb4](renovatebot/renovate@920ebb4)) - **util/exec:** always pass `shell` when preparing `rawExec` arguments ([#40235](renovatebot/renovate#40235)) ([021532c](renovatebot/renovate@021532c)), closes [#40242](https://github.com/renovatebot/renovate/issues/40242) ##### Miscellaneous Chores - **gradle:** clarify log message on errors ([#40196](renovatebot/renovate#40196)) ([0dfe0f9](renovatebot/renovate@0dfe0f9)) --- ##### [\`42.71.2\`](https://github.com/renovatebot/renovate/releases/tag/42.71.2) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.20.11 (main) ([#40281](renovatebot/renovate#40281)) ([7aad009](renovatebot/renovate@7aad009)) --- ##### [\`42.71.1\`](https://github.com/renovatebot/renovate/releases/tag/42.71.1) ##### Bug Fixes - **deps:** update ghcr.io/containerbase/sidecar docker tag to v13.25.21 (main) ([#40280](renovatebot/renovate#40280)) ([4679fcf](renovatebot/renovate@4679fcf)) ##### Documentation - update references to renovate/renovate (main) ([#40266](renovatebot/renovate#40266)) ([807bc9a](renovatebot/renovate@807bc9a)) ##### Miscellaneous Chores - **deps:** lock file maintenance (main) ([#40267](renovatebot/renovate#40267)) ([f2b8edd](renovatebot/renovate@f2b8edd)) - **deps:** update containerbase/internal-tools action to v3.14.46 (main) ([#40268](renovatebot/renovate#40268)) ([e23e484](renovatebot/renovate@e23e484)) - **deps:** update dependency [@containerbase/eslint-plugin](https://github.com/containerbase/eslint-plugin) to v1.1.25 (main) ([#40269](renovatebot/renovate#40269)) ([5a7dd73](renovatebot/renovate@5a7dd73)) - **deps:** update dependency [@containerbase/istanbul-reports-html](https://github.com/containerbase/istanbul-reports-html) to v1.1.22 (main) ([#40270](renovatebot/renovate#40270)) ([32b0601](renovatebot/renovate@32b0601)) - **deps:** update dependency [@containerbase/semantic-release-pnpm](https://github.com/containerbase/semantic-release-pnpm) to v1.3.13 (main) ([#40271](renovatebot/renovate#40271)) ([79f4488](renovatebot/renovate@79f4488)) - **deps:** update dependency renovatebot/github-action to v44.2.3 (main) ([#40272](renovatebot/renovate#40272)) ([8aae225](renovatebot/renovate@8aae225)) - **deps:** update ghcr.io/containerbase/devcontainer docker tag to v13.25.21 (main) ([#40279](renovatebot/renovate#40279)) ([47be9ba](renovatebot/renovate@47be9ba))

