v4.1.155

Update aws-actions/configure-aws-credentials digest to a701637

.github/workflows/tests.yml

@@ -73,13 +73,15 @@ jobs:
       name: ${{ matrix.target }}
 
     steps:
-    - uses: actions/checkout@9a9194f87191a7e9055e3e9b95b8cfb13023bb08
+    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
+      with:
+        persist-credentials: false
 
     # https://github.com/unfor19/install-aws-cli-action
     - name: Setup awscli
       uses: unfor19/install-aws-cli-action@e8b481e524a99f37fbd39fdc1dcb3341ab091367 # v1
 
-    - uses: aws-actions/configure-aws-credentials@ead1e6af28a20f26cc47437fa7e4c8357409ef24
+    - uses: aws-actions/configure-aws-credentials@a70163716ac95dea0bf269be9aff669ad6a933c5
       with:
         aws-region: ${{ vars.AWS_REGION || 'us-east-1' }}
         role-session-name: github-${{ github.job }}-${{ github.run_id }}-${{ github.run_attempt }}

.pre-commit-config.yaml

@@ -0,0 +1,15 @@
+# See https://pre-commit.com for more information
+# See https://pre-commit.com/hooks.html for more hooks
+repos:
+-   repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v3.2.0
+    hooks:
+    -   id: trailing-whitespace
+    -   id: end-of-file-fixer
+    -   id: check-yaml
+    -   id: check-added-large-files
+
+-   repo: https://github.com/shellcheck-py/shellcheck-py
+    rev: v0.10.0.1
+    hooks:
+    -   id: shellcheck

