v4.1.332

Update balena/open-balena-vpn Docker tag to v11.30.82

.github/renovate.json

@@ -0,0 +1,27 @@
+{
+  "extends": ["github>balena-io/renovate-config"],
+  "ignorePaths": [
+    "**/node_modules/**",
+    "**/bower_components/**",
+    "**/vendor/**",
+    "**/examples/**",
+    "**/__tests__/**",
+    "**/test/**",
+    "**/tests/suites/**",
+    "**/__fixtures__/**",
+    "**/Dockerfile.template"
+  ],
+  "customManagers": [
+    {
+      "customType": "regex",
+      "fileMatch": [
+        ".*"
+      ],
+      "matchStrings": [
+        ".*amiFilter=(?<packageName>.*?)\n(.*currentImageName=(?<currentDigest>.*?)\n)?(.*\n)?.*?(?<depName>[a-zA-Z0-9-_:]*)[ ]*?[:|=][ ]*?[\"|']?(?<currentValue>ami-[a-z0-9]{17})[\"|']?.*"
+      ],
+      "datasourceTemplate": "aws-machine-image",
+      "versioningTemplate": "aws-machine-image"
+    }
+  ]
+}

.github/workflows/flowzone.yml

@@ -8,6 +8,11 @@ on:
     types: [opened, synchronize, closed]
     branches: [main, master]
 
+permissions:
+  contents: read
+  id-token: "write"  # AWS GitHub OIDC required: write
+  packages: read
+
 jobs:
   flowzone:
     name: Flowzone

.github/workflows/tests.yml

@@ -51,8 +51,8 @@ jobs:
             launch_template_version: ${{ vars.AWS_EC2_LT_VERSION || '6' }}
             # https://docs.renovatebot.com/modules/datasource/aws-machine-image/
             # amiFilter=[{"Name":"owner-id","Values":["099720109477"]},{"Name":"name","Values":["ubuntu/images/hvm-ssd-gp3/ubuntu-noble-24.04-amd64-server-*"]},{"region":"us-east-1"}]
-            # currentImageName=unknown
-            ami: ami-04b70fa74e45c3917
+            # currentImageName=ubuntu/images/hvm-ssd-gp3/ubuntu-noble-24.04-amd64-server-20241206
+            ami: ami-00f3c44a2de45a590
             subdomain:  ${{ vars.DNS_SUBDOMAIN || 'auto' }}
             dns_tld: ${{ vars.DNS_TLD || 'balena-devices.com' }}
 
@@ -73,7 +73,7 @@ jobs:
       name: ${{ matrix.target }}
 
     steps:
-    - uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb
+    - uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2
       with:
         persist-credentials: false
 
@@ -81,7 +81,7 @@ jobs:
     - name: Setup awscli
       uses: unfor19/install-aws-cli-action@e8b481e524a99f37fbd39fdc1dcb3341ab091367 # v1
 
-    - uses: aws-actions/configure-aws-credentials@97834a484a5ab3c40fa9e2eb40fcf8041105a573
+    - uses: aws-actions/configure-aws-credentials@3478c15aa1cf2543c22efcbbd3e483d49c3a31d7
       with:
         aws-region: ${{ vars.AWS_REGION || 'us-east-1' }}
         role-session-name: github-${{ github.job }}-${{ github.run_id }}-${{ github.run_attempt }}

.pre-commit-config.yaml

@@ -1,12 +1,14 @@
 # See https://pre-commit.com for more information
 # See https://pre-commit.com/hooks.html for more hooks
+exclude: ^(.versionbot/|CHANGELOG.md|VERSION|README.md)
 repos:
 -   repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v3.2.0
+    rev: v5.0.0
     hooks:
     -   id: trailing-whitespace
     -   id: end-of-file-fixer
     -   id: check-yaml
+        args: [--allow-multiple-documents]
     -   id: check-added-large-files
 
