[github-actions]

Weekly image pin bump (ADR 0030 section 4). Generated by tools/imagebump; review before merge.

Proposed bumps

BUMP auth-v14 0.36.0 -> 0.36.1
BUMP hasura v2.51.0 -> v2.51.2
BUMP hasura-v14 v2.44.0 -> v2.44.1
BUMP seaweedfs 4.48 -> 4.51

Files changed

 internal/compose/images.lock.json                  | 92 +++++++++++-----------
 internal/compose/images.yaml                       |  8 +-
 .../testdata/fixtures/dev-minimal/golden-tree.txt  |  4 +-
 3 files changed, 52 insertions(+), 52 deletions(-)

Checks

Check	Result	Run
imagelock -check	PASS
go test (internal/compose, internal/config, cmd/commands, tools/imagebump)	FAIL
Image probe (default-images-pullable.yml)	PASS	https://github.com/nself-org/cli/actions/runs/40333203669
Stack smoke (e2e-golden-path.yml, source=local)	FAIL	https://github.com/nself-org/cli/actions/runs/40333409652
Mirror plan (mirror-images.sh --plan)	PASS

Failing tests

Names only; the full log is in the workflow run.

--- FAIL: TestAuthImageByMode
--- FAIL: TestHasuraImageByMode
--- FAIL: TestProjectLockPinsSurviveInitDefaults
FAIL github.com/nself-org/cli/cmd/commands
FAIL github.com/nself-org/cli/internal/compose

Mirror plan

Status lines: PRESENT 12, MISSING 15, DIFFERS 8

Nothing is pushed to Docker Hub by this PR. The apply step runs after merge only when the repo variable IMAGE_MIRROR_APPLY is true.

Plan detail (stderr of mirror-images.sh --plan)

