v4.1.75

Update balena/open-balena-api Docker tag to v26.3.3

.github/actionlint.yaml

@@ -0,0 +1,8 @@
+self-hosted-runner:
+  # Labels of self-hosted runner in array of strings.
+  labels:
+  - "distro:jammy"
+# Configuration variables in array of strings defined in your repository or
+# organization. `null` means disabling configuration variables check.
+# Empty array means no configuration variable is allowed.
+config-variables: null

.github/workflows/flowzone.yml

@@ -25,15 +25,6 @@ jobs:
     with:
       jobs_timeout_minutes: 60
       cloudflare_website: open-balena
-      custom_runs_on: |
-        [
-          [
-            "self-hosted",
-            "Linux",
-            "X64"
-          ]
-        ]
-
       balena_slugs: |
         balena/open-balena
 

.github/workflows/tests.yml

@@ -73,13 +73,13 @@ jobs:
       name: ${{ matrix.target }}
 
     steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+    - uses: actions/checkout@9a9194f87191a7e9055e3e9b95b8cfb13023bb08
 
     # https://github.com/unfor19/install-aws-cli-action
     - name: Setup awscli
       uses: unfor19/install-aws-cli-action@e8b481e524a99f37fbd39fdc1dcb3341ab091367 # v1
 
-    - uses: aws-actions/configure-aws-credentials@af7e7d4f5cd9d70c88a15b7a1332764a801f90d2
+    - uses: aws-actions/configure-aws-credentials@ead1e6af28a20f26cc47437fa7e4c8357409ef24
       with:
         aws-region: ${{ vars.AWS_REGION || 'us-east-1' }}
         role-session-name: github-${{ github.job }}-${{ github.run_id }}-${{ github.run_attempt }}
@@ -90,15 +90,19 @@ jobs:
     - name: install session-manager-plugin
       if: matrix.target == 'compose-private-pki'
       run: |
+        # shellcheck disable=SC2153
         runner_arch="$(echo "${RUNNER_ARCH}" | tr '[:upper:]' '[:lower:]' | sed 's/x64/64bit/g')"
 
-        session-manager-plugin || (curl -sSfo session-manager-plugin.deb https://s3.amazonaws.com/session-manager-downloads/plugin/latest/ubuntu_${runner_arch}/session-manager-plugin.deb \
+        session-manager-plugin || (curl -sSfo session-manager-plugin.deb "https://s3.amazonaws.com/session-manager-downloads/plugin/latest/ubuntu_${runner_arch}/session-manager-plugin.deb" \
           && sudo dpkg -i session-manager-plugin.deb \
           && rm -f session-manager-plugin.deb)
 
     # https://github.com/balena-io-examples/setup-balena-action
     - name: Setup balena CLI
       uses: balena-io-examples/setup-balena-action@main
+      with:
+        # renovate: datasource=github-releases depName=balena-io/balena-cli
+        cli-version: v18.2.17
 
     # https://github.com/pdcastro/ssh-uuid#why
     # https://github.com/pdcastro/ssh-uuid#linux-debian-ubuntu-others
@@ -144,7 +148,7 @@ jobs:
         set ${verbose}
 
         key_name="${{ matrix.target }}-${GITHUB_RUN_ID}-${GITHUB_RUN_NUMBER}-${GITHUB_RUN_ATTEMPT}"
-        echo "key_name=${key_name}" >> $GITHUB_OUTPUT
+        echo "key_name=${key_name}" >>"${GITHUB_OUTPUT}"
 
         set +x
         private_key_material="$(aws ec2 create-key-pair \
@@ -160,14 +164,13 @@ jobs:
         done <<< "${private_key_material}"
 
         ssh_private_key="$(cat << EOF
-        $(echo "${private_key_material}")
+        ${private_key_material}
         EOF
         )"
-        echo "ssh_private_key<<EOF" >> $GITHUB_OUTPUT
+        echo "ssh_private_key<<EOF" >>"${GITHUB_OUTPUT}"
         set ${verbose}
 
-        echo "${ssh_private_key}" >> $GITHUB_OUTPUT
-        echo "EOF" >> $GITHUB_OUTPUT
+        { echo "${ssh_private_key}"; echo "EOF"; } >>"${GITHUB_OUTPUT}"
 
         echo "ssh_public_key=${public_key}" >> "${GITHUB_OUTPUT}"
 
@@ -201,6 +204,7 @@ jobs:
         # the actual version deployed depends on the AWS EC2/AMI, defined in AWS_EC2_LAUNCH_TEMPLATE
         os_version="$(balena os versions ${{ vars.DEVICE_TYPE || 'generic-amd64' }} | head -n 1)"
 
+        # shellcheck disable=SC2046
         balena config generate \
           --version "${os_version}" \
           --device "${balena_device_uuid}" \
@@ -217,7 +221,7 @@ jobs:
           GITHUB_SHA GITHUB_WORKFLOW RUNNER_ARCH RUNNER_NAME RUNNER_OS)
 
         for github_var in "${github_vars[@]}"; do
-            balena tag set ${github_var} "${!github_var}" --device "${balena_device_uuid}"
+            balena tag set "${github_var}" "${!github_var}" --device "${balena_device_uuid}"
         done
 
         echo "balena_device_uuid=${balena_device_uuid}" >> "${GITHUB_OUTPUT}"
@@ -391,6 +395,7 @@ jobs:
 
         source src/balena-tests/functions
 
+        # shellcheck disable=SC2046,SC2043
         for subnet_id in ${{ env.AWS_VPC_SUBNET_IDS }}; do
             # spot, on-demand
             for market_type in ${{ vars.MARKET_TYPES || 'spot' }}; do
@@ -456,7 +461,7 @@ jobs:
 
         match=''
         for key in $(balena keys | grep -v ID | awk '{print $1}'); do
-            fp=$(balena key ${key} | tail -n 1 | ssh-keygen -E md5 -lf /dev/stdin | awk '{print $2}')
+            fp=$(balena key "${key}" | tail -n 1 | ssh-keygen -E md5 -lf /dev/stdin | awk '{print $2}')
             if [[ $fp =~ $(ssh-keygen -E md5 -lf "${HOME}/.ssh/id_rsa" | awk '{print $2}') ]]; then
                 match="${key}"
                 break
@@ -793,6 +798,14 @@ jobs:
                 && rm -f "\${tmphosts}" \
                 && getent hosts api.${{ matrix.subdomain }}.${{ matrix.dns_tld }} | grep 127.0.1.1
 