 -   repo: https://github.com/shellcheck-py/shellcheck-py

CHANGELOG.md

@@ -4,6 +4,452 @@ All notable changes to this project will be documented in this file
 automatically by Versionist. DO NOT EDIT THIS FILE MANUALLY!
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+# v4.1.332
+## (2025-02-05)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.82 [balena-renovate[bot]]
+
+# v4.1.331
+## (2025-02-05)
+
+* Update aws-actions/configure-aws-credentials digest to 3478c15 [balena-renovate[bot]]
+
+# v4.1.330
+## (2025-02-05)
+
+* Set PRODUCTION_MODE true [Anton Belodedenko]
+
+# v4.1.329
+## (2025-01-31)
+
+* Update balena/open-balena-api Docker tag to v34.3.26 [balena-renovate[bot]]
+
+# v4.1.328
+## (2025-01-31)
+
+* Update balena/open-balena-registry Docker tag to v2.41.22 [balena-renovate[bot]]
+
+# v4.1.327
+## (2025-01-31)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.66 [balena-renovate[bot]]
+
+# v4.1.326
+## (2025-01-27)
+
+* Update balena/open-balena-api Docker tag to v34.3.24 [balena-renovate[bot]]
+
+# v4.1.325
+## (2025-01-24)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.81 [balena-renovate[bot]]
+
+# v4.1.324
+## (2025-01-24)
+
+* Update aws-actions/configure-aws-credentials digest to f171d5c [balena-renovate[bot]]
+
+# v4.1.323
+## (2025-01-24)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.65 [balena-renovate[bot]]
+
+# v4.1.322
+## (2025-01-24)
+
+* Update balena/open-balena-registry Docker tag to v2.41.20 [balena-renovate[bot]]
+
+# v4.1.321
+## (2025-01-24)
+
+* Update balena/open-balena-api Docker tag to v34.3.23 [balena-renovate[bot]]
+
+# v4.1.320
+## (2025-01-20)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.80 [balena-renovate[bot]]
+
+# v4.1.319
+## (2025-01-20)
+
+* Update balena/open-balena-api Docker tag to v34.3.21 [balena-renovate[bot]]
+
+# v4.1.318
+## (2025-01-17)
+
+* Update balena/open-balena-api Docker tag to v34.3.20 [balena-renovate[bot]]
+
+# v4.1.317
+## (2025-01-16)
+
+* Update dependency balena-io/balena-cli to v20.2.3 [balena-renovate[bot]]
+
+# v4.1.316
+## (2025-01-16)
+
+* Update actions/checkout digest to 85e6279 [balena-renovate[bot]]
+
+# v4.1.315
+## (2025-01-16)
+
+* Update actions/checkout digest to 009b9ae [balena-renovate[bot]]
+
+# v4.1.314
+## (2025-01-16)
+
+* Update balena/open-balena-api Docker tag to v34.3.19 [balena-renovate[bot]]
+
+# v4.1.313
+## (2025-01-16)
+
+* Update balena/open-balena-api Docker tag to v34.3.18 [balena-renovate[bot]]
+
+# v4.1.312
+## (2025-01-16)
+
+* Update qemux/qemu-docker Docker tag to v6.13 [balena-renovate[bot]]
+
+# v4.1.311
+## (2025-01-14)
+
+* Update balena/open-balena-registry Docker tag to v2.41.19 [balena-renovate[bot]]
+
+# v4.1.310
+## (2025-01-13)
+
+* Update balena/open-balena-api Docker tag to v34.3.17 [balena-renovate[bot]]
+
+# v4.1.309
+## (2025-01-13)
+
+* Update balena/open-balena-api Docker tag to v34.3.16 [balena-renovate[bot]]
+
+# v4.1.308
+## (2025-01-13)
+
+* Update dependency balena-io/balena-cli to v20.2.2 [balena-renovate[bot]]
+
+# v4.1.307
+## (2025-01-13)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.79 [balena-renovate[bot]]
+
+# v4.1.306
+## (2025-01-13)
+
+* Update balena/open-balena-api Docker tag to v34.3.15 [balena-renovate[bot]]
+
+# v4.1.305
+## (2025-01-08)
+
+* Update balena/open-balena-api Docker tag to v34.3.14 [balena-renovate[bot]]
+
+# v4.1.304
+## (2025-01-08)
+