mirror-images: plan: admin docker.io/nself/nself-admin@sha256:d002b5cff084eac661e147afd60e9d84e56a81dab35193d014e085b22354b5f6 -> docker.io/nself/admin:latest (copy needed)
mirror-images: plan: alertmanager docker.io/prom/alertmanager@sha256:e13b6ed5cb929eeaee733479dce55e10eb3bc2e9c4586c705a4e8da41e5eacf5 -> docker.io/nself/alertmanager:v0.27.0 (present, no copy needed)
mirror-images: plan: auth docker.io/nhost/auth@sha256:dfdc0b0403eb1abf36da253d47c43a31b606876324dec7200557b5b33d6d3ef1 -> docker.io/nself/auth:0.52.0 (copy needed)
mirror-images: plan: auth-v14 docker.io/nhost/auth@sha256:9322ccbd562fbd105ead4c8d5044b4ad9969617849fc4f07dff01f38b7f870d3 -> docker.io/nself/auth-v14:0.36.1 (copy needed)
mirror-images: plan: cadvisor gcr.io/cadvisor/cadvisor@sha256:aea169b3b211216d9d61c33455ec3a85d2b6f63d8889b1ebf41b97163cffbbc5 -> docker.io/nself/cadvisor:v0.49.2 (copy needed)
mirror-images: plan: deno docker.io/denoland/deno@sha256:75749604f68aea01d39bead15fd1c86343639e44eb8c58ab051da8a924799d01 -> docker.io/nself/deno:alpine (copy needed)
mirror-images: plan: elasticsearch docker.elastic.co/elasticsearch/elasticsearch@sha256:8425bc28027fd667d9a29cde58bed4050a64a854d973d8d1ad4152ecec52bfdb -> docker.io/nself/elasticsearch:8.11.4 (copy needed)
mirror-images: source: elasticsearch https://github.com/elastic/elasticsearch (AGPL — set as the docker.io/nself/elasticsearch repository description)
mirror-images: plan: functions docker.io/nhost/functions@sha256:9b8ea77cafd0fd284e19f4662e7bf4565b4e57d40d066bba24b60efa47c2a164 -> docker.io/nself/functions:latest (present, no copy needed)
mirror-images: plan: grafana docker.io/grafana/grafana@sha256:dfdfd26cc20a5e8861259ae624b39ac38013e8c85805b21c06c00e2f18f1689c -> docker.io/nself/grafana:11.1.13 (copy needed)
mirror-images: source: grafana https://github.com/grafana/grafana (AGPL — set as the docker.io/nself/grafana repository description)
mirror-images: plan: hasura docker.io/hasura/graphql-engine@sha256:9228f1b03a48e42d92dd8b53dd7530437ed10b6062599bb3dda5799526907701 -> docker.io/nself/hasura:v2.51.2 (copy needed)
mirror-images: plan: hasura-v14 docker.io/hasura/graphql-engine@sha256:5a3383ade31f3ed3b36de8bbc6b6f7991e94cec2c606b9f7a8cd5204e0d81ffc -> docker.io/nself/hasura-v14:v2.44.1 (copy needed)
mirror-images: plan: lego docker.io/goacme/lego@sha256:ae124a405844759b201b31efbd7a0ba302dbd16e86f2fb177c4b6db8bdc782c8 -> docker.io/nself/lego:v4.35.2 (present, no copy needed)
mirror-images: plan: loki docker.io/grafana/loki@sha256:ae0d78305c9c06512dfdee24b518eee82716269707c5e02ce62462c415a2f0c2 -> docker.io/nself/loki:3.1.2 (copy needed)
mirror-images: source: loki https://github.com/grafana/loki (AGPL — set as the docker.io/nself/loki repository description)
mirror-images: plan: mailpit docker.io/axllent/mailpit@sha256:0790692be935ea4420d085694f7985b1f692ca6a8771ab0e0bd8ba75ac180498 -> docker.io/nself/mailpit:latest (copy needed)
mirror-images: plan: meilisearch docker.io/getmeili/meilisearch@sha256:634e83ffe5bad15239fa26bd04d06bccb84a1f2f06ad8a35135b510711348792 -> docker.io/nself/meilisearch:v1.6 (present, no copy needed)
mirror-images: plan: meilisearch-init docker.io/library/busybox@sha256:73aaf090f3d85aa34ee199857f03fa3a95c8ede2ffd4cc2cdb5b94e566b11662 -> docker.io/nself/meilisearch-init:1.36 (present, no copy needed)
mirror-images: plan: minio docker.io/pgsty/minio@sha256:b6bfe7239bfc83fb90d31612d9704d86039dd714f7904b3f1ad68f211e602372 -> docker.io/nself/minio:latest (present, no copy needed)
mirror-images: source: minio https://github.com/pgsty/minio (AGPL — set as the docker.io/nself/minio repository description)
mirror-images: plan: mlflow ghcr.io/mlflow/mlflow@sha256:12035878d13e75d2a2c10450453c633afe1f40963b212d9fbeb0aff9cdd568c4 -> docker.io/nself/mlflow:v2.10.2 (copy needed)
mirror-images: plan: nginx docker.io/library/nginx@sha256:a3554c0d0b48177b1413c26e01f695334428020d9df01243fbae3e11cfd17417 -> docker.io/nself/nginx:alpine (copy needed)
mirror-images: plan: node-exporter docker.io/prom/node-exporter@sha256:4032c6d5bfd752342c3e631c2f1de93ba6b86c41db6b167b9a35372c139e7706 -> docker.io/nself/node-exporter:v1.8.2 (copy needed)