+              sshd -T
+              service ssh restart
+
+          # https://forums.docker.com/t/docker-compose-through-ssh-failing-and-referring-to-docker-example-com/115165/18
+          - path: /etc/ssh/sshd_config.d/00-cloud-init
+            content: |
+              MaxStartups 100:0:100
+
         # cloud-init runs as root
         # (e.g.) https://cloudinit.readthedocs.io/en/latest/reference/merging.html#example-cloud-config
         runcmd:
@@ -801,6 +814,7 @@ jobs:
 
         cloud-init schema -c user-data.yml
 
+        # shellcheck disable=SC2046,SC2043
         for subnet_id in ${{ env.AWS_VPC_SUBNET_IDS }}; do
             # spot, on-demand
             for market_type in ${{ vars.MARKET_TYPES || 'spot' }}; do
@@ -810,7 +824,7 @@ jobs:
                       $([[ -n '${{ matrix.ami }}' ]] && echo '--image-id ${{ matrix.ami }}') \
                       --launch-template 'LaunchTemplateId=${{ env.AWS_EC2_LAUNCH_TEMPLATE }},Version=${{ matrix.launch_template_version }}' \
                       --instance-type "${instance_type}" \
-                      $([[ $market_type =~ spot ]] && echo '--instance-market-options MarketType=spot') \
+                      $([[ "$market_type" =~ spot ]] && echo '--instance-market-options MarketType=spot') \
                       --security-group-ids '${{ env.AWS_VPC_SECURITY_GROUP_IDS }}' \
                       --subnet-id "${subnet_id}" \
                       --key-name '${{ steps.generate-key-pair.outputs.key_name }}' \
@@ -828,11 +842,15 @@ jobs:
         [[ -z $response ]] && exit 1
 
         instance_id="$(echo "${response}" | jq -r '.Instances[].InstanceId')"
-        echo "instance_id=${instance_id}" >> $GITHUB_OUTPUT
+        echo "instance_id=${instance_id}" >>"${GITHUB_OUTPUT}"
 
         aws ec2 wait instance-running --instance-ids "${instance_id}"
         with_backoff aws ec2 wait instance-status-ok --instance-ids "${instance_id}"
 
+        private_ip="$(aws ec2 describe-instances --instance-id "${instance_id}" \
+          | jq -r .Reservations[].Instances[].PrivateIpAddress)"
+        echo "private_ip=${private_ip}" >>"${GITHUB_OUTPUT}"
+
       env:
         ATTEMPTS: 2
         AWS_DEFAULT_REGION: ${{ vars.AWS_REGION || 'us-east-1' }}
@@ -870,10 +888,20 @@ jobs:
         trap 'log_output' EXIT
 
         # https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started-enable-ssh-connections.html
+        mkdir -p "${HOME}/.ssh/controlmasters"
         cat << EOF > "${HOME}/.ssh/config"
+        host *
+            StrictHostKeyChecking no
+            UserKnownHostsFile /dev/null
+
         host i-*
             StrictHostKeyChecking no
             UserKnownHostsFile /dev/null
+            TCPKeepAlive yes
+            ServerAliveInterval 5
+            ControlPath "${HOME}/.ssh/controlmasters/%r@%h:%p"
+            ControlMaster auto
+            ControlPersist 5m
             ProxyCommand sh -c "aws ssm start-session --target %h --document-name AWS-StartSSHSession --parameters 'portNumber=%p'"
         EOF
 
@@ -906,7 +934,7 @@ jobs:
         echo "${result}" | jq -re
         cid="$(echo "${result}" | jq -r .Command.CommandId)"
         iid="$(echo "${result}" | jq -r .Command.InstanceIds[0])"
-        ([[ -n "$cid" ]] && [[ -n "$iid" ]]) || false
+        { [[ -n "$cid" ]] && [[ -n "$iid" ]]; } || false
 
         # https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#grouping-log-lines
         CYAN='\033[0;36m'; NC='\033[0m'; echo -e "::group::${CYAN}open-balena-tests${NC}"
@@ -937,7 +965,7 @@ jobs:
 
         touch .env
         for service in sut dut; do
-        until [[ "$(docker compose ps --services "${service}" --status running)" =~ "${service}" ]]; do
+        until [[ "$(docker compose ps --services "${service}" --status running)" =~ ${service} ]]; do
             echo "::info::waiting for ${service}..."
             with_backoff docker compose ps
             sleep $(((RANDOM%5) + 5))s
@@ -949,7 +977,7 @@ jobs:
         done
 
         echo '::info::settling down...'
-        sleep $(((RANDOM%30) + 15))s
+        sleep $(((RANDOM%15) + 15))s
 
         while [[ "$(aws ssm list-command-invocations --command-id "${cid}" \
           | jq -re '.CommandInvocations[].Status')" =~ InProgress ]]; do
@@ -992,6 +1020,16 @@ jobs:
         with_backoff balena keys | grep ${{ steps.provision-ssh-key.outputs.key_id }} \
           | awk '{print $1}' | xargs --no-run-if-empty balena key rm --yes
 
+    - name: remove AWS/EC2 key-pair
+      if: always() && matrix.target == 'compose-private-pki'
+      continue-on-error: true
+      run: |
+        set -ue
+
+        [[ '${{ vars.VERBOSE }}' =~ on|On|Yes|yes|true|True ]] && set -x
+
+        aws ec2 delete-key-pair --key-name ${{ steps.generate-key-pair.outputs.key_name }}
+
     - name: delete balenaOS test device
       if: always() && matrix.target == 'balena-public-pki'
       continue-on-error: true
@@ -1059,20 +1097,20 @@ jobs:
         aws ec2 describe-instances --filters \
           Name=tag:Name,Values=open-balena-tests \
           Name=instance-state-name,Values=running \
-          | jq -re '.Reservations[].Instances[].InstanceId + " " + .Reservations[].Instances[].LaunchTime' > ${stale_instances} || true
+          | jq -re '.Reservations[].Instances[].InstanceId + " " + .Reservations[].Instances[].LaunchTime' > "${stale_instances}" || true
 
         if test -s "${stale_instances}"; then
             while IFS= read -r line; do
-                instance_id=$(echo ${line} | awk '{print $1}')
-                launch_time=$(echo ${line} | awk '{print $2}')
-                now=$(date +%s)
-                then=$(date --date ${launch_time} +%s)
-                days_since_launch=$(( (now - then) / 86400 ))
-                if [[ -n $days_since_launch ]] && [[ $days_since_launch -ge 1 ]]; then
-                    with_backoff aws ec2 terminate-instances --instance-ids ${instance_id}
+                instance_id="$(echo "${line}" | awk '{print $1}')"
+                launch_time="$(echo "${line}" | awk '{print $2}')"
+                now="$(date +%s)"
+                then="$(date --date "${launch_time}" +%s)"
+                days_since_launch="$(( (now - then) / 86400 ))"
+                if [[ -n "$days_since_launch" ]] && [[ $days_since_launch -ge 1 ]]; then
+                    with_backoff aws ec2 terminate-instances --instance-ids "${instance_id}"
                 fi
-            done <${stale_instances}
-            rm -f ${stale_instances}
+            done <"${stale_instances}"
+            rm -f "${stale_instances}"
         fi
 
       env:
@@ -1096,11 +1134,11 @@ jobs:
               "https://api.cloudflare.com/client/v4/zones?name=${{ matrix.dns_tld }}" \
               -H 'Authorization: Bearer ${{ secrets.CLOUDFLARE_API_TOKEN }}' | jq -r '.result[].id')"
 