CHANGELOG.md

@@ -4,6 +4,416 @@ All notable changes to this project will be documented in this file
 automatically by Versionist. DO NOT EDIT THIS FILE MANUALLY!
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+# v4.1.155
+## (2024-10-08)
+
+* Update aws-actions/configure-aws-credentials digest to a701637 [Self-hosted Renovate Bot]
+
+# v4.1.154
+## (2024-10-07)
+
+* Update balena/open-balena-api Docker tag to v29.0.3 [Self-hosted Renovate Bot]
+
+# v4.1.153
+## (2024-10-07)
+
+* Update actions/checkout digest to eef6144 [Self-hosted Renovate Bot]
+
+# v4.1.152
+## (2024-10-05)
+
+* Update qemux/qemu-docker Docker tag to v6.04 [Self-hosted Renovate Bot]
+
+# v4.1.151
+## (2024-10-04)
+
+* Update balena/open-balena-api Docker tag to v29.0.2 [Self-hosted Renovate Bot]
+
+# v4.1.150
+## (2024-10-03)
+
+* Update balena/open-balena-registry Docker tag to v2.41.10 [Self-hosted Renovate Bot]
+
+# v4.1.149
+## (2024-10-03)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.57 [Self-hosted Renovate Bot]
+
+# v4.1.148
+## (2024-10-03)
+
+* Update balena/open-balena-api Docker tag to v29.0.1 [Self-hosted Renovate Bot]
+
+# v4.1.147
+## (2024-10-03)
+
+* Update actions/checkout digest to 6b42224 [Self-hosted Renovate Bot]
+
+# v4.1.146
+## (2024-10-01)
+
+* Update aws-actions/configure-aws-credentials digest to 73daff1 [Self-hosted Renovate Bot]
+
+# v4.1.145
+## (2024-10-01)
+
+* Update qemux/qemu-docker Docker tag to v6.03 [Self-hosted Renovate Bot]
+
+# v4.1.144
+## (2024-10-01)
+
+* Update balena/open-balena-api Docker tag to v29 [Self-hosted Renovate Bot]
+
+# v4.1.143
+## (2024-10-01)
+
+* Update qemux/qemu-docker Docker tag to v6.02 [Self-hosted Renovate Bot]
+
+# v4.1.142
+## (2024-10-01)
+
+* Update balena/open-balena-api Docker tag to v28.0.13 [Self-hosted Renovate Bot]
+
+# v4.1.141
+## (2024-09-30)
+
+* Update balena/open-balena-api Docker tag to v28.0.12 [Self-hosted Renovate Bot]
+
+# v4.1.140
+## (2024-09-27)
+
+* Update aws-actions/configure-aws-credentials digest to 050bf7a [Self-hosted Renovate Bot]
+
+# v4.1.139
+## (2024-09-27)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.50 [Self-hosted Renovate Bot]
+
+# v4.1.138
+## (2024-09-27)
+
+* Update balena/open-balena-api Docker tag to v28.0.11 [Self-hosted Renovate Bot]
+
+# v4.1.137
+## (2024-09-26)
+
+* Update actions/checkout digest to d632683 [Self-hosted Renovate Bot]
+
+# v4.1.136
+## (2024-09-26)
+
+* Update dependency balena-io/balena-cli to v19.0.13 [Self-hosted Renovate Bot]
+
+# v4.1.135
+## (2024-09-26)
+
+* CI: Update checkout settings [Pagan Gazzard]
+
+# v4.1.134
+## (2024-09-20)
+
+* Update dependency balena-io/balena-cli to v19.0.12 [Self-hosted Renovate Bot]
+
+# v4.1.133
+## (2024-09-20)
+
+* Update balena/open-balena-api Docker tag to v28.0.10 [Self-hosted Renovate Bot]
+
+# v4.1.132
+## (2024-09-20)
+
+* Update balena/open-balena-api Docker tag to v28.0.9 [Self-hosted Renovate Bot]
+
+# v4.1.131
+## (2024-09-19)
+
+* Update balena/open-balena-api Docker tag to v28.0.8 [Self-hosted Renovate Bot]
+
+# v4.1.130
+## (2024-09-18)
+
+* Update balena/open-balena-registry Docker tag to v2.41.8 [Self-hosted Renovate Bot]
+
+# v4.1.129
+## (2024-09-18)
+
+* Update dependency balena-io/balena-cli to v19.0.11 [Self-hosted Renovate Bot]
+
+# v4.1.128
+## (2024-09-18)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.56 [Self-hosted Renovate Bot]
+
+# v4.1.127
+## (2024-09-18)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.49 [Self-hosted Renovate Bot]
+
+# v4.1.126
+## (2024-09-18)
+
+* Update balena/open-balena-api Docker tag to v28.0.5 [Self-hosted Renovate Bot]
+
+# v4.1.125
+## (2024-09-17)
+
+* Update aws-actions/configure-aws-credentials digest to 909c963 [Self-hosted Renovate Bot]
+
+# v4.1.124
+## (2024-09-17)
+
+* Update balena/open-balena-api Docker tag to v28.0.2 [Self-hosted Renovate Bot]
+
+# v4.1.123
+## (2024-09-17)
+
+* Add pre-commit shellcheck hook [Anton Belodedenko]
+
+# v4.1.122
+## (2024-09-16)
+
+* Update balena/open-balena-api Docker tag to v28 [Self-hosted Renovate Bot]
+
+# v4.1.121
+## (2024-09-16)
+
+* Update balena/open-balena-api Docker tag to v27.2.4 [Self-hosted Renovate Bot]
+
+# v4.1.120
+## (2024-09-16)
+
+* Update qemux/qemu-docker Docker tag to v6.01 [Self-hosted Renovate Bot]
+
+# v4.1.119
+## (2024-09-16)
+
+* Update balena/open-balena-api Docker tag to v27.2.3 [Self-hosted Renovate Bot]
+
+# v4.1.118
+## (2024-09-16)
+
+* Update balena/open-balena-api Docker tag to v27.2.2 [Self-hosted Renovate Bot]
+
+# v4.1.117
+## (2024-09-16)
+
+* Update dependency balena-io/balena-cli to v19.0.10 [Self-hosted Renovate Bot]
+
+# v4.1.116
+## (2024-09-16)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.47 [Self-hosted Renovate Bot]
+
+# v4.1.115
+## (2024-09-12)
+