##### [\`42.76.4\`](https://github.com/renovatebot/renovate/releases/tag/42.76.4) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.21.5 (main) ([#40364](renovatebot/renovate#40364)) ([544588d](renovatebot/renovate@544588d)) --- ##### [\`42.76.3\`](https://github.com/renovatebot/renovate/releases/tag/42.76.3) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.21.4 (main) ([#40362](renovatebot/renovate#40362)) ([e6ae60d](renovatebot/renovate@e6ae60d)) --- ##### [\`42.76.2\`](https://github.com/renovatebot/renovate/releases/tag/42.76.2) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.21.3 (main) ([#40349](renovatebot/renovate#40349)) ([2ef2a3b](renovatebot/renovate@2ef2a3b)) --- ##### [\`42.76.1\`](https://github.com/renovatebot/renovate/releases/tag/42.76.1) ##### Bug Fixes - **deps:** update ghcr.io/containerbase/sidecar docker tag to v13.25.22 (main) ([#40354](renovatebot/renovate#40354)) ([0455850](renovatebot/renovate@0455850)) ##### Miscellaneous Chores - **deps:** update ghcr.io/containerbase/devcontainer docker tag to v13.25.22 (main) ([#40353](renovatebot/renovate#40353)) ([216a1ca](renovatebot/renovate@216a1ca)) --- ##### [\`42.76.0\`](https://github.com/renovatebot/renovate/releases/tag/42.76.0) ##### Features - **pre-commit:** support golang additional dependencies ([#39469](renovatebot/renovate#39469)) ([cbcc72d](renovatebot/renovate@cbcc72d)) --- ##### [\`42.75.1\`](https://github.com/renovatebot/renovate/releases/tag/42.75.1) ##### Bug Fixes - **datasource:** Update MetaCPAN query for new Elasticsearch version ([#40335](renovatebot/renovate#40335)) ([5994b38](renovatebot/renovate@5994b38)) --- ##### [\`42.75.0\`](https://github.com/renovatebot/renovate/releases/tag/42.75.0) ##### Features - **bitbucket:** increase max body length ([#40345](renovatebot/renovate#40345)) ([75aa561](renovatebot/renovate@75aa561)) ##### Bug Fixes - **bitbucket:** markdown massaging for release notes ([#40344](renovatebot/renovate#40344)) ([3854945](renovatebot/renovate@3854945)) --- ##### [\`42.74.7\`](https://github.com/renovatebot/renovate/releases/tag/42.74.7) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.21.1 (main) ([#40343](renovatebot/renovate#40343)) ([1eb2554](renovatebot/renovate@1eb2554)) ##### Miscellaneous Chores - **deps:** update dependency pdm to v2.26.4 (main) ([#40342](renovatebot/renovate#40342)) ([8cc8242](renovatebot/renovate@8cc8242)) --- ##### [\`42.74.6\`](https://github.com/renovatebot/renovate/releases/tag/42.74.6) ##### Bug Fixes - **presets:** allow `pin` to not be governed by `minimumReleaseAge` ([#40289](renovatebot/renovate#40289)) ([7728d0e](renovatebot/renovate@7728d0e)), closes [#40288](renovatebot/renovate#40288) --- ##### [\`42.74.5\`](https://github.com/renovatebot/renovate/releases/tag/42.74.5) ##### Bug Fixes - **flux:** use shell semantics for file redirection ([#40324](renovatebot/renovate#40324)) ([b48e962](renovatebot/renovate@b48e962)), closes [#40275](https://github.com/renovatebot/renovate/issues/40275) --- ##### [\`42.74.4\`](https://github.com/renovatebot/renovate/releases/tag/42.74.4) ##### Bug Fixes - **yarn:** don't rely on shell semantics for ignoring command failures ([#40292](renovatebot/renovate#40292)) ([4e6e29f](renovatebot/renovate@4e6e29f)), closes [#40294](renovatebot/renovate#40294) ##### Miscellaneous Chores - **util/exec:** allow specifying `shell` on `CommandWithOptions` ([#40323](renovatebot/renovate#40323)) ([f903dcd](renovatebot/renovate@f903dcd)) --- ##### [\`42.74.3\`](https://github.com/renovatebot/renovate/releases/tag/42.74.3) ##### Bug Fixes - **composer:** don't rely on shell semantics for ignoring command failures ([#40291](renovatebot/renovate#40291)) ([7c467de](renovatebot/renovate@7c467de)), closes [#40284](renovatebot/renovate#40284) - **util/exec:** allow ignoring failures per-command ([#40290](renovatebot/renovate#40290)) ([9f3db00](renovatebot/renovate@9f3db00)) ##### Miscellaneous Chores - require specific version for "Request Help" Discussions ([#40321](renovatebot/renovate#40321)) ([9abf5f1](renovatebot/renovate@9abf5f1)) --- ##### [\`42.74.2\`](https://github.com/renovatebot/renovate/releases/tag/42.74.2) ##### Bug Fixes - **jsonata:** ensure all evaluations use a new environment ([#40312](renovatebot/renovate#40312)) ([8efdad4](renovatebot/renovate@8efdad4)) ##### Miscellaneous Chores - **deps:** update prom/prometheus docker tag to v3.9.1 (main) ([#40313](renovatebot/renovate#40313)) ([efda1ab](renovatebot/renovate@efda1ab)) ##### Code Refactoring - **git:** add debug logging for `baseBranch` ([#40307](renovatebot/renovate#40307)) ([bc86d73](renovatebot/renovate@bc86d73)) --- ##### [\`42.74.1\`](https://github.com/renovatebot/renovate/releases/tag/42.74.1) ##### Bug Fixes - **gitlab:** skip on unknown reviewers ([#39619](renovatebot/renovate#39619)) ([1413d5a](renovatebot/renovate@1413d5a)) ##### Documentation - add note for no backslashes in `matchStrings` ([#40061](renovatebot/renovate#40061)) ([1272688](renovatebot/renovate@1272688)) --- ##### [\`42.74.0\`](https://github.com/renovatebot/renovate/releases/tag/42.74.0) ##### Features - **http:** Prevent writes of already cached responses ([#38986](renovatebot/renovate#38986)) ([2e9edba](renovatebot/renovate@2e9edba)) --- ##### [\`42.73.0\`](https://github.com/renovatebot/renovate/releases/tag/42.73.0) ##### Features - make config filename lookup platform-specific ([#40065](renovatebot/renovate#40065)) ([d447c1a](renovatebot/renovate@d447c1a)) ##### Documentation - Use `matchPackageNames` in `dependencyDashboardApproval` example ([#40301](renovatebot/renovate#40301)) ([d300868](renovatebot/renovate@d300868)) --- ##### [\`42.72.0\`](https://github.com/renovatebot/renovate/releases/tag/42.72.0) ##### Features - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.21.0 (main) ([#40300](renovatebot/renovate#40300)) ([eeea6f2](renovatebot/renovate@eeea6f2)) ##### Miscellaneous Chores - **deps:** update dependency pnpm to v10.27.0 (main) ([#40299](renovatebot/renovate#40299)) ([6a9c714](renovatebot/renovate@6a9c714)) - **deps:** update otel/opentelemetry-collector-contrib docker tag to v0.143.0 (main) ([#40295](renovatebot/renovate#40295)) ([80f0335](renovatebot/renovate@80f0335)) - **deps:** update otel/opentelemetry-collector-contrib docker tag to v0.143.1 (main) ([#40297](renovatebot/renovate#40297)) ([0355125](renovatebot/renovate@0355125)) - **deps:** update prom/prometheus docker tag to v3.9.0 (main) ([#40296](renovatebot/renovate#40296)) ([88aa5eb](renovatebot/renovate@88aa5eb))