mirror-images: plan: otel-collector docker.io/otel/opentelemetry-collector-contrib@sha256:7f22d2a6748110ffb6a59bc0df448bccbf501cdb667d610ede4c61d3863d5849 -> docker.io/nself/otel-collector:latest (copy needed)
mirror-images: plan: otel-collector-contrib docker.io/otel/opentelemetry-collector-contrib@sha256:0d928e02b0ef5abbba775da205eb102f58b29aa75ea623465ec42445dfc5c443 -> docker.io/nself/otel-collector-contrib:0.102.1 (copy needed)
mirror-images: plan: pgvector docker.io/pgvector/pgvector@sha256:7b822b0aac60967beb1ea5e576b8602c94c300a157d187f385ae3e0da199b90a -> docker.io/nself/pgvector:pg16 (present, no copy needed)
mirror-images: plan: postgres docker.io/library/postgres@sha256:0cefaabd882e42bcb2a2f3dc56d3ce4770560ba62fd7f197f1a2e008fd5731ab -> docker.io/nself/postgres:16-alpine (copy needed)
mirror-images: plan: postgres-exporter docker.io/prometheuscommunity/postgres-exporter@sha256:386b12d19eab2a37d7cd8ca8b4c7491cc7a830d9581f49af6c98a393da9605e6 -> docker.io/nself/postgres-exporter:v0.15.0 (present, no copy needed)
mirror-images: plan: prometheus docker.io/prom/prometheus@sha256:7a34573f0b9c952286b33d537f233cd5b708e12263733aa646e50c33f598f16c -> docker.io/nself/prometheus:v2.53.5 (copy needed)
mirror-images: plan: promtail docker.io/grafana/promtail@sha256:47c3488971ca1e115df050835882399044fbd7c89f3970ae6f8ee8e713774302 -> docker.io/nself/promtail:3.1.2 (copy needed)
mirror-images: source: promtail https://github.com/grafana/loki (AGPL — set as the docker.io/nself/promtail repository description)
mirror-images: plan: python docker.io/library/python@sha256:a0f57064cbdcd6285fa45f51237ab0b35ea8ebaed06a1f5973e89e19dfb86704 -> docker.io/nself/python:3.12-slim (copy needed)
mirror-images: plan: redis docker.io/library/redis@sha256:57e4255cc971b1c8d6f8a6ca283ac01bc3ecdd914273ef6bfaede87aaecd6541 -> docker.io/nself/redis:7-alpine (copy needed)
mirror-images: plan: redis-exporter docker.io/oliver006/redis_exporter@sha256:4d0bf00eeb6b22d60acc65db79a8c324e3c18c959518c67fc65694770d5c8d72 -> docker.io/nself/redis-exporter:v1.61.0 (present, no copy needed)
mirror-images: plan: seaweedfs docker.io/chrislusf/seaweedfs@sha256:f7a49e3f3972ebed5be2ed4befa4a0c68eb7bdddba6e692d42729ceb545134b8 -> docker.io/nself/seaweedfs:4.51 (copy needed)
mirror-images: plan: storage docker.io/nhost/hasura-storage@sha256:77cbc3722d82abd496cc5de42aacc148be55398c4c6910b76b96cbac10864ec2 -> docker.io/nself/storage:0.6.1 (present, no copy needed)
mirror-images: plan: tempo docker.io/grafana/tempo@sha256:1ce31d6d7ffab62189685e8c47881d4a561c5d38bd0dbd66e40ca83cef07923d -> docker.io/nself/tempo:latest (present, no copy needed)
mirror-images: source: tempo https://github.com/grafana/tempo (AGPL — set as the docker.io/nself/tempo repository description)
mirror-images: plan: typesense docker.io/typesense/typesense@sha256:5c12af89130b8ee0be11541321ba8a3a7c7a538d7c6cd95e0409dc2d75ca6455 -> docker.io/nself/typesense:27.1 (present, no copy needed)
mirror-images: plan: valkey docker.io/valkey/valkey@sha256:081c2f5cb575efc901aa80ff9cdbd1ec6a301682fd35e1ebb4b0990a4a4a8507 -> docker.io/nself/valkey:8.1-alpine (copy needed)

PRs opened with the workflow token do not start the normal PR checks. Close and reopen this PR to run them.

[acamarata]

Fixed the three failing tests from the weekly pin bump:

• TestAuthImageByMode: updated auth-v14 digest and version expectation to 0.36.1.
• TestHasuraImageByMode: bumped hasura-v14/hasura expectations to v2.44.1/v2.51.2; legacy cases use the lock's legacy_ref values.
• TestProjectLockPinsSurviveInitDefaults: bumped HASURA_VERSION init default from v2.44.0 to v2.44.1 in setup_env_files.go and exports.go; legacy mode assertion checks for the legacy_ref (v2.51.0).

All three tests now pass with -mod=vendor. Pushed as bba9625.

[acamarata]

Rebased onto origin/main (55+ commits). Conflicts were the dev golden-tree hashes and the HASURA_VERSION default: kept main's blank default (#1017) and dropped the v2.44.1 default from this PR, then re-aligned the hasura tests with the bumped lock (v2.44.1 / v2.51.2) and regenerated the dev golden. go build and go test ./internal/... ./cmd/... ./tools/imagebump pass (11066 tests).