+* Update aws-actions/configure-aws-credentials digest to bd13543 [Self-hosted Renovate Bot]
+
+# v4.1.114
+## (2024-09-12)
+
+* Update dependency balena-io/balena-cli to v19.0.8 [Self-hosted Renovate Bot]
+
+# v4.1.113
+## (2024-09-11)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.46 [Self-hosted Renovate Bot]
+
+# v4.1.112
+## (2024-09-11)
+
+* Update dependency balena-io/balena-cli to v19.0.5 [Self-hosted Renovate Bot]
+
+# v4.1.111
+## (2024-09-11)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.45 [Self-hosted Renovate Bot]
+
+# v4.1.110
+## (2024-09-11)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.42 [Self-hosted Renovate Bot]
+
+# v4.1.109
+## (2024-09-10)
+
+* Update balena/open-balena-api Docker tag to v27.2.1 [Self-hosted Renovate Bot]
+
+# v4.1.108
+## (2024-09-10)
+
+* Update aws-actions/configure-aws-credentials digest to 1ceaabc [Self-hosted Renovate Bot]
+
+# v4.1.107
+## (2024-09-10)
+
+* Update balena/open-balena-api Docker tag to v27.1.4 [Self-hosted Renovate Bot]
+
+# v4.1.106
+## (2024-09-09)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.38 [Self-hosted Renovate Bot]
+
+# v4.1.105
+## (2024-09-09)
+
+* Update balena/open-balena-api Docker tag to v27.1.2 [Self-hosted Renovate Bot]
+
+# v4.1.104
+## (2024-09-09)
+
+* Update balena/open-balena-api Docker tag to v27.1.1 [Self-hosted Renovate Bot]
+
+# v4.1.103
+## (2024-09-06)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.37 [Self-hosted Renovate Bot]
+
+# v4.1.102
+## (2024-09-06)
+
+* Update balena/open-balena-api Docker tag to v27.1.0 [Self-hosted Renovate Bot]
+
+# v4.1.101
+## (2024-09-05)
+
+* Update qemux/qemu-docker Docker tag to v6 [Self-hosted Renovate Bot]
+
+# v4.1.100
+## (2024-09-05)
+
+* Update actions/checkout digest to 6d193bf [Self-hosted Renovate Bot]
+
+# v4.1.99
+## (2024-09-05)
+
+* Update actions/checkout digest to b684943 [Self-hosted Renovate Bot]
+
+# v4.1.98
+## (2024-09-05)
+
+* Update balena/open-balena-api Docker tag to v27 [Self-hosted Renovate Bot]
+
+# v4.1.97
+## (2024-09-05)
+
+* Update dependency balena-io/balena-cli to v19.0.3 [Self-hosted Renovate Bot]
+
+# v4.1.96
+## (2024-09-05)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.36 [Self-hosted Renovate Bot]
+
+# v4.1.95
+## (2024-09-04)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.35 [Self-hosted Renovate Bot]
+
+# v4.1.94
+## (2024-09-04)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.34 [Self-hosted Renovate Bot]
+
+# v4.1.93
+## (2024-09-03)
+
+* Update dependency balena-io/balena-cli to v19.0.2 [Self-hosted Renovate Bot]
+
+# v4.1.92
+## (2024-09-03)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.33 [Self-hosted Renovate Bot]
+
+# v4.1.91
+## (2024-09-03)
+
+* Update balena/open-balena-registry Docker tag to v2.41.6 [Self-hosted Renovate Bot]
+
+# v4.1.90
+## (2024-09-03)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.55 [Self-hosted Renovate Bot]
+
+# v4.1.89
+## (2024-09-03)
+
+* Update balena/open-balena-api Docker tag to v26.4.8 [Self-hosted Renovate Bot]
+
+# v4.1.88
+## (2024-09-03)
+
+* Update aws-actions/configure-aws-credentials digest to e26e190 [Self-hosted Renovate Bot]
+
+# v4.1.87
+## (2024-09-03)
+
+* Update balena/open-balena-api Docker tag to v26.4.7 [Self-hosted Renovate Bot]
+
+# v4.1.86
+## (2024-09-03)
+
+* Update balena/open-balena-api Docker tag to v26.4.6 [Self-hosted Renovate Bot]
+
+# v4.1.85
+## (2024-09-02)
+
+* Update dependency balena-io/balena-cli to v19.0.1 [Self-hosted Renovate Bot]
+
+# v4.1.84
+## (2024-09-02)
+
+* Update balena/open-balena-api Docker tag to v26.4.5 [Self-hosted Renovate Bot]
+
+# v4.1.83
+## (2024-09-02)
+
+* Update actions/checkout digest to 2d7d9f7 [Self-hosted Renovate Bot]
+
+# v4.1.82
+## (2024-08-30)
+
+* Update balena/open-balena-api Docker tag to v26.4.3 [Self-hosted Renovate Bot]
+
+# v4.1.81
+## (2024-08-30)
+
+* Update balena/open-balena-api Docker tag to v26.4.2 [Self-hosted Renovate Bot]
+
+# v4.1.80
+## (2024-08-29)
+
+* Update balena/open-balena-registry Docker tag to v2.41.4 [Self-hosted Renovate Bot]
+
+# v4.1.79
+## (2024-08-28)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.54 [Self-hosted Renovate Bot]
+
+# v4.1.78
+## (2024-08-27)
+
+* Update balena/open-balena-api Docker tag to v26.4.0 [Self-hosted Renovate Bot]
+
+# v4.1.77
+## (2024-08-27)
+
+* Update aws-actions/configure-aws-credentials digest to 0fc95ed [Self-hosted Renovate Bot]
+
+# v4.1.76
+## (2024-08-26)
+
+* Update balena/open-balena-api Docker tag to v26.3.5 [Self-hosted Renovate Bot]
+
+# v4.1.75
+## (2024-08-23)
+
+* Update balena/open-balena-api Docker tag to v26.3.3 [Self-hosted Renovate Bot]
+
+# v4.1.74
+## (2024-08-22)
+
+* Update dependency balena-io/balena-cli to v19 [Self-hosted Renovate Bot]
+
 # v4.1.73
 ## (2024-08-22)
 