jamietanna mentioned this pull request Jan 8, 2026

refactor(flux): don't use shell semantics for file redirection #40326

Open

jamietanna force-pushed the defect/flux-shell branch 2 times, most recently from 2f241fa to 83bbef9 Compare January 8, 2026 13:40

jamietanna force-pushed the defect/flux branch from bf06e3a to 5b74f0f Compare January 8, 2026 13:41

fix(flux): use shell semantics for file redirection

eec2dae

As reported in #40275, since f430552 we've seen Flux failing to update. We can take advantage of the new `shell` option to handle this safe shell semantics usage for file redirection.

Base automatically changed from defect/flux-shell to main January 8, 2026 14:24

jamietanna force-pushed the defect/flux branch from 5b74f0f to eec2dae Compare January 8, 2026 14:31

jamietanna requested a review from viceice January 8, 2026 14:31

jamietanna marked this pull request as ready for review January 8, 2026 14:31

jamietanna enabled auto-merge January 8, 2026 14:37

viceice approved these changes Jan 8, 2026

View reviewed changes

jamietanna added this pull request to the merge queue Jan 8, 2026

Merged via the queue into main with commit b48e962 Jan 8, 2026
43 of 60 checks passed

jamietanna deleted the defect/flux branch January 8, 2026 14:56

github-actions Bot locked as resolved and limited conversation to collaborators Feb 8, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(flux): use shell semantics for file redirection#40324

fix(flux): use shell semantics for file redirection#40324
jamietanna merged 1 commit intomainfrom
defect/flux

jamietanna commented Jan 8, 2026 •

edited

Loading

Uh oh!

Uh oh!

github-actions Bot commented Jan 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

jamietanna commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Context

AI assistance disclosure

Documentation (please check one with an [x])

How I've tested my work (please select one)

Uh oh!

Uh oh!

github-actions Bot commented Jan 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

jamietanna commented Jan 8, 2026 •

edited

Loading