+* Update balena/open-balena-api Docker tag to v34.3.13 [balena-renovate[bot]]
+
+# v4.1.303
+## (2025-01-08)
+
+* Update balena/open-balena-registry Docker tag to v2.41.18 [balena-renovate[bot]]
+
+# v4.1.302
+## (2025-01-08)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.78 [balena-renovate[bot]]
+
+# v4.1.301
+## (2025-01-08)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.64 [balena-renovate[bot]]
+
+# v4.1.300
+## (2025-01-06)
+
+* Update balena/open-balena-registry Docker tag to v2.41.17 [balena-renovate[bot]]
+
+# v4.1.299
+## (2025-01-06)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.77 [balena-renovate[bot]]
+
+# v4.1.298
+## (2025-01-06)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.63 [balena-renovate[bot]]
+
+# v4.1.297
+## (2025-01-06)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.76 [balena-renovate[bot]]
+
+# v4.1.296
+## (2025-01-06)
+
+* Update balena/open-balena-api Docker tag to v34.3.12 [balena-renovate[bot]]
+
+# v4.1.295
+## (2025-01-06)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.75 [balena-renovate[bot]]
+
+# v4.1.294
+## (2025-01-02)
+
+* Update pre-commit hook pre-commit/pre-commit-hooks to v5 [balena-renovate[bot]]
+* Update balena/open-balena-api Docker tag to v34.3.11 [balena-renovate[bot]]
+
+# v4.1.293
+## (2025-01-02)
+
+* Update dependency balena-io/balena-cli to v20.2.1 [balena-renovate[bot]]
+
+# v4.1.292
+## (2025-01-02)
+
+* Update dependency balena-io/balena-cli to v20.1.6 [balena-renovate[bot]]
+
+# v4.1.291
+## (2025-01-02)
+
+* Update pre-commit hook pre-commit/pre-commit-hooks to v4 [balena-renovate[bot]]
+
+# v4.1.290
+## (2024-12-30)
+
+* Update balena/open-balena-api Docker tag to v34.3.10 [balena-renovate[bot]]
+
+# v4.1.289
+## (2024-12-30)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.74 [balena-renovate[bot]]
+
+# v4.1.288
+## (2024-12-25)
+
+* Update balena/open-balena-api Docker tag to v34.3.9 [balena-renovate[bot]]
+
+# v4.1.287
+## (2024-12-25)
+
+* Update balena/open-balena-api Docker tag to v34.3.8 [balena-renovate[bot]]
+
+# v4.1.286
+## (2024-12-24)
+
+* Update balena/open-balena-api Docker tag to v34.3.5 [balena-renovate[bot]]
+
+# v4.1.285
+## (2024-12-24)
+
+* Update balena/open-balena-api Docker tag to v34.3.4 [balena-renovate[bot]]
+
+# v4.1.284
+## (2024-12-23)
+
+* Update balena/open-balena-api Docker tag to v34.3.3 [balena-renovate[bot]]
+
+# v4.1.283
+## (2024-12-23)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.73 [balena-renovate[bot]]
+
+# v4.1.282
+## (2024-12-23)
+
+* Update balena/open-balena-api Docker tag to v34.3.2 [balena-renovate[bot]]
+
+# v4.1.281
+## (2024-12-23)
+
+* Update balena/open-balena-api Docker tag to v34.3.1 [balena-renovate[bot]]
+
+# v4.1.280
+## (2024-12-20)
+
+* Update dependency balena-io/balena-cli to v20.1.5 [balena-renovate[bot]]
+
+# v4.1.279
+## (2024-12-20)
+
+* Update dependency balena-io/balena-cli to v20.1.4 [balena-renovate[bot]]
+
+# v4.1.278
+## (2024-12-20)
+
+* Update qemux/qemu-docker Docker tag to v6.12 [balena-renovate[bot]]
+
+# v4.1.277
+## (2024-12-20)
+
+* Update dependency balena-io/balena-cli to v20.1.3 [balena-renovate[bot]]
+
+# v4.1.276
+## (2024-12-19)
+
+* Update balena/open-balena-api Docker tag to v34.3.0 [balena-renovate[bot]]
+
+# v4.1.275
+## (2024-12-17)
+
+* Update balena/open-balena-api Docker tag to v34.2.0 [balena-renovate[bot]]
+
+# v4.1.274
+## (2024-12-17)
+
