[pull] main from gitpod-io:main by pull[bot] · Pull Request #375 · 16CentAstrology/gitpod

pull · 2025-08-19T17:08:09Z

See Commits and Changes for more details.

Created by pull[bot] (v2.0.0-alpha.3)

Can you help keep this open source service alive? 💖 Please sponsor : )

This reverts commit fd36244.

* Updating Go dependency: Docker and Git to fix CVE Tool: gitpod/catfood.gitpod.cloud * [image-builder-bob] Pin OpenTelemetry dependencies to compatible versions Tool: gitpod/catfood.gitpod.cloud

Tool: gitpod/catfood.gitpod.cloud

* [.github] search completed runs * [.github] we were scraping a main-gha version from a dev image This ensures we scrap what leeway is building * Fix

Tool: gitpod/catfood.gitpod.cloud

* Revert GHA tag grep on script Tool: gitpod/catfood.gitpod.cloud * Fix GHA Tool: gitpod/catfood.gitpod.cloud * fixup Tool: gitpod/catfood.gitpod.cloud

…CRITICAL in images (#20712) * [scripts] Introduce trivy-scan-images.sh Tool: gitpod/catfood.gitpod.cloud * [trivy] Fitting trivyignore.yaml Tool: gitpod/catfood.gitpod.cloud * [trivy] Add scan and enforcement of "CRITICAL" vulns at build time Tool: gitpod/catfood.gitpod.cloud * Fix base repo ref Tool: gitpod/catfood.gitpod.cloud * Replace docker run by oci-tool fetch file Tool: gitpod/catfood.gitpod.cloud

* Add Gitpod Classic sunset notification * copy text update

…st" (#20719) Tool: gitpod/catfood.gitpod.cloud

Co-authored-by: kylos101 <1272076+kylos101@users.noreply.github.com>

) * Reapply "[image-builder-bob] bump up buildkit (#20690)" (#20693) This reverts commit 7137833. Tool: gitpod/catfood.gitpod.cloud * update Tool: gitpod/catfood.gitpod.cloud

Tool: gitpod/catfood.gitpod.cloud

…20733)

* Introduce .clinerules with memory bank * Explicitly mention memory-bank/components in rules

* Patch build VSCode Browser 1.98 * Update code commit

* Log the event name when hashConfig fails * [common-go] backoff and retry watching files * Revert "[common-go] backoff and retry watching files" This reverts commit e43e0d8. * Continue watching, after hashConfig error This way, subsequent changes to the watched file may be honored

* [ops] add Slack alert for GitpodImageBuilderMk3InternalErrors * Fix

* feat(dashboard): Refactor header layout and update start page UI * addressing nit fixes

* [JetBrains] Update IDE images to new build version * Make it build * Update Platform Version of JetBrains Gateway Plugin (Stable) to * Upgrade setup-java to v4 --------- Co-authored-by: Robo Quat <roboquat@gitpod.io>

Configure NODE_EXTRA_CA_CERTS env var to point to the CA certificate bundle file

Co-authored-by: Ona <no-reply@ona.com>

Co-authored-by: Codex <noreply@openai.com>

Co-authored-by: Ona <no-reply@ona.com>

Co-authored-by: Codex <noreply@openai.com>

* Mitigate critical CVEs in bundled tools Co-authored-by: Codex <noreply@openai.com> * Use Go 1.25 for gpctl Co-authored-by: Codex <noreply@openai.com> --------- Co-authored-by: Codex <noreply@openai.com>

* Bump shell-quote to 1.8.4 Co-authored-by: Codex <noreply@openai.com> * Normalize shell-quote lockfile entry Co-authored-by: Codex <noreply@openai.com> --------- Co-authored-by: Codex <noreply@openai.com>

Co-authored-by: Codex <noreply@openai.com>

Co-authored-by: Ona <no-reply@ona.com>

Co-authored-by: Codex <noreply@openai.com>

Co-authored-by: Ona <no-reply@ona.com>

geropl and others added 30 commits March 21, 2025 08:22

Revert "[image-builder-bob] bump up buildkit (#20690)" (#20693)

7137833

This reverts commit fd36244.