-            for record in "$(curl --silent --retry ${{ env.RETRY }} \
+            for record in $(curl --silent --retry ${{ env.RETRY }} \
               "https://api.cloudflare.com/client/v4/zones/${zone_id}/dns_records" \
               -H 'Authorization: Bearer ${{ secrets.CLOUDFLARE_API_TOKEN }}' \
               | jq -r --arg match "${match}" '.result[] | select(((.type=="TXT") and (.name | contains($match))))' \
-              | base64)"; do
+              | base64); do
 
                 json="$(echo "${record}" | base64 -d | jq -r)"
                 id="$(echo "${json}" | jq -r .id)"

.versionbot/CHANGELOG.yml

@@ -1,3 +1,832 @@
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.3.3
+      hash: 4985538309bc12044f79e6e70f83f570921a9a2b
+      body: |
+        Update balena/open-balena-api from 26.3.1 to 26.3.3
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.75
+  title: ""
+  date: 2024-08-23T00:13:31.002Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v19
+      hash: 5b36a03d30f726390421ac035b5ddff6d4fba1ae
+      body: |
+        Update balena-io/balena-cli from 18.2.34 to 19.0.0
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.74
+  title: ""
+  date: 2024-08-22T23:13:07.355Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.41.3
+      hash: 301216fb629d70e5996395f6a820fe8a8e1b98f1
+      body: |
+        Update balena/open-balena-registry from 2.41.2 to 2.41.3
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.73
+  title: ""
+  date: 2024-08-22T20:16:22.509Z
+- commits:
+    - subject: Update balena/open-balena-s3 Docker tag to v2.28.53
+      hash: 704c84bdd62877a879a9d20c1a935cf1f4af4188
+      body: |
+        Update balena/open-balena-s3 from 2.28.52 to 2.28.53
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.72
+  title: ""
+  date: 2024-08-22T19:14:43.580Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.41.2
+      hash: be18ea6a53adc20f8f5cd047b440defc257686cb
+      body: |
+        Update balena/open-balena-registry from 2.41.1 to 2.41.2
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.71
+  title: ""
+  date: 2024-08-22T18:17:02.148Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.3.1
+      hash: 3fc51cb9c0305dc683e44732ff7ab242ae5f351a
+      body: |
+        Update balena/open-balena-api from 26.3.0 to 26.3.1
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.70
+  title: ""
+  date: 2024-08-21T01:36:54.899Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to ead1e6a
+      hash: bda5063cb1ad4b82aa09bf198d2f4d7b6067834d
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.69
+  title: ""
+  date: 2024-08-20T05:14:24.801Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.3.0
+      hash: 423418f11615760898dd7e9007e3c75f41b6a319
+      body: |
+        Update balena/open-balena-api from 26.2.2 to 26.3.0
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.68
+  title: ""
+  date: 2024-08-19T20:49:01.002Z
+- commits:
+    - subject: Update qemux/qemu-docker Docker tag to v5.18
+      hash: 7210ea0ad80c8fe7ee470a7f85bd7436f91f0411
+      body: |
+        Update qemux/qemu-docker from 5.16 to 5.18
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.67
+  title: ""
+  date: 2024-08-19T19:11:51.804Z
+- commits:
+    - subject: SSH reliability settings
+      hash: 539adade50241c6f9d20bcf08cb028c3026d8f37
+      body: >
+        * enable SSHD multiplexing, KeepAlive and relax throttling
+
+
+        Thank you for the hint:
+
+        https://forums.docker.com/t/docker-compose-through-ssh-failing-and-referring-to-docker-example-com/115165/18?u=ab77
+
+               MaxStartups
+                       Specifies the maximum number of concurrent
+                       unauthenticated connections to the SSH daemon.
+                       Additional connections will be dropped until
+                       authentication succeeds or the LoginGraceTime expires for
+                       a connection.  The default is 10:30:100.
+
+                       Alternatively, random early drop can be enabled by
+                       specifying the three colon separated values
+                       start:rate:full (e.g. "10:30:60").  sshd(8) will refuse
+                       connection attempts with a probability of rate/100 (30%)
+                       if there are currently start (10) unauthenticated
+                       connections.  The probability increases linearly and all
+                       connection attempts are refused if the number of
+                       unauthenticated connections reaches full (60).
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+    - subject: SSH reliability settings
+      hash: 758c52b7bab371d6f5d8abfe05927b7b18f90be0
+      body: >
+        SSH connections keep breaking between Hetzner EU DCs and AWS us-east-1
+        for no particular reason. Suspect Hetzner local network saturation
+        and/or a function of trans-atlantic routing/peering/time of day. Adding
+        connection multiplexing and keepalive to test this theory.
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+  version: 4.1.66
+  title: ""
+  date: 2024-08-19T18:22:02.557Z
+- commits:
+    - subject: "patch: Add Table of Contents"
+      hash: b414f262c0adae9014d1589be64276785efecbbd
+      body: ""
+      footer:
+        Signed-off-by: Vipul Gupta (@vipulgupta2048) <vipulgupta2048@gmail.com>
+        signed-off-by: Vipul Gupta (@vipulgupta2048) <vipulgupta2048@gmail.com>
+      author: Vipul Gupta (@vipulgupta2048)
+      nested: []
+  version: 4.1.65
+  title: ""
+  date: 2024-08-15T21:13:54.244Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to 55f725f
+      hash: 2f141a4e4e5f7e782bbecc12dab9ecd30f9fda0a
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.64
+  title: ""
+  date: 2024-08-13T16:51:55.472Z
+- commits:
+    - subject: Cleanup AWS/EC2 key pairs
+      hash: b4efd6345448975b1871645b83546ab6bf2284d8
+      body: ""
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+  version: 4.1.63
+  title: ""
+  date: 2024-08-12T17:47:56.854Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.41.1
+      hash: b8717d5fbec46cf41cc748c98d83f850a9f1ad3d
+      body: |
+        Update balena/open-balena-registry from 2.39.65 to 2.41.1
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.62
+  title: ""
+  date: 2024-08-12T17:25:37.250Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.2.2
+      hash: bafc9c02ab31711beb8f2220abb9b1ea421ebb34
+      body: |
+        Update balena/open-balena-api from 26.1.6 to 26.2.2
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.61
+  title: ""
+  date: 2024-08-12T16:14:26.855Z
+- commits:
+    - subject: Update redis Docker tag to v7.4
+      hash: 24925320f84095ba6ade3f857718abb6a8b48205
+      body: |
+        Update redis from 7.2 to 7.4
