ci: confirm the release-age quarantine releases docker-datasource updates #332
Etiketter
Inga etiketter
area/backups
area/ci
area/control-panel
area/identity
area/infra
area/observability
area/payments
area/security
area/storage
area/web
blocked
needs-info
needs-triage
ready-for-implementation
type
bug
type
chore
type
docs
type
epic
type
feature
type
task
wontfix
Ingen milstolpe
Inget projekt
Inga tilldelade
1 deltagare
Notiser
Förfallodatum
Inget förfallodatum satt.
Beroenden
Inga beroenden satta
Referens
bitborg/bitborg-infra#332
Läser in…
Hänvisa till i nytt ärende
Ingen beskrivning angiven.
Ta bort grenen "%!s()"
Borttagning av en gren är permanent. Även om den borttagna grenen kan fortsätta existera en kort tid innan den faktiskt tas bort, kan det INTE ångras i de flesta fall. Vill du fortsätta?
minimumReleaseAgeneeds a release timestamp from the datasource. UnderinternalChecksFilter: "strict"(Renovate's default) an update whose timestamp cannot be determinedis withheld indefinitely, not for the configured window — silently, and reported under
Pending Status Checkson the Dependency Dashboard with no branch pushed and no error logged.Since 2026-07-31,
update node.js to v24.18.1fordocker.io/library/node(
24.18.0-trixie-slim→24.18.1-trixie-slim) has been held in that state in two repos, while thenpm/Volta bump to the same version merged on 2026-07-30 (#251, #55). The expected release from
quarantine is the 2026-08-03 nightly run.
Verify: after the 2026-08-03 00:30 run, check whether the PR was opened. If it was, close this —
the quarantine works and the delay was arithmetic. If node 24.18.1 is still pending, docker-tag
updates are permanently stuck behind the quarantine and need an explicit exemption:
Acceptance: either this issue is closed with evidence of the PR, or the preset carries an
exemption and a docker-tag update lands on the following run.
Answered, and the answer is no: the release-age quarantine does not release docker-datasource
updates. It never releases them at all.
minimumReleaseAgeBehaviourdefaults totimestamp-required, and Renovate's docker datasource oftenreturns no
releaseTimestamp. A check that needs a timestamp can never pass without one, so theupdate is deferred on every run and no branch is ever created. It sits in the Dependency Dashboard's
"Pending Status Checks" section indefinitely.
Measured 2026-08-17 on this repo: seven image updates held that way, including the git server
(16.0.2, 18 days old) and the database. Reproduced at debug on renovate 43.288.0, the version
production runs, with no production access and no apply. Full write-up in #430.
The suspicion in this issue was correct, and it was worth filing. What made it hard to confirm is
that release age looks satisfied from the registry side: Renovate never compares ages when the
timestamp is absent, so the dates prove nothing either way.
Fix: bitborg/bitborg-docs#91, one
packageRulescoped tomatchDatasources: ["docker"]settingminimumReleaseAgeBehaviour: "timestamp-optional". Verified to take all seven from held tobranch-intent. The preset is resolved from
mainat run time, so merging is the whole deployment.Closing this in favour of #430, which carries the root cause, the verification and the follow-ups.