Updating Go dependency: Docker and Git to fix CVE (#20689)

313610d

* Updating Go dependency: Docker and Git to fix CVE Tool: gitpod/catfood.gitpod.cloud * [image-builder-bob] Pin OpenTelemetry dependencies to compatible versions Tool: gitpod/catfood.gitpod.cloud

[db] Switch to node:18.20.7-alpine base image (#20695)

81a13fb

Tool: gitpod/catfood.gitpod.cloud

[installer] Bump kube-rbac-proxy to v0.19.0 (#20696)

b0237e2

Tool: gitpod/catfood.gitpod.cloud

[db] Bump cloud-sql-proxy to v1.37.6 (#20697)

257d79c

Tool: gitpod/catfood.gitpod.cloud

[.github] fix workspace integration tests (#20698)

c79af10

* [.github] search completed runs * [.github] we were scraping a main-gha version from a dev image This ensures we scrap what leeway is building * Fix

[gha] Fix IDE integration tests (#20703)

9759449

Tool: gitpod/catfood.gitpod.cloud

[gha] Correct installer tag finding for IDE integration tests (#20704)

91ad3e7

* Revert GHA tag grep on script Tool: gitpod/catfood.gitpod.cloud * Fix GHA Tool: gitpod/catfood.gitpod.cloud * fixup Tool: gitpod/catfood.gitpod.cloud

Remove empty line (#20706)

40c5b7c

New Gitpod Classic notification (#20714)

570d5c0

* Add Gitpod Classic sunset notification * copy text update

[server, bridge] Bind metrics apps to "127.0.0.1" instead of "localho…

198dea4

…st" (#20719) Tool: gitpod/catfood.gitpod.cloud

update index (#20721)

cbc17ce

Co-authored-by: kylos101 <1272076+kylos101@users.noreply.github.com>

Reapply "[image-builder-bob] bump up buildkit (#20690)" (#20693) (#20694

f0eafab

) * Reapply "[image-builder-bob] bump up buildkit (#20690)" (#20693) This reverts commit 7137833. Tool: gitpod/catfood.gitpod.cloud * update Tool: gitpod/catfood.gitpod.cloud

Fix trivy scan on main (#20723)

b134e9c

Add line (#20724)

d38220d

[installer] Avoid https://tldr.fail (#20726)

205ef5d

Tool: gitpod/catfood.gitpod.cloud

[supervisor] Improve git status calls to disable optional locks (#20715)

ea188a5

Tool: gitpod/catfood.gitpod.cloud

[db] Migrations image: explicitly add bash (#20732)

3b917d8

[trivy] Drop superfluous trivyignore entries as follow up to #20694 (#…

2e8685b

…20733)

Introduce .clinerules with memory bank embedded (#20737)

064619c

* Introduce .clinerules with memory bank * Explicitly mention memory-bank/components in rules

Patch build VSCode Browser 1.98 (#20747)

2112818

* Patch build VSCode Browser 1.98 * Update code commit

[code] update code image layers (#20748)

253dac6

[ops] add Slack alert for GitpodImageBuilderMk3InternalErrors (#20753)

217ba2d

* [ops] add Slack alert for GitpodImageBuilderMk3InternalErrors * Fix

feat(dashboard): Update header layout and start page branding (#20762)

d3348ed

* feat(dashboard): Refactor header layout and update start page UI * addressing nit fixes

[JetBrains] Upgrade IDEs to 2025.1 (#20763)

fbe6353

* [JetBrains] Update IDE images to new build version * Make it build * Update Platform Version of JetBrains Gateway Plugin (Stable) to * Upgrade setup-java to v4 --------- Co-authored-by: Robo Quat <roboquat@gitpod.io>

update github action runtime (#20768)

828784c

[server] Fix custom CA (#20770)

561fde4

Configure NODE_EXTRA_CA_CERTS env var to point to the CA certificate bundle file

update index (#20740)

1b1575b

geropl and others added 30 commits May 4, 2026 12:22

Block AF_ALG in workspace seccomp profile (#21427)

cfdcb39

Update images digests (#21438)

