.github/workflows/tests.yml

@@ -181,7 +181,7 @@ jobs:
         AWS_DEFAULT_REGION: ${{ vars.AWS_REGION || 'us-east-1' }}
 
     # https://github.com/webfactory/ssh-agent
-    - uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
+    - uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
       with:
         ssh-private-key: ${{ steps.generate-key-pair.outputs.ssh_private_key }}
 
@@ -390,10 +390,6 @@ jobs:
           --service cert-manager \
           --device '${{ steps.register-test-device.outputs.balena_device_uuid }}'
 
-        with_backoff balena env add AWS_SESSION_TOKEN '${{ env.AWS_SESSION_TOKEN }}' \
-          --service cert-manager \
-          --device '${{ steps.register-test-device.outputs.balena_device_uuid }}'
-
     - name: provision balenaOS ephemeral SUT
       id: balena-sut
       if: matrix.target == 'balena-public-pki'

.versionbot/CHANGELOG.yml

@@ -1,91 +1,3 @@
-- commits:
-    - subject: Update balena/open-balena-api Docker tag to v35
-      hash: 001975e72ab0d294acafe1f2c8e69eae7b85c8f5
-      body: |
-        Update balena/open-balena-api from 34.10.3 to 35.0.0
-      footer:
-        Change-type: patch
-        change-type: patch
-      author: balena-renovate[bot]
-      nested: []
-  version: 4.1.390
-  title: ""
-  date: 2025-03-20T21:59:19.061Z
-- commits:
-    - subject: Update balena/open-balena-vpn Docker tag to v11.32.6
-      hash: 47f6fccc74f6ac74bfc42b5ff7ba61616ce29385
-      body: |
-        Update balena/open-balena-vpn from 11.32.5 to 11.32.6
-      footer:
-        Change-type: patch
-        change-type: patch
-      author: balena-renovate[bot]
-      nested: []
-  version: 4.1.389
-  title: ""
-  date: 2025-03-20T20:33:31.259Z
-- commits:
-    - subject: "patch: Add missing session token to use ephemeral AWS creds."
-      hash: 025e120ac809f656fd2c959553d95919830a1e54
-      body: ""
-      footer: {}
-      author: Anton Belodedenko
-      nested: []
-  version: 4.1.388
-  title: ""
-  date: 2025-03-20T18:32:46.869Z
-- commits:
-    - subject: Update balena/open-balena-api Docker tag to v34.10.3
-      hash: 4c1bef79f7ab948e95116d30a316a05d56d3ebcd
-      body: |
-        Update balena/open-balena-api from 34.10.2 to 34.10.3
-      footer:
-        Change-type: patch
-        change-type: patch
-      author: balena-renovate[bot]
-      nested: []
-  version: 4.1.387
-  title: ""
-  date: 2025-03-19T15:37:31.398Z
-- commits:
-    - subject: Update balena/open-balena-api Docker tag to v34.10.2
-      hash: 5c338566f2ac1785323fe571177e50881edbc00f
-      body: |
-        Update balena/open-balena-api from 34.10.1 to 34.10.2
-      footer:
-        Change-type: patch
-        change-type: patch
-      author: balena-renovate[bot]
-      nested: []
-  version: 4.1.386
-  title: ""
-  date: 2025-03-18T17:12:00.113Z
-- commits:
-    - subject: Update webfactory/ssh-agent action to v0.9.1
-      hash: 03e5ffc04ebca72051445a29a3385d825ffca638
-      body: |
-        Update webfactory/ssh-agent from 0.9.0 to 0.9.1
-      footer:
-        Change-type: patch
-        change-type: patch
-      author: balena-renovate[bot]
-      nested: []
-  version: 4.1.385
-  title: ""
-  date: 2025-03-17T15:22:25.396Z
-- commits:
-    - subject: Update balena/cert-manager Docker tag to v0.3.1
-      hash: a9fa9ed053276f5cae1bd1160355f6ab3ee4e6e5
-      body: |
-        Update balena/cert-manager from 0.2.3 to 0.3.1
-      footer:
-        Change-type: patch
-        change-type: patch
-      author: balena-renovate[bot]
-      nested: []
-  version: 4.1.384
-  title: ""
-  date: 2025-03-17T14:55:59.858Z
 - commits:
     - subject: Update balena/open-balena-vpn Docker tag to v11.32.5
       hash: a6802d55bd10e6560a26a05d2f9500bdcd5768ef

CHANGELOG.md

@@ -4,41 +4,6 @@ All notable changes to this project will be documented in this file
 automatically by Versionist. DO NOT EDIT THIS FILE MANUALLY!
 This project adheres to [Semantic Versioning](http://semver.org/).
 
-# v4.1.390
-## (2025-03-20)
-
-* Update balena/open-balena-api Docker tag to v35 [balena-renovate[bot]]
-
-# v4.1.389
-## (2025-03-20)
-
-* Update balena/open-balena-vpn Docker tag to v11.32.6 [balena-renovate[bot]]
-
-# v4.1.388
-## (2025-03-20)
-
-* patch: Add missing session token to use ephemeral AWS creds. [Anton Belodedenko]
-
-# v4.1.387
-## (2025-03-19)
-
-* Update balena/open-balena-api Docker tag to v34.10.3 [balena-renovate[bot]]
-
-# v4.1.386
-## (2025-03-18)
-
-* Update balena/open-balena-api Docker tag to v34.10.2 [balena-renovate[bot]]
-
-# v4.1.385
-## (2025-03-17)
-
-* Update webfactory/ssh-agent action to v0.9.1 [balena-renovate[bot]]
-
-# v4.1.384
-## (2025-03-17)
-
-* Update balena/cert-manager Docker tag to v0.3.1 [balena-renovate[bot]]
-
 # v4.1.383
 ## (2025-03-17)
 

VERSION

@@ -1 +1 @@
-4.1.390
+4.1.383

balena.yml

@@ -23,4 +23,4 @@ data:
     - generic-amd64
     - genericx86-64-ext
     - intel-nuc
-version: 4.1.390
+version: 4.1.383

docker-compose.yml

@@ -79,7 +79,7 @@ services:
       *with-default-privileges,
       *with-default-volumes,
     ]
-    image: balena/open-balena-api:35.0.0
+    image: balena/open-balena-api:34.10.1
     depends_on:
       - db
       - redis
@@ -146,7 +146,7 @@ services:
       *with-network-privileges,
       *with-default-privileges,
     ]
-    image: balena/open-balena-vpn:11.32.6
+    image: balena/open-balena-vpn:v11.32.5
     depends_on:
       - api
     environment:

src/cert-manager/Dockerfile

@@ -1,4 +1,4 @@
 # https://github.com/balena-io/cert-manager
-FROM balena/cert-manager:0.3.2
+FROM balena/cert-manager:0.2.3
 
 COPY *.json /opt/