VERSION

@@ -1 +1 @@
-4.1.73
+4.1.155

balena.yml

@@ -23,4 +23,4 @@ data:
     - generic-amd64
     - genericx86-64-ext
     - intel-nuc
-version: 4.1.73
+version: 4.1.155

docker-compose.yml

@@ -79,7 +79,7 @@ services:
       *with-default-privileges,
       *with-default-volumes,
     ]
-    image: balena/open-balena-api:v26.3.1
+    image: balena/open-balena-api:v29.0.3
     depends_on:
       - db
       - redis
@@ -119,7 +119,7 @@ services:
       *with-default-healthcheck,
       *with-default-privileges,
     ]
-    image: balena/open-balena-registry:v2.41.3
+    image: balena/open-balena-registry:v2.41.10
     volumes:
       - certs-data:/certs
       - resin-data:/balena
@@ -146,7 +146,7 @@ services:
       *with-network-privileges,
       *with-default-privileges,
     ]
-    image: balena/open-balena-vpn:v11.30.31
+    image: balena/open-balena-vpn:v11.30.50
     depends_on:
       - api
     environment:
@@ -175,7 +175,7 @@ services:
       *with-default-healthcheck,
       *with-default-privileges,
     ]
-    image: balena/open-balena-s3:v2.28.53
+    image: balena/open-balena-s3:v2.28.57
     volumes:
       - s3-data:/export
       - certs-data:/certs

src/balena-tests/Dockerfile

@@ -1,7 +1,7 @@
 FROM ubuntu:24.04
 
 # renovate: datasource=github-releases depName=balena-io/balena-cli
-ARG BALENA_CLI_VERSION=v18.2.34
+ARG BALENA_CLI_VERSION=v19.0.13
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	bash \

src/balena-tests/balena.sh

@@ -1,16 +1,17 @@
 #!/usr/bin/env bash
 
-# shellcheck disable=SC2154,SC2034,SC1090
+# shellcheck disable=SC2034,SC1090
 set -aeu
 
-curl_opts="--retry 3 --fail"
+read -ra curl_opts <<<'--retry 3 --fail'
 if [[ $VERBOSE =~ on|On|Yes|yes|true|True ]]; then
     set -x
-    curl_opts="${curl_opts} --verbose"
+    curl_opts+=('--verbose')
 else
-    curl_opts="${curl_opts} --silent"
+    curl_opts+=('--silent')
 fi
 
+# shellcheck disable=SC1091
 source /usr/sbin/functions
 
 function remove_test_assets() {
@@ -49,10 +50,10 @@ function shutdown_dut() {
 
 function set_update_lock {
     if [[ -n "${BALENA_SUPERVISOR_ADDRESS:-}" ]] && [[ -n "${BALENA_SUPERVISOR_API_KEY:-}" ]]; then
-        while [[ $(curl ${curl_opts} "${BALENA_SUPERVISOR_ADDRESS}/v1/device?apikey=${BALENA_SUPERVISOR_API_KEY}" \
+        while [[ $(curl "${curl_opts[@]}" "${BALENA_SUPERVISOR_ADDRESS}/v1/device?apikey=${BALENA_SUPERVISOR_API_KEY}" \
           -H "Content-Type: application/json" | jq -r '.update_pending') == 'true' ]]; do
 