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.60
+  title: ""
+  date: 2024-08-10T06:16:57.031Z
+- commits:
+    - subject: Update balena/open-balena-s3 Docker tag to v2.28.52
+      hash: 6b4682ece6e4c8b0c7519d5529421289512308e7
+      body: |
+        Update balena/open-balena-s3 from 2.28.50 to 2.28.52
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.59
+  title: ""
+  date: 2024-08-10T05:13:58.126Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.34
+      hash: b3d0f53bdbe02df906cc7e1bdb4c207757f35d41
+      body: |
+        Update balena-io/balena-cli from 18.2.33 to 18.2.34
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.58
+  title: ""
+  date: 2024-08-10T04:17:16.064Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.1.6
+      hash: d3694bbd6e14403dc6581b47c4879e1b1c29a1c7
+      body: |
+        Update balena/open-balena-api from 26.1.5 to 26.1.6
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.57
+  title: ""
+  date: 2024-08-10T03:18:52.046Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to 39228ca
+      hash: bb47956aa66a79fd31dc96810dee2ce2431a824c
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.56
+  title: ""
+  date: 2024-08-10T02:34:34.556Z
+- commits:
+    - subject: Update balena/open-balena-vpn Docker tag to v11.30.31
+      hash: 2ba2d6aadd2c7e36c1fb849d4476423c004bf7f7
+      body: |
+        Update balena/open-balena-vpn from 11.30.27 to 11.30.31
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.55
+  title: ""
+  date: 2024-08-06T14:52:02.295Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.1.5
+      hash: 6742366dbb25f966b9aa86d0fe1430cf522df443
+      body: |
+        Update balena/open-balena-api from 26.1.3 to 26.1.5
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.54
+  title: ""
+  date: 2024-08-05T22:16:49.357Z
+- commits:
+    - subject: Update actions/checkout digest to 9a9194f
+      hash: b122b301fdb8cf132bddd54ae8b063b8c8436d2e
+      body: |
+        Update actions/checkout
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.53
+  title: ""
+  date: 2024-08-05T21:02:28.674Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.39.65
+      hash: a068dafe1cd6c694885435dc2af90309f3ec0bac
+      body: |
+        Update balena/open-balena-registry from 2.39.63 to 2.39.65
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.52
+  title: ""
+  date: 2024-08-01T19:27:14.377Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.1.3
+      hash: eceb7deb864ef77b21902f9be1571a37110c292b
+      body: |
+        Update balena/open-balena-api from 26.1.2 to 26.1.3
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.51
+  title: ""
+  date: 2024-07-23T20:23:52.809Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to 12e3392
+      hash: 7dcbd0ea01f5bd554494fd8d36aaedc21f84b4dc
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.50
+  title: ""
+  date: 2024-07-23T04:14:31.183Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26
+      hash: aec392953ff40c20e47fae000769d4d8ff8fb167
+      body: |
+        Update balena/open-balena-api from 25.2.8 to 26.1.2
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.49
+  title: ""
+  date: 2024-07-22T15:21:11.990Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.39.63
+      hash: 9e7dca1e77afc8ad19db3c6675bc031199f8c032
+      body: |
+        Update balena/open-balena-registry from 2.39.62 to 2.39.63
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.48
+  title: ""
+  date: 2024-07-19T18:33:11.552Z
+- commits:
+    - subject: Update balena/open-balena-s3 Docker tag to v2.28.50
+      hash: d796f9c7a91285e38237a55443c677dad498475d
+      body: |
+        Update balena/open-balena-s3 from 2.28.49 to 2.28.50
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.47
+  title: ""
+  date: 2024-07-19T17:33:39.487Z
+- commits:
+    - subject: Update balena/open-balena-vpn Docker tag to v11.30.27
+      hash: e2dd1d1e7c0a21c05352bc1335ae2e0fb28cc61a
+      body: |
+        Update balena/open-balena-vpn from 11.30.26 to 11.30.27
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.46
+  title: ""
+  date: 2024-07-17T11:32:13.393Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to 6116f2b
+      hash: 777aecb83ca294be1ff0eb03fb1072d8cb4b4632
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.45
+  title: ""
+  date: 2024-07-17T10:18:53.984Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.33
+      hash: 8e416c235bb659e55e10877efd4cf9c3fc076525
+      body: |
+        Update balena-io/balena-cli from 18.2.32 to 18.2.33
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.44
+  title: ""
+  date: 2024-07-17T09:22:09.080Z
+- commits:
+    - subject: Remove custom_runs_on instruction from flowzone.yml
+      hash: 33cce523a0a6091d0dce18c25c21d032e555e193
+      body: |
+        This project has no custom actions to run, and was using
+        the legacy input format for custom jobs that is being deprecated.
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Kyle Harding
+      nested: []
+  version: 4.1.43
+  title: ""
+  date: 2024-07-16T18:34:53.997Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.32
+      hash: c20c3c9b4799daddfb8b0d40c47b631ef5764ccd
+      body: |
+        Update balena-io/balena-cli from 18.2.31 to 18.2.32
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.42
+  title: ""
+  date: 2024-07-16T16:19:12.990Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v25.2.8
+      hash: e308b28fe82974ec25ea35971d3f630cad21104e
+      body: |
+        Update balena/open-balena-api from 25.2.7 to 25.2.8
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.41
+  title: ""
+  date: 2024-07-16T15:43:44.456Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.31
+      hash: f353fbbbc23484d1eb325efe203e734d5f6cef69
+      body: |
+        Update balena-io/balena-cli from 18.2.30 to 18.2.31
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.40
+  title: ""
+  date: 2024-07-15T22:17:15.441Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.30
+      hash: 11f7a27d3e0a5492da0b5949b06016f7e9853a67
+      body: |
+        Update balena-io/balena-cli from 18.2.29 to 18.2.30
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.39
+  title: ""
+  date: 2024-07-15T20:02:03.290Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v25.2.7
+      hash: 62c653d7feec0984095a6287acf63e6ae0d6972f
+      body: |
+        Update balena/open-balena-api from 25.2.5 to 25.2.7
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.38
+  title: ""
+  date: 2024-07-15T16:53:48.116Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.29
+      hash: 373af1b08bc88810e64b28e5835949985f02c687
+      body: |
+        Update balena-io/balena-cli from 18.2.28 to 18.2.29
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.37
+  title: ""
