Repository navigation
fix: bump dagger helm/crossplane/hugo to v0.137.3 (random secret names) - #227
Merged
Merged
Conversation
dagger v0.137.3 (stuttgart-things/dagger#417) names the registry docker config secret and the MinIO mc host secret randomly per call instead of after a SHA-256 prefix of the credential. The names show up in --progress plain output and traces, and an unsalted hash lets a guessed credential be confirmed offline. Between v0.136.2 and v0.137.3 these three modules changed only by #417. - helm: flux, helm, kubernetes-microservice - crossplane: crossplane-configuration - hugo: presentations Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
github-actions Bot
pushed a commit
that referenced
this pull request
Oct 7, 2026
## [3.11.1](v3.11.0...v3.11.1) (2026-10-07) ### Bug Fixes * bump dagger helm/crossplane/hugo to v0.137.3 (random secret names) ([#227](#227)) ([bebc3df](bebc3df)), closes [stuttgart-things/dagger#417](stuttgart-things/dagger#417)
|
🎉 This PR is included in version 3.11.1 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Brings stuttgart-things/dagger#417 (released in v0.137.3) into blueprints. This is the follow-up to #223 (credential-leak fix, v0.136.2).
#417 gives the registry docker config secret (helm, crossplane push) and the MinIO
mchost secret (hugo export) a random name per call instead of a SHA-256 prefix of the credential. Secret names show up in--progress plainoutput and in traces. An unsalted hash prefix would let a guessed credential be confirmed offline.dagger/helmv0.136.2 → v0.137.3dagger/crossplanev0.136.2 → v0.137.3dagger/hugov0.136.2 → v0.137.3Between v0.136.2 and v0.137.3, these three dagger modules changed only through #417.
Verified locally:
dagger develop+go vetpass for all 5 modules.🤖 Generated with Claude Code