+* Update dependency balena-io/balena-cli to v20.1.2 [balena-renovate[bot]]
+
+# v4.1.273
+## (2024-12-17)
+
+* Update balena/open-balena-api Docker tag to v34 [balena-renovate[bot]]
+
+# v4.1.272
+## (2024-12-16)
+
+* Update dependency balena-io/balena-cli to v20.1.1 [balena-renovate[bot]]
+
+# v4.1.271
+## (2024-12-16)
+
+* Update balena/open-balena-api Docker tag to v33 [balena-renovate[bot]]
+
+# v4.1.270
+## (2024-12-16)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.72 [balena-renovate[bot]]
+
+# v4.1.269
+## (2024-12-16)
+
+* Update balena/open-balena-api Docker tag to v32 [balena-renovate[bot]]
+
+# v4.1.268
+## (2024-12-13)
+
+* Update dependency balena-io/balena-cli to v20.1.0 [balena-renovate[bot]]
+
+# v4.1.267
+## (2024-12-13)
+
+* Update qemux/qemu-docker Docker tag to v6.11 [balena-renovate[bot]]
+
+# v4.1.266
+## (2024-12-13)
+
+* Update balena/open-balena-api Docker tag to v31.4.9 [balena-renovate[bot]]
+
+# v4.1.265
+## (2024-12-13)
+
+* Update dependency balena-io/balena-cli to v20.0.9 [balena-renovate[bot]]
+
+# v4.1.264
+## (2024-12-12)
+
+* Update balena/open-balena-api Docker tag to v31.2.23 [balena-renovate[bot]]
+
+# v4.1.263
+## (2024-12-12)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.62 [balena-renovate[bot]]
+
+# v4.1.262
+## (2024-12-12)
+
+* Update balena/open-balena-registry Docker tag to v2.41.16 [balena-renovate[bot]]
+
+# v4.1.261
+## (2024-12-12)
+
+* Update ami digest to ubuntu/images/hvm-ssd-gp3/ubuntu-noble-24.04-amd64-server-20241206 [balena-renovate[bot]]
+
+# v4.1.260
+## (2024-12-12)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.70 [balena-renovate[bot]]
+
+# v4.1.259
+## (2024-12-12)
+
+* ignore versioning assets [Anton Belodedenko]
+
+# v4.1.258
+## (2024-11-28)
+
+* Update balena/open-balena-api Docker tag to v31.2.22 [balena-renovate[bot]]
+
+# v4.1.257
+## (2024-11-28)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.64 [balena-renovate[bot]]
+
+# v4.1.256
+## (2024-11-28)
+
+* Tests require permissions: id-token: "write" [Anton Belodedenko]
+
+# v4.1.255
+## (2024-11-28)
+
+* Update balena/open-balena-api Docker tag to v31.2.19 [balena-renovate[bot]]
+
+# v4.1.254
+## (2024-11-26)
+
+* Update qemux/qemu-docker Docker tag to v6.10 [balena-renovate[bot]]
+
+# v4.1.253
+## (2024-11-26)
+
+* Update balena/open-balena-api Docker tag to v31.2.17 [balena-renovate[bot]]
+
+# v4.1.252
+## (2024-11-26)
+
+* Update balena/open-balena-api Docker tag to v31.2.16 [balena-renovate[bot]]
+
+# v4.1.251
+## (2024-11-26)
+
+* Update balena/open-balena-api Docker tag to v31.2.15 [balena-renovate[bot]]
+
+# v4.1.250
+## (2024-11-25)
+
+* Update balena/open-balena-api Docker tag to v31.2.14 [balena-renovate[bot]]
+
+# v4.1.249
+## (2024-11-25)
+
+* Update qemux/qemu-docker Docker tag to v6.09 [balena-renovate[bot]]
+
+# v4.1.248
+## (2024-11-25)
+
+* Update balena/open-balena-api Docker tag to v31.2.13 [balena-renovate[bot]]
+
+# v4.1.247
+## (2024-11-25)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.63 [balena-renovate[bot]]
+
+# v4.1.246
+## (2024-11-23)
+
+* Update dependency balena-io/balena-cli to v20.0.7 [balena-renovate[bot]]
+
+# v4.1.245
+## (2024-11-23)
+
+* Update balena/open-balena-api Docker tag to v31.2.12 [balena-renovate[bot]]
+
+# v4.1.244
+## (2024-11-22)
+
+* Update balena/open-balena-api Docker tag to v31.2.11 [balena-renovate[bot]]
+
 # v4.1.243
 ## (2024-11-22)
 