+  date: 2024-07-12T16:22:10.988Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.28
+      hash: e3f9ce631f9a59f7e58f45458ba8d42eae39cbc5
+      body: |
+        Update balena-io/balena-cli from 18.2.25 to 18.2.28
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.36
+  title: ""
+  date: 2024-07-12T14:19:27.958Z
+- commits:
+    - subject: Update balena/open-balena-vpn Docker tag to v11.30.26
+      hash: d00a7c95df84dfac2589067cee8bdcc8dd0cab8c
+      body: |
+        Update balena/open-balena-vpn from 11.30.23 to 11.30.26
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.35
+  title: ""
+  date: 2024-07-12T00:22:23.539Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.39.62
+      hash: f32815c05de34bd089cf43c30384fcf5602a97a9
+      body: |
+        Update balena/open-balena-registry from 2.39.61 to 2.39.62
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.34
+  title: ""
+  date: 2024-07-11T22:32:18.638Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to 96589f5
+      hash: 0d88815b2099bf7cb894d07c23ae0a31c72c3803
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.33
+  title: ""
+  date: 2024-07-11T20:56:36.530Z
+- commits:
+    - subject: Update balena/open-balena-s3 Docker tag to v2.28.49
+      hash: b8e98e52463c4ab455b1b2fcb7b3e7a9047c6553
+      body: |
+        Update balena/open-balena-s3 from 2.28.48 to 2.28.49
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.32
+  title: ""
+  date: 2024-07-11T17:17:34.659Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v25.2.5
+      hash: 1c28d800cfb9005b29b6ee70373309b243ac4a5d
+      body: |
+        Update balena/open-balena-api from 25.2.0 to 25.2.5
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.31
+  title: ""
+  date: 2024-07-11T16:22:22.102Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.25
+      hash: be6af919b1ed89ec4cb57a9b506d32383948e500
+      body: |
+        Update balena-io/balena-cli from 18.2.22 to 18.2.25
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.30
+  title: ""
+  date: 2024-07-11T15:50:44.267Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.22
+      hash: 7879d34af93f294cef526628c4cc0ed3ce887107
+      body: |
+        Update balena-io/balena-cli from 18.2.20 to 18.2.22
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.29
+  title: ""
+  date: 2024-07-10T18:20:25.967Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.39.61
+      hash: 688f0a5e0235d9255cd9d041795ca9fe936ec2dc
+      body: |
+        Update balena/open-balena-registry from 2.39.60 to 2.39.61
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.28
+  title: ""
+  date: 2024-07-09T21:13:43.409Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v25.2.0
+      hash: 06bd4b6561a90a5d09891d872223d388f593108e
+      body: |
+        Update balena/open-balena-api from 25.1.29 to 25.2.0
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.27
+  title: ""
+  date: 2024-07-09T20:23:31.619Z
+- commits:
+    - subject: Relax regex to match all Let's Encrypt CNs
+      hash: 44b6e5a4c12f754aa2ed1b9a5ec9d3d7a01b5778
+      body: ""
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+  version: 4.1.26
+  title: ""
+  date: 2024-07-09T19:15:06.632Z
+- commits:
+    - subject: Update balena/open-balena-s3 Docker tag to v2.28.48
+      hash: 7924ee920abca8caa0a499cd9a3af7efc6f06342
+      body: |
+        Update balena/open-balena-s3 from 2.28.47 to 2.28.48
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.25
+  title: ""
+  date: 2024-07-09T16:57:27.685Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v25.1.29
+      hash: b3c8709b247dede72f9809d3109a80b82b207c84
+      body: |
+        Update balena/open-balena-api from 25.1.27 to 25.1.29
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.24
+  title: ""
+  date: 2024-07-09T16:17:45.722Z
+- commits:
+    - subject: Update balena/open-balena-vpn Docker tag to v11.30.23
+      hash: 24ff05881929ed860a004f83fa3d65299db59361
+      body: |
+        Update balena/open-balena-vpn from 11.30.22 to 11.30.23
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.23
+  title: ""
+  date: 2024-07-08T20:04:49.447Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v25.1.27
+      hash: 2a0edead1d2c5d41e98ed344efbb145dca8ec659
+      body: |
+        Update balena/open-balena-api from 25.1.24 to 25.1.27
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.22
+  title: ""
+  date: 2024-07-08T16:37:30.112Z
+- commits:
+    - subject: Make tests more reliable
+      hash: b0f79a0d84742b0a96aaec934a2ad6ec72bb3d6e
+      body: |
+        * ensure config and creds are ready before attempting auth
+        * warn instead of error on DUT shutdown failures
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+  version: 4.1.21
+  title: ""
+  date: 2024-07-08T14:49:09.165Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.20
+      hash: d4683c028ae10fcfaf67c4f68dc322aa6602a896
+      body: |
+        Update balena-io/balena-cli from 18.2.19 to 18.2.20
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.20
+  title: ""
+  date: 2024-07-05T22:14:20.547Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.19
+      hash: dc7fd065f9265d6baf29e612a06d1e5109a47fa8
+      body: |
+        Update balena-io/balena-cli from 18.2.10 to 18.2.19
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.19
+  title: ""
+  date: 2024-07-05T14:38:10.804Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v25.1.24
+      hash: cfb35f9d3946fd54e0057df5725114e56fd74296
+      body: |
+        Update balena/open-balena-api from 25.1.19 to 25.1.24
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.18
+  title: ""
+  date: 2024-07-05T00:33:15.468Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.39.60
+      hash: b023d3a47002823e18926b231aeadc104f4c0094
+      body: |
+        Update balena/open-balena-registry from 2.39.58 to 2.39.60
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.17
+  title: ""
+  date: 2024-07-04T23:28:20.756Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to febab93
+      hash: 7fd045814c95f4566d38e53f7738dd67440f0115
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.16
+  title: ""
+  date: 2024-07-04T22:17:01.050Z
+- commits:
+    - subject: pin balena-cli version
+      hash: 7ddb50c19fb470aa3cc975ce7a0afc2f6d47ba2f
+      body: ""
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+  version: 4.1.15
+  title: ""
+  date: 2024-07-04T21:54:28.567Z
+- commits:
+    - subject: shellcheck/lint workflow(s)
+      hash: 0328960ecca2bd99cd5456392095e70227ccbcd0
+      body: ""
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+  version: 4.1.14
+  title: ""
+  date: 2024-07-04T21:33:41.784Z
 - commits:
     - subject: Update balena/open-balena-api Docker tag to v25.1.19
       hash: 3e29f306972c9565574894d8a0d0a9d783d2df4b