-            curl ${curl_opts} "${BALENA_SUPERVISOR_ADDRESS}/v1/device?apikey=${BALENA_SUPERVISOR_API_KEY}" \
+            curl "${curl_opts[@]}" "${BALENA_SUPERVISOR_ADDRESS}/v1/device?apikey=${BALENA_SUPERVISOR_API_KEY}" \
               -H "Content-Type: application/json" | jq -r
 
             sleep "$(( (RANDOM % 3) + 3 ))s"
@@ -89,7 +90,7 @@ function update_ca_certificates() {
 }
 
 function wait_for_api() {
-    while ! curl ${curl_opts} "https://api.${DNS_TLD}/ping"; do
+    while ! curl "${curl_opts[@]}" "https://api.${DNS_TLD}/ping"; do
         echo 'waiting for API...'
         sleep "$(( (RANDOM % 5) + 5 ))s"
     done
@@ -183,6 +184,7 @@ function registry_auth() {
     if [[ -n "${REGISTRY_USER:-}" ]] && [[ -n "${REGISTRY_PASS:-}" ]]; then
         with_backoff docker login -u "${REGISTRY_USER}" -p "${REGISTRY_PASS}"
 
+        # shellcheck disable=SC2016
         printf '{"https://index.docker.io/v1/": {"username":"%s", "password":"$s"}}' \
           "${REGISTRY_USER}" "${REGISTRY_PASS}" | jq -r > ~/.balena/secrets.json
     fi
@@ -210,7 +212,7 @@ function get_releases() {
 }
 
 function get_release_commit() {
-      echo "$(get_releases)" | jq -re \
+      get_releases | jq -re \
         'select((.[].status=="success")
         and (.[].is_invalidated==false)
         and (.[].is_final==true)
@@ -218,7 +220,7 @@ function get_release_commit() {
 }
 
 function get_release_id() {
-      echo "$(get_releases)" | jq -re \
+      get_releases | jq -re \
         'select((.[].status=="success")
         and (.[].is_invalidated==false)
         and (.[].is_final==true)
@@ -230,7 +232,7 @@ function supervisor_update_target_state() {
     balena_device_uuid="$(cat </balena/config.json | jq -r .uuid)"
 
     if [[ -n "${balena_device_uuid:-}" ]]; then
-        while ! curl ${curl_opts} "https://api.${DNS_TLD}/supervisor/v1/update" \
+        while ! curl "${curl_opts[@]}" "https://api.${DNS_TLD}/supervisor/v1/update" \
           --header "Content-Type: application/json" \
           --header "Authorization: Bearer $(cat <~/.balena/token)" \
           --data "{\"uuid\": \"${balena_device_uuid}\", \"data\": {\"force\": true}}"; do
@@ -263,7 +265,7 @@ function check_running_release() {
 
 function get_os_version() {
     local BALENARC_BALENA_URL
-    BALENARC_BALENA_URL="$(echo "${BALENA_API_URL}" | sed 's#https://api\.##g')"
+    BALENARC_BALENA_URL="${BALENA_API_URL//https:\/\/api\./}"
 
     local os_version
     os_version=${OS_VERSION:-$(with_backoff balena os versions "${DEVICE_TYPE}" | head -n 1)}
@@ -276,13 +278,13 @@ function upload_release_asset() {
         release_id=${1:-1}
         release_asset="$(find / -type f -name '*.png' | head -n 1)"
 
-        curl ${curl_opts} "https://api.${DNS_TLD}/resin/release_asset" \
+        curl "${curl_opts[@]}" "https://api.${DNS_TLD}/resin/release_asset" \
           --header "Authorization: Bearer $(cat <~/.balena/token)" \
           --form "asset=@${release_asset}" \
           --form "release=${release_id}" \
-          --form "asset_key=$((RANDOM))-$(basename ${release_asset})" \
+          --form "asset_key=$((RANDOM))-$(basename "${release_asset}")" \
           | jq -re .asset.href \
-          | xargs curl ${curl_opts} -o "/tmp/$((RANDOM))-$(basename ${release_asset})"
+          | xargs curl "${curl_opts[@]}" -o "/tmp/$((RANDOM))-$(basename "${release_asset}")"
     fi
 }
 

src/test-device/Dockerfile

@@ -1,6 +1,6 @@
 # https://hub.docker.com/r/qemux/qemu-docker
 # https://github.com/qemus/qemu-docker
-FROM qemux/qemu-docker:5.18
+FROM qemux/qemu-docker:6.04
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	minicom \