73ef5c8

Co-authored-by: Ona <no-reply@ona.com>

Update images digests (#21446)

985e7f7

Co-authored-by: Ona <no-reply@ona.com>

Update images digests (#21454)

ef4d94b

Co-authored-by: Ona <no-reply@ona.com>

Update images digests (#21463)

0f24096

Co-authored-by: Ona <no-reply@ona.com>

Fix critical CVEs from dependency scan (#21468)

131f6d1

Co-authored-by: Codex <noreply@openai.com>

Update images digests (#21472)

2da4a57

Co-authored-by: Ona <no-reply@ona.com>

Reduce critical CVE findings in Classic images (#21473)

c306d1e

Co-authored-by: Codex <noreply@openai.com>

Mitigate critical CVEs in bundled tools (#21474)

a0249c1

* Mitigate critical CVEs in bundled tools Co-authored-by: Codex <noreply@openai.com> * Use Go 1.25 for gpctl Co-authored-by: Codex <noreply@openai.com> --------- Co-authored-by: Codex <noreply@openai.com>

Bump shell-quote to 1.8.4 (#21481)

885bcb9

* Bump shell-quote to 1.8.4 Co-authored-by: Codex <noreply@openai.com> * Normalize shell-quote lockfile entry Co-authored-by: Codex <noreply@openai.com> --------- Co-authored-by: Codex <noreply@openai.com>

Pin Docker version in devcontainer (#21482)

3bda275

Co-authored-by: Codex <noreply@openai.com>

Use system prettier pre-commit hook (#21483)

61df71c

Co-authored-by: Codex <noreply@openai.com>

Update images digests (#21487)

828e0b0

Co-authored-by: Codex <noreply@openai.com>

Update images digests (#21495)

c561888

Co-authored-by: Ona <no-reply@ona.com>

Address phase 1 critical CVE findings (#21496)

820e083

Co-authored-by: Codex <noreply@openai.com>

Rebuild docker-up runtime artifacts for CVE fixes (#21497)

c88514b

Co-authored-by: Codex <noreply@openai.com>

Rebuild ws-daemon runtime tools for CVE fixes (#21498)

d3d7ab0

Co-authored-by: Codex <noreply@openai.com>

Improve critical vulnerability scan summaries (#21499)

f1810e7

Co-authored-by: Codex <noreply@openai.com>

Reject invalid workspace timeout units (#21502)

bd1e39b

Co-authored-by: Codex <noreply@openai.com>

Update images digests (#21508)

4c4ea8b

Co-authored-by: Codex <noreply@openai.com>

Update images digests (#21517)

7e6d1c2

Co-authored-by: Codex <noreply@openai.com>

Update images digests (#21527)

11bb55e

Co-authored-by: Codex <noreply@openai.com>

Bump Leeway to v0.10.9 for vulnerability scans (#21535)

af692fd

Co-authored-by: Codex <noreply@openai.com>

Add agent guidance for dev image updates (#21537)

76f6b36

Co-authored-by: Codex <noreply@openai.com>

Update dev environment image to main-gha.34488 (#21536)

4abe295

Co-authored-by: Codex <noreply@openai.com>

Fix critical vulnerabilities from daily scan (#21540)

5ca7667

Co-authored-by: Codex <noreply@openai.com>

Fix critical vulnerabilities from daily scan (#21542)

be10a0a

Co-authored-by: Codex <noreply@openai.com>

Remove unused curl from Caddy images (#21544)

4f45d02

Co-authored-by: Codex <noreply@openai.com>

Update images digests (#21549)

c603856

Co-authored-by: Ona <no-reply@ona.com>

Update images digests (#21551)

6696bca

Co-authored-by: Ona <no-reply@ona.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[pull] main from gitpod-io:main - #375

[pull] main from gitpod-io:main#375
pull[bot] wants to merge 4143 commits into
16CentAstrology:mainfrom
gitpod-io:main

pull Bot commented Aug 19, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

14 participants

Conversation

pull Bot commented Aug 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

14 participants

pull Bot commented Aug 19, 2025 •

edited

Loading