CHANGELOG.md

@@ -4,6 +4,317 @@ All notable changes to this project will be documented in this file
 automatically by Versionist. DO NOT EDIT THIS FILE MANUALLY!
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+# v4.1.75
+## (2024-08-23)
+
+* Update balena/open-balena-api Docker tag to v26.3.3 [Self-hosted Renovate Bot]
+
+# v4.1.74
+## (2024-08-22)
+
+* Update dependency balena-io/balena-cli to v19 [Self-hosted Renovate Bot]
+
+# v4.1.73
+## (2024-08-22)
+
+* Update balena/open-balena-registry Docker tag to v2.41.3 [Self-hosted Renovate Bot]
+
+# v4.1.72
+## (2024-08-22)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.53 [Self-hosted Renovate Bot]
+
+# v4.1.71
+## (2024-08-22)
+
+* Update balena/open-balena-registry Docker tag to v2.41.2 [Self-hosted Renovate Bot]
+
+# v4.1.70
+## (2024-08-21)
+
+* Update balena/open-balena-api Docker tag to v26.3.1 [Self-hosted Renovate Bot]
+
+# v4.1.69
+## (2024-08-20)
+
+* Update aws-actions/configure-aws-credentials digest to ead1e6a [Self-hosted Renovate Bot]
+
+# v4.1.68
+## (2024-08-19)
+
+* Update balena/open-balena-api Docker tag to v26.3.0 [Self-hosted Renovate Bot]
+
+# v4.1.67
+## (2024-08-19)
+
+* Update qemux/qemu-docker Docker tag to v5.18 [Self-hosted Renovate Bot]
+
+# v4.1.66
+## (2024-08-19)
+
+* SSH reliability settings [Anton Belodedenko]
+* SSH reliability settings [Anton Belodedenko]
+
+# v4.1.65
+## (2024-08-15)
+
+* patch: Add Table of Contents [Vipul Gupta (@vipulgupta2048)]
+
+# v4.1.64
+## (2024-08-13)
+
+* Update aws-actions/configure-aws-credentials digest to 55f725f [Self-hosted Renovate Bot]
+
+# v4.1.63
+## (2024-08-12)
+
+* Cleanup AWS/EC2 key pairs [Anton Belodedenko]
+
+# v4.1.62
+## (2024-08-12)
+
+* Update balena/open-balena-registry Docker tag to v2.41.1 [Self-hosted Renovate Bot]
+
+# v4.1.61
+## (2024-08-12)
+
+* Update balena/open-balena-api Docker tag to v26.2.2 [Self-hosted Renovate Bot]
+
+# v4.1.60
+## (2024-08-10)
+
+* Update redis Docker tag to v7.4 [Self-hosted Renovate Bot]
+
+# v4.1.59
+## (2024-08-10)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.52 [Self-hosted Renovate Bot]
+
+# v4.1.58
+## (2024-08-10)
+
+* Update dependency balena-io/balena-cli to v18.2.34 [Self-hosted Renovate Bot]
+
+# v4.1.57
+## (2024-08-10)
+
+* Update balena/open-balena-api Docker tag to v26.1.6 [Self-hosted Renovate Bot]
+
+# v4.1.56
+## (2024-08-10)
+
+* Update aws-actions/configure-aws-credentials digest to 39228ca [Self-hosted Renovate Bot]
+
+# v4.1.55
+## (2024-08-06)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.31 [Self-hosted Renovate Bot]
+
+# v4.1.54
+## (2024-08-05)
+
+* Update balena/open-balena-api Docker tag to v26.1.5 [Self-hosted Renovate Bot]
+
+# v4.1.53
+## (2024-08-05)
+
+* Update actions/checkout digest to 9a9194f [Self-hosted Renovate Bot]
+
+# v4.1.52
+## (2024-08-01)
+
+* Update balena/open-balena-registry Docker tag to v2.39.65 [Self-hosted Renovate Bot]
+
+# v4.1.51
+## (2024-07-23)
+
+* Update balena/open-balena-api Docker tag to v26.1.3 [Self-hosted Renovate Bot]
+
+# v4.1.50
+## (2024-07-23)
+
+* Update aws-actions/configure-aws-credentials digest to 12e3392 [Self-hosted Renovate Bot]
+
+# v4.1.49
+## (2024-07-22)
+
+* Update balena/open-balena-api Docker tag to v26 [Self-hosted Renovate Bot]
+
+# v4.1.48
+## (2024-07-19)
+
+* Update balena/open-balena-registry Docker tag to v2.39.63 [Self-hosted Renovate Bot]
+
+# v4.1.47
+## (2024-07-19)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.50 [Self-hosted Renovate Bot]
+
+# v4.1.46
+## (2024-07-17)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.27 [Self-hosted Renovate Bot]
+
+# v4.1.45
+## (2024-07-17)
+
+* Update aws-actions/configure-aws-credentials digest to 6116f2b [Self-hosted Renovate Bot]
+
+# v4.1.44
+## (2024-07-17)
+
+* Update dependency balena-io/balena-cli to v18.2.33 [Self-hosted Renovate Bot]
+
+# v4.1.43
+## (2024-07-16)
+
+* Remove custom_runs_on instruction from flowzone.yml [Kyle Harding]
+
+# v4.1.42
+## (2024-07-16)
+
+* Update dependency balena-io/balena-cli to v18.2.32 [Self-hosted Renovate Bot]
+
+# v4.1.41
+## (2024-07-16)
+
+* Update balena/open-balena-api Docker tag to v25.2.8 [Self-hosted Renovate Bot]
+
+# v4.1.40
+## (2024-07-15)
+
+* Update dependency balena-io/balena-cli to v18.2.31 [Self-hosted Renovate Bot]
+
+# v4.1.39
+## (2024-07-15)
+
+* Update dependency balena-io/balena-cli to v18.2.30 [Self-hosted Renovate Bot]
+
+# v4.1.38
+## (2024-07-15)
+
+* Update balena/open-balena-api Docker tag to v25.2.7 [Self-hosted Renovate Bot]
+
+# v4.1.37
+## (2024-07-12)
+
+* Update dependency balena-io/balena-cli to v18.2.29 [Self-hosted Renovate Bot]
+
+# v4.1.36
+## (2024-07-12)
+
+* Update dependency balena-io/balena-cli to v18.2.28 [Self-hosted Renovate Bot]
+
+# v4.1.35
+## (2024-07-12)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.26 [Self-hosted Renovate Bot]
+
+# v4.1.34
+## (2024-07-11)
+
+* Update balena/open-balena-registry Docker tag to v2.39.62 [Self-hosted Renovate Bot]
+
+# v4.1.33
+## (2024-07-11)
+
+* Update aws-actions/configure-aws-credentials digest to 96589f5 [Self-hosted Renovate Bot]
+
+# v4.1.32
+## (2024-07-11)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.49 [Self-hosted Renovate Bot]
+
+# v4.1.31
+## (2024-07-11)
+
+* Update balena/open-balena-api Docker tag to v25.2.5 [Self-hosted Renovate Bot]
+
+# v4.1.30
+## (2024-07-11)
+
+* Update dependency balena-io/balena-cli to v18.2.25 [Self-hosted Renovate Bot]
+
+# v4.1.29
+## (2024-07-10)
+
+* Update dependency balena-io/balena-cli to v18.2.22 [Self-hosted Renovate Bot]
+
+# v4.1.28
+## (2024-07-09)
+
+* Update balena/open-balena-registry Docker tag to v2.39.61 [Self-hosted Renovate Bot]
+
+# v4.1.27
+## (2024-07-09)
+
+* Update balena/open-balena-api Docker tag to v25.2.0 [Self-hosted Renovate Bot]
+
+# v4.1.26
+## (2024-07-09)
+
+* Relax regex to match all Let's Encrypt CNs [Anton Belodedenko]
+
+# v4.1.25
+## (2024-07-09)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.48 [Self-hosted Renovate Bot]
+
+# v4.1.24
+## (2024-07-09)
+
+* Update balena/open-balena-api Docker tag to v25.1.29 [Self-hosted Renovate Bot]
+
+# v4.1.23
+## (2024-07-08)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.23 [Self-hosted Renovate Bot]
+
+# v4.1.22
+## (2024-07-08)
+
+* Update balena/open-balena-api Docker tag to v25.1.27 [Self-hosted Renovate Bot]
+
+# v4.1.21
+## (2024-07-08)
+
+* Make tests more reliable [Anton Belodedenko]
+
+# v4.1.20
+## (2024-07-05)
+
+* Update dependency balena-io/balena-cli to v18.2.20 [Self-hosted Renovate Bot]
+
+# v4.1.19
+## (2024-07-05)
+
+* Update dependency balena-io/balena-cli to v18.2.19 [Self-hosted Renovate Bot]
+
+# v4.1.18
+## (2024-07-05)
+
+* Update balena/open-balena-api Docker tag to v25.1.24 [Self-hosted Renovate Bot]
+
+# v4.1.17
+## (2024-07-04)
+
+* Update balena/open-balena-registry Docker tag to v2.39.60 [Self-hosted Renovate Bot]
+
+# v4.1.16
+## (2024-07-04)
+
+* Update aws-actions/configure-aws-credentials digest to febab93 [Self-hosted Renovate Bot]
+
+# v4.1.15
+## (2024-07-04)
+
+* pin balena-cli version [Anton Belodedenko]
+
+# v4.1.14
+## (2024-07-04)
+
+* shellcheck/lint workflow(s) [Anton Belodedenko]
+
 # v4.1.13
 ## (2024-07-02)
 

