Skip to content

fix(sbom): migrate Bluefin LTS stream specs to its package and stable tags - #1106

Open
castrojo wants to merge 1 commit into
projectbluefin:v4from
castrojo:fix-sbom-lts-package-tags
Open

fix(sbom): migrate Bluefin LTS stream specs to its package and stable tags#1106
castrojo wants to merge 1 commit into
projectbluefin:v4from
castrojo:fix-sbom-lts-package-tags

Conversation

@castrojo

@castrojo castrojo commented Sep 8, 2026

Copy link
Copy Markdown
Contributor

Summary

Fixes #1077.

Bluefin LTS now publishes from ghcr.io/projectbluefin/bluefin-lts with :stable (not :lts) as the promoted tag — confirmed against the bluefin-lts repo's execute-release.yml, which promotes bluefin-lts:testingbluefin-lts:stable, and against the live GHCR tag list for that package.

STREAM_SPECS in scripts/fetch-github-sbom.js still pointed every bluefin-lts/bluefin-dx-lts/bluefin-gdx-lts stream at the bluefin/bluefin-dx/bluefin-gdx packages with a lts tag prefix, so the SBOM fetcher never found matching GHCR tags and the primary LTS stream reported zero recent releases.

Changes

  • scripts/fetch-github-sbom.js: for every LTS-family stream spec (bluefin-lts, bluefin-lts-hwe, bluefin-lts-hwe-testing, bluefin-lts-hwe-testing-50, bluefin-lts-testing-50, bluefin-dx-lts, bluefin-dx-lts-hwe-testing, bluefin-dx-lts-hwe-testing-50, bluefin-dx-lts-testing-50, bluefin-gdx-lts), set package: "bluefin-lts" and replace the lts tag prefix with stable (preserving hwe/testing-50 suffixes).
  • scripts/fetch-github-driver-versions.js: updated the SBOM_STREAM_PREFIX map so the HWE companion-release lookup keeps matching the SBOM cache keys produced by the corrected streamPrefix values.

Verification

  • node --test scripts/fetch-github-sbom.test.js scripts/fetch-github-driver-versions.test.js scripts/fetch-github-images.test.js — 65 passed.
  • Confirmed via GHCR anonymous tag listing that ghcr.io/projectbluefin/bluefin-lts carries a stable tag (no lts-prefixed dated releases have superseded it).
  • Confirmed via projectbluefin/bluefin-lts .github/workflows/execute-release.yml that testingstable is the promotion path for both bluefin-lts and bluefin-lts-nvidia.

— hive: backend=copilot model=claude-sonnet-5

🐝 Hive Agent: contributor | SHA: bbbde971

…d stable tags

Bluefin LTS now publishes from ghcr.io/projectbluefin/bluefin-lts with
:stable (not :lts) as the promoted tag, per the bluefin-lts
execute-release.yml workflow. STREAM_SPECS still pointed the LTS
family of streams at the bluefin/bluefin-dx/bluefin-gdx packages with
a 'lts' streamPrefix, so the SBOM fetcher never found any matching
GHCR tags and reported zero recent releases for the primary LTS
stream.

Update every bluefin-lts, bluefin-dx-lts, and bluefin-gdx-lts stream
spec to use package: "bluefin-lts" and replace the 'lts' tag prefix
with 'stable' (preserving hwe/testing-50 suffixes). Also update the
SBOM_STREAM_PREFIX map in fetch-github-driver-versions.js so its HWE
companion-release lookup keeps matching the SBOM cache keys produced
by the corrected streamPrefix values.

Fixes projectbluefin#1077

Signed-off-by: castrojo <castrojo@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant