briklab/versions.yml at main · getbrik/briklab · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
# Briklab -- SINGLE SOURCE OF TRUTH for all component versions.
#
# Edit this file, then run:  make versions
# CI guard:                  make versions-check
#
# Generated artifacts (DO NOT EDIT BY HAND -- they are overwritten):
#   - versions.env                  image tags + build args, loaded by docker compose
#   - config/jenkins/plugins.txt    pinned Jenkins plugins
#   - config/brik-images.lock.yaml  digest-pinned brik-runner images
#
# Why digests for runner images: the brik-runner tags (:latest, :22, :3.13...)
# are mutable. Pinning the multi-arch index digest makes a clean rebuild pull
# the exact same images the E2E suite was validated against.

# --- Infra service images (docker compose) ---
infra:
  gitlab:               "gitlab/gitlab-ce:18.10.1-ce.0"
  gitlab_runner:        "gitlab/gitlab-runner:alpine3.21-bleeding"
  gitlab_runner_helper: "gitlab/gitlab-runner-helper:alpine3.21-arm-bleeding"
  gitea:                "gitea/gitea:1.26.2"
  nexus:                "sonatype/nexus3:3.92.2-alpine"
  openbao:              "openbao/openbao:2.5.4"
  jenkins_base:         "jenkins/jenkins:2.541.3-lts-jdk21"
  ssh_target_base:      "alpine:3.23"

# --- Kubernetes / GitOps control plane (scripts/lib/setup/k3d.sh) ---
kubernetes:
  k3s:    "rancher/k3s:v1.33.6-k3s1"
  argocd: "v3.3.7"

# --- Build-time tools baked into the custom Jenkins image ---
tools:
  yq: "v4.44.6"

# --- Jenkins plugins (pinned to the versions installed in the running image) ---
jenkins_plugins:
  configuration-as-code: "2077.v41f1011a_5110"
  git:                   "5.10.1"
  workflow-aggregator:   "608.v67378e9d3db_1"
  pipeline-stage-view:   "2.41"
  docker-workflow:       "634.vedc7242b_eda_7"
  docker-plugin:         "1316.v75635a_002b_0a_"
  gitlab-plugin:         "1.9.13"
  gitea:                 "273.vb_78d13f6d9a_d"
  credentials-binding:   "720.v3f6decef43ea_"
  job-dsl:               "3654.vdf58f53e2d15"
  ansicolor:             "536.v13fa_b_860c267"
  timestamper:           "1.30"
  ws-cleanup:            "0.49"
  pipeline-groovy-lib:   "797.v90ea_a_9b_e45a_0"
  warnings-ng:           "13.10085.v94a_d6ca_82b_f6"

# --- brik-runner images, digest-pinned. Full matrix published on ghcr.io/getbrik.
# tag MUST match what the brik runtime requests (runner_classes.yml + stack
# manifests): base/analysis/scanner/deploy -> latest; stacks -> their version.
# digest is the multi-arch index pulled and then tagged locally by sync-brik-images.sh,
# so a job's `pull_policy: if-not-present` resolves the tag to the pinned image.
runner_images:
  - { ref: "ghcr.io/getbrik/brik-runner-base",     tag: "latest", digest: "sha256:3f40255b190882c1c5bfa1b4b50a23fad27ec7ea85385dac6afa3057ac0e8d3e" }
  - { ref: "ghcr.io/getbrik/brik-runner-node",     tag: "22",   digest: "sha256:f6da691b5117757eb40357e716eb381d24855c9b7c9ba4fe64fbb0fe01036eee" }
  - { ref: "ghcr.io/getbrik/brik-runner-node",     tag: "24",   digest: "sha256:209f0b9bcedffbfd5a258282b8616ff3dee18804168a93c667bb06e7fc9eecac" }
  - { ref: "ghcr.io/getbrik/brik-runner-python",   tag: "3.13", digest: "sha256:3ca1814879c9d01297324104b3ddd4ea017af54a8e549eba5e673d7384528093" }
  - { ref: "ghcr.io/getbrik/brik-runner-python",   tag: "3.14", digest: "sha256:6432f4890dadd73f839a4c681fc64a6651661273e828942757f8daf57aaaf631" }
  - { ref: "ghcr.io/getbrik/brik-runner-java",     tag: "21",   digest: "sha256:815ed17e76416a417cb5f3d128105e15d1b3fdcb55ce1f2efef5a4eb8859f82f" }
  - { ref: "ghcr.io/getbrik/brik-runner-java",     tag: "25",   digest: "sha256:585423b5672c43f44bb3a16660644a9ef9c77c7e305ea37e06f7b3124e3ba769" }
  - { ref: "ghcr.io/getbrik/brik-runner-rust",     tag: "1",    digest: "sha256:ca72b4ad51cd4e538e4b1a7e02030abbe80501446603feb351483b45327db5a8" }
  - { ref: "ghcr.io/getbrik/brik-runner-dotnet",   tag: "9.0",  digest: "sha256:3980066083c03d5c28e2b6c867d6cd56cb2dd80f24cc8513bf9b7d6c18addf3b" }
  - { ref: "ghcr.io/getbrik/brik-runner-dotnet",   tag: "10.0", digest: "sha256:27e16f093a559bd4d79cea67adcb777d26400e2dde12165b6c95d3e05426db48" }
  - { ref: "ghcr.io/getbrik/brik-runner-analysis", tag: "latest", digest: "sha256:dc7ec4c554ee9a80e00136fcfc82995c12a8746659494d6fa222649b520a6b08" }
  - { ref: "ghcr.io/getbrik/brik-runner-scanner",  tag: "latest", digest: "sha256:cd002ef1e8b0791b302166e7e5dcfcd5442f6fc6a4c3a4d07989aec9201d63de" }
  - { ref: "ghcr.io/getbrik/brik-runner-deploy",   tag: "latest", digest: "sha256:550ac4585e7fe284d003dfd52521493a547d67e00f58ad64b90bcd1d7e04e881" }