Makefile

@@ -145,7 +145,7 @@ auto-pki: config # Start all services using LetsEncrypt and ACME
 	@docker compose up -d
 	@$(MAKE) waitlog SERVICE=cert-manager LOG_STRING="/certs/export/chain.pem Certificate will not expire in [0-9] days"
 	@$(MAKE) waitlog SERVICE=cert-manager LOG_STRING="subject=CN = ${DNS_TLD}"
-	@$(MAKE) waitlog SERVICE=cert-manager LOG_STRING="issuer=C = US, O = Let's Encrypt, CN = R3"
+	@$(MAKE) waitlog SERVICE=cert-manager LOG_STRING="issuer=C = US, O = Let's Encrypt, CN = .*"
 	@$(MAKE) wait SERVICE=haproxy
 	@$(MAKE) showenv
 	@$(MAKE) showpass

README.md

@@ -16,6 +16,23 @@ images to your devices.
 
 To learn more about openBalena, visit [balena.io/open][open-balena-website].
 
+- [Features](#features)
+- [Getting Started](#getting-started)
+- [Compatibility](#compatibility)
+- [Documentation](#documentation)
+- [Getting Help](#getting-help)
+- [Contributing](#contributing)
+- [Roadmap](#roadmap)
+- [Differences between openBalena and balenaCloud](#differences-between-openbalena-and-balenacloud)
+- [License](#license)
+- [FAQ](#faq)
+  - [How do you ensure continuity of openBalena? Are there security patches on openBalena?](#how-do-you-ensure-continuity-of-openbalena-are-there-security-patches-on-openbalena)
+  - [How do you ensure the "Join" command actually works between openBalena and](#how-do-you-ensure-the-join-command-actually-works-between-openbalena-and)
+  - [Is it "production ready"?](#is-it-production-ready)
+  - [Can a new device type be added to openBalena?](#can-a-new-device-type-be-added-to-openbalena)
+  - [Are there open-source UI dashboards from the community for openBalena?](#are-there-open-source-ui-dashboards-from-the-community-for-openbalena)
+
+
 
 ## Features
 
@@ -159,7 +176,7 @@ While we actually have some rather large fleets using openBalena, we consider it
 perpetually in "beta". This means potentially introducing breaking changes between
 releases.
 
-### Can new device type be added to openBalena?
+### Can a new device type be added to openBalena?
 openBalena imports the following public [device-types] "out of the box". You can specify
 your own contracts repository by overriding `CONTRACTS_PUBLIC_REPO_NAME`,
 `CONTRACTS_PUBLIC_REPO_OWNER` and `IMAGE_STORAGE_BUCKET` environment variables on the API

VERSION

@@ -1 +1 @@
-4.1.13
+4.1.75

balena.yml

@@ -23,4 +23,4 @@ data:
     - generic-amd64
     - genericx86-64-ext
     - intel-nuc
-version: 4.1.13
+version: 4.1.75

docker-compose.yml

@@ -79,7 +79,7 @@ services:
       *with-default-privileges,
       *with-default-volumes,
     ]
-    image: balena/open-balena-api:v25.1.19
+    image: balena/open-balena-api:v26.3.3
     depends_on:
       - db
       - redis
@@ -119,7 +119,7 @@ services:
       *with-default-healthcheck,
       *with-default-privileges,
     ]
-    image: balena/open-balena-registry:v2.39.58
+    image: balena/open-balena-registry:v2.41.3
     volumes:
       - certs-data:/certs
       - resin-data:/balena
@@ -146,7 +146,7 @@ services:
       *with-network-privileges,
       *with-default-privileges,
     ]
-    image: balena/open-balena-vpn:v11.30.22
+    image: balena/open-balena-vpn:v11.30.31
     depends_on:
       - api
     environment:
@@ -175,7 +175,7 @@ services:
       *with-default-healthcheck,
       *with-default-privileges,
     ]
-    image: balena/open-balena-s3:v2.28.47
+    image: balena/open-balena-s3:v2.28.53
     volumes:
       - s3-data:/export
       - certs-data:/certs
@@ -189,7 +189,7 @@ services:
   redis:
     <<: *base-service
     # https://redis.io/blog/what-redis-license-change-means-for-our-managed-service-providers/
-    image: redis:7.2-alpine
+    image: redis:7.4-alpine
     volumes:
       - redis-data:/data
     healthcheck:

src/balena-tests/Dockerfile

@@ -1,7 +1,7 @@
 FROM ubuntu:24.04
 
 # renovate: datasource=github-releases depName=balena-io/balena-cli
-ARG BALENA_CLI_VERSION=v18.2.10
+ARG BALENA_CLI_VERSION=v19.0.0
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	bash \

src/balena-tests/balena.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 
 # shellcheck disable=SC2154,SC2034,SC1090
-set -ae
+set -aeu
 
 curl_opts="--retry 3 --fail"
 if [[ $VERBOSE =~ on|On|Yes|yes|true|True ]]; then
@@ -17,7 +17,7 @@ function remove_test_assets() {
     rm -rf /balena/config.json \
       "${GUEST_IMAGE}" \
       "${GUEST_IMAGE%.*}.ready" \
-      "${tmpbuild}" \
+      "${tmpbuild:-}" \
       /tmp/*.img
 }
 
@@ -39,14 +39,16 @@ function shutdown_dut() {
     local balena_device_uuid
     balena_device_uuid="$(cat </balena/config.json | jq -r .uuid)"
 
-    if [[ -n $balena_device_uuid ]]; then
+    if [[ -n "${balena_device_uuid:-}" ]]; then
         with_backoff balena device "${balena_device_uuid}"
-        with_backoff balena device shutdown -f "${balena_device_uuid}"
+        if ! with_backoff balena device shutdown -f "${balena_device_uuid}"; then
+            echo 'DUT failed to shutdown properly'
+        fi
     fi
 }
 
 function set_update_lock {
-    if [[ -n "$BALENA_SUPERVISOR_ADDRESS" ]] && [[ -n "$BALENA_SUPERVISOR_API_KEY" ]]; then
+    if [[ -n "${BALENA_SUPERVISOR_ADDRESS:-}" ]] && [[ -n "${BALENA_SUPERVISOR_API_KEY:-}" ]]; then
         while [[ $(curl ${curl_opts} "${BALENA_SUPERVISOR_ADDRESS}/v1/device?apikey=${BALENA_SUPERVISOR_API_KEY}" \
           -H "Content-Type: application/json" | jq -r '.update_pending') == 'true' ]]; do
 
@@ -88,6 +90,7 @@ function update_ca_certificates() {
 
 function wait_for_api() {
     while ! curl ${curl_opts} "https://api.${DNS_TLD}/ping"; do
+        echo 'waiting for API...'
         sleep "$(( (RANDOM % 5) + 5 ))s"
     done
 }
@@ -96,6 +99,7 @@ function open_balena_login() {
     while ! balena login --credentials \
       --email "${SUPERUSER_EMAIL}" \
       --password "${SUPERUSER_PASSWORD}"; do
+        echo 'waiting for auth...'
         sleep "$(( (RANDOM % 5) + 5 ))s"
     done
 }
@@ -104,6 +108,7 @@ function create_fleet() {
     if ! balena fleet "${TEST_FLEET}"; then
         # wait for API to load DT contracts
         while ! balena fleet create "${TEST_FLEET}" --type "${DEVICE_TYPE}"; do
+            echo 'waiting for device types...'
             sleep "$(( (RANDOM % 5) + 5 ))s"
         done
 
@@ -175,7 +180,7 @@ function wait_for_device() {
 }
 
 function registry_auth() {
-    if [[ -n $REGISTRY_USER ]] && [[ -n $REGISTRY_PASS ]]; then
+    if [[ -n "${REGISTRY_USER:-}" ]] && [[ -n "${REGISTRY_PASS:-}" ]]; then
         with_backoff docker login -u "${REGISTRY_USER}" -p "${REGISTRY_PASS}"
 
         printf '{"https://index.docker.io/v1/": {"username":"%s", "password":"$s"}}' \
@@ -224,7 +229,7 @@ function supervisor_update_target_state() {
     local balena_device_uuid
     balena_device_uuid="$(cat </balena/config.json | jq -r .uuid)"
 
-    if [[ -n $balena_device_uuid ]]; then
+    if [[ -n "${balena_device_uuid:-}" ]]; then
         while ! curl ${curl_opts} "https://api.${DNS_TLD}/supervisor/v1/update" \
           --header "Content-Type: application/json" \
           --header "Authorization: Bearer $(cat <~/.balena/token)" \
@@ -241,9 +246,9 @@ function check_running_release() {
 
     local should_be_running_release
     should_be_running_release="$(get_release_commit)"
-    [[ -z $should_be_running_release ]] && false
+    [[ -z "$should_be_running_release" ]] && false
 
-    if [[ -n $balena_device_uuid ]]; then
+    if [[ -n "${balena_device_uuid:-}" ]]; then
         while ! [[ $(balena device "${balena_device_uuid}" | grep -E ^COMMIT | awk '{print $2}') =~ ${should_be_running_release} ]]; do
             running_release_id="$(balena device "${balena_device_uuid}" | grep -E ^COMMIT | awk '{print $2}')"
             printf 'please wait, device %s should be running %s, but is still running %s...\n' \
@@ -266,7 +271,7 @@ function get_os_version() {
 }
 
 function upload_release_asset() {
-    if [[ "$RELEASE_ASSETS_TEST" =~ true ]]; then
+    if [[ "${RELEASE_ASSETS_T:-}" =~ true ]]; then
         local release_id
         release_id=${1:-1}
         release_asset="$(find / -type f -name '*.png' | head -n 1)"
@@ -282,11 +287,11 @@ function upload_release_asset() {
 }
 
 # --- main
-if [[ "$PRODUCTION_MODE" =~ true ]]; then
+if [[ "${PRODUCTION_MODE:-}" =~ true ]]; then
     exit
 fi
 
-if [[ -n "${BALENA_DEVICE_UUID}" ]]; then
+if [[ -n "${BALENA_DEVICE_UUID:-}" ]]; then
     # prepend the device UUID if running on balenaOS
     TLD="${BALENA_DEVICE_UUID}.${DNS_TLD}"
 else
@@ -303,7 +308,19 @@ GUEST_IMAGE=${GUEST_IMAGE:-/balena/balena.img}
 OS_VERSION="$(get_os_version)"
 TEST_FLEET=${TEST_FLEET:-test-fleet}
 
-[[ -f "$CONF" ]] && source "${CONF}"
+# wait here until global config is ready
+until [[ -s "$CONF" ]]; do
+    echo 'waiting for config...'
+    sleep "$(( (RANDOM % 5) + 5 ))s"
+done
+source "${CONF}"
+
+# wait her until we have valid login credentials
+until [[ -n "${SUPERUSER_EMAIL:-}" ]] && [[ -n "${SUPERUSER_PASSWORD:-}" ]]; do
+    echo 'waiting for credentials...'
+    sleep "$(( (RANDOM % 5) + 5 ))s"
+    source "${CONF}"
+done
 
 update_ca_certificates  # ensure self-signed root CA certificate(s) trust
 

src/test-device/Dockerfile

@@ -1,6 +1,6 @@
 # https://hub.docker.com/r/qemux/qemu-docker
 # https://github.com/qemus/qemu-docker
-FROM qemux/qemu-docker:5.16
+FROM qemux/qemu-docker:5.18
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	minicom \