From fb1371bf184dc255dcb02506165ede55263b7854 Mon Sep 17 00:00:00 2001 From: Lorenzo Felletti Date: Mon, 27 Jul 2026 14:47:18 +0100 Subject: [PATCH 1/4] refactor: remove unused DistrolessStaticImage from constants and renovate --- .dagger/constants.go | 2 -- renovate.json5 | 1 - 2 files changed, 3 deletions(-) diff --git a/.dagger/constants.go b/.dagger/constants.go index 9daa906..38e8883 100644 --- a/.dagger/constants.go +++ b/.dagger/constants.go @@ -9,8 +9,6 @@ const ( GolangImage = "golang:1.26" // RegistryImage is image for local container registry RegistryImage = "registry:3" - // DistrolessStaticImage is the distroless static image - DistrolessStaticImage = "gcr.io/distroless/static:latest" // KustomizeImage is the Kustomize image KustomizeImage = "registry.k8s.io/kustomize/kustomize:v5.8.1" // CuelangVersion is the version of Cuelang diff --git a/renovate.json5 b/renovate.json5 index 2ad2996..1532cfa 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -9,7 +9,6 @@ "matchStrings": [ "GolangImage\\s*=\\s*\"(?[\\w/-]+)[:@](?.*?)\"", "RegistryImage\\s*=\\s*\"(?[\\w/-]+)[:@](?.*?)\"", - "DistrolessStaticImage\\s*=\\s*\"(?[\\w/-]+)[:@](?.*?)\"", "KustomizeImage\\s*=\\s*\"(?[\\w/-]+)[:@](?.*?)\"", "GolangciLintImage\\s*=\\s*\"(?[\\w/-]+)[:@](?.*?)\"", "GitImage\\s*=\\s*\"(?[\\w/-]+)[:@](?.*?)\"" From cf25dce684baff02cd44cbb7b973dbfea4e4fd61 Mon Sep 17 00:00:00 2001 From: Lorenzo Felletti Date: Mon, 27 Jul 2026 14:47:36 +0100 Subject: [PATCH 2/4] chore(deps): update k8s.io/api and k8s.io/apimachinery to v0.36.3 --- go.mod | 4 ++-- go.sum | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/go.mod b/go.mod index a6825b9..8ad08e4 100644 --- a/go.mod +++ b/go.mod @@ -6,8 +6,8 @@ require ( cuelang.org/go v0.17.1 github.com/go-logr/logr v1.4.4 github.com/stretchr/testify v1.11.1 - k8s.io/api v0.36.2 - k8s.io/apimachinery v0.36.2 + k8s.io/api v0.36.3 + k8s.io/apimachinery v0.36.3 k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad oras.land/oras-go/v2 v2.6.2 sigs.k8s.io/kustomize/api v0.21.1 diff --git a/go.sum b/go.sum index 462ca41..57b020b 100644 --- a/go.sum +++ b/go.sum @@ -142,10 +142,10 @@ gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw= gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= -k8s.io/api v0.36.2 h1:TF6YDLIzKfccK7cq9YpTcGX8TJmEkHVRv78DM51fRYY= -k8s.io/api v0.36.2/go.mod h1:F4LbMO4brjZYh7yFkXWhynSvtB7YauxV4c+HHkNRGNg= -k8s.io/apimachinery v0.36.2 h1:0PE/W/WNy1UX61NLbXY5TMbJ6UwLL6E6lAPkYrKFxbQ= -k8s.io/apimachinery v0.36.2/go.mod h1:fvf/HOLXq9RId0rnDIbN1OEBvHXdQbLMM8nu0LcBUf4= +k8s.io/api v0.36.3 h1:NxB+05W2UGqXWFXcLO0RB5cnqnUPP5v5sVlaOH0Iz4w= +k8s.io/api v0.36.3/go.mod h1:JzLQKqRHC5+I8RVj/lS3lCg0mg6nWI9Fo/Sk3ElxHzg= +k8s.io/apimachinery v0.36.3 h1:PkzMRBRG8joFD8EhCuQAtNPvJlxb82FwplP26HIzvAM= +k8s.io/apimachinery v0.36.3/go.mod h1:cTSjBWgPe/6CQyBKzY/hDIRWCQQQeK0mfLbml0UYFHE= k8s.io/klog/v2 v2.140.0 h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc= k8s.io/klog/v2 v2.140.0/go.mod h1:o+/RWfJ6PwpnFn7OyAG3QnO47BFsymfEfrz6XyYSSp0= k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad h1:oXImqH8mQNk7PmvzKhmN3ddJoY6OnyM225MXwGHPm0A= From 0aff3280bf6a38c2003f1dcd07ecf885aa76ac55 Mon Sep 17 00:00:00 2001 From: Lorenzo Felletti Date: Mon, 27 Jul 2026 14:48:07 +0100 Subject: [PATCH 3/4] chore: use nonroot user --- Containerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Containerfile b/Containerfile index 6445871..7446791 100644 --- a/Containerfile +++ b/Containerfile @@ -19,7 +19,7 @@ ADD main.go main.go RUN CGO_ENABLED=0 GOOS="$GOOS" GOARCH="$GOARCH" go build -ldflags "$LDFLAGS" -o cuestomize main.go -FROM gcr.io/distroless/static:latest +FROM gcr.io/distroless/static:nonroot ENV CUE_CACHE_DIR=/tmp/cue-cache From cbe4b0574433cca65a3d07489f5c2914beba43b5 Mon Sep 17 00:00:00 2001 From: Lorenzo Felletti Date: Mon, 27 Jul 2026 14:48:16 +0100 Subject: [PATCH 4/4] chore: bump version to v0.6.2 --- semver | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/semver b/semver index 45a9970..f420d70 100644 --- a/semver +++ b/semver @@ -1 +1 @@ -v0.6.1 \ No newline at end of file +v0.6.2 \ No newline at end of file