VERSION

@@ -1 +1 @@
-4.1.243
+4.1.332

balena.yml

@@ -23,4 +23,4 @@ data:
     - generic-amd64
     - genericx86-64-ext
     - intel-nuc
-version: 4.1.243
+version: 4.1.332

docker-compose.yml

@@ -26,7 +26,7 @@ x-default-environment: &default-environment
   DB_PASSWORD: docker
   DB_USER: docker
   LOG_LEVEL: DEBUG
-  PRODUCTION_MODE: 'false'
+  PRODUCTION_MODE: 'true'
 
 x-default-healthcheck-trait: &with-default-healthcheck
   healthcheck:
@@ -79,7 +79,7 @@ services:
       *with-default-privileges,
       *with-default-volumes,
     ]
-    image: balena/open-balena-api:31.2.10
+    image: balena/open-balena-api:34.3.26
     depends_on:
       - db
       - redis
@@ -119,7 +119,7 @@ services:
       *with-default-healthcheck,
       *with-default-privileges,
     ]
-    image: balena/open-balena-registry:2.41.14
+    image: balena/open-balena-registry:2.41.22
     volumes:
       - certs-data:/certs
       - resin-data:/balena
@@ -146,7 +146,7 @@ services:
       *with-network-privileges,
       *with-default-privileges,
     ]
-    image: balena/open-balena-vpn:11.30.62
+    image: balena/open-balena-vpn:v11.30.82
     depends_on:
       - api
     environment:
@@ -156,6 +156,8 @@ services:
       VPN_PORT: 443
       # ensure correct service instance IP is registered with the API
       VPN_SERVICE_REGISTER_INTERFACE: eth0
+    devices:
+      - /dev/net/tun
 
   # https://github.com/balena-io/open-balena-db
   db:
@@ -175,7 +177,7 @@ services:
       *with-default-healthcheck,
       *with-default-privileges,
     ]
-    image: balena/open-balena-s3:2.28.60
+    image: balena/open-balena-s3:2.28.66
     volumes:
       - s3-data:/export
       - certs-data:/certs

src/balena-tests/Dockerfile

@@ -1,7 +1,7 @@
 FROM ubuntu:24.04
 
 # renovate: datasource=github-releases depName=balena-io/balena-cli
-ARG BALENA_CLI_VERSION=v20.0.6
+ARG BALENA_CLI_VERSION=v20.2.3
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	bash \

src/test-device/Dockerfile

@@ -1,6 +1,6 @@
 # https://hub.docker.com/r/qemux/qemu-docker
 # https://github.com/qemus/qemu-docker
-FROM qemux/qemu-docker:6.08
+FROM qemux/qemu-docker:6.13
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	minicom \