Skip to content

chore(deps): update ghcr.io/settlemint/codestudio-asset-tokenization-kit docker tag to v2.0.0-main.148412#987

Merged
renovate[bot] merged 1 commit intomainfrom
renovate/ghcr.io-settlemint-codestudio-asset-tokenization-kit-2.x
Dec 6, 2025
Merged

chore(deps): update ghcr.io/settlemint/codestudio-asset-tokenization-kit docker tag to v2.0.0-main.148412#987
renovate[bot] merged 1 commit intomainfrom
renovate/ghcr.io-settlemint-codestudio-asset-tokenization-kit-2.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Dec 6, 2025

This PR contains the following updates:

Package Update Change OpenSSF
ghcr.io/settlemint/codestudio-asset-tokenization-kit patch 2.0.0-main.148351 -> 2.0.0-main.148412 OpenSSF Scorecard

Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


Summary by cubic

Updated the asset-tokenization-kit Docker image in docker-compose from 2.0.0-main.148351 to 2.0.0-main.148412 to pull the latest patch release. This keeps the content service up to date.

Written for commit b9cc6eb. Summary will update automatically on new commits.

…kit docker tag to v2.0.0-main.148412

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate Bot added the dependencies Dependency updates label Dec 6, 2025
@renovate renovate Bot enabled auto-merge (squash) December 6, 2025 05:54
@github-actions github-actions Bot added the qa:running QA workflow is currently running label Dec 6, 2025
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

@github-actions github-actions Bot added the status:approved Pull request has been approved label Dec 6, 2025
Comment thread docker-compose.yml
image: ghcr.io/settlemint/codestudio-asset-tokenization-kit:2.0.0-main.148412
container_name: asset-tokenization-kit-content
volumes:
- ./content/docs/asset-tokenization-kit:/dest
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: New container version might change internal paths, causing cp -r to fail silently and produce incomplete documentation.
Severity: MEDIUM | Confidence: Medium

🔍 Detailed Analysis

The asset-tokenization-kit-content container uses hardcoded internal paths (/usecase/kit/dapp/content/docs/ and /usecase/kit/dapp/public/atk/) for copying documentation files. If the new image version (2.0.0-main.148412) changes these paths, the cp -r commands will copy nothing or partial content. The build will continue without error due to error suppression (2>/dev/null || true) on the second copy command, leading to incomplete or corrupted documentation. The repository context explicitly warns that patch versions of this kit can introduce breaking changes leading to silent documentation build failures.

💡 Suggested Fix

Add validation after cp -r commands to ensure files were successfully copied and the destination directory is not empty. Consider using set -e or checking exit codes for cp -r operations.

🤖 Prompt for AI Agent
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: docker-compose.yml#L7

Potential issue: The `asset-tokenization-kit-content` container uses hardcoded internal
paths (`/usecase/kit/dapp/content/docs/` and `/usecase/kit/dapp/public/atk/`) for
copying documentation files. If the new image version (2.0.0-main.148412) changes these
paths, the `cp -r` commands will copy nothing or partial content. The build will
continue without error due to error suppression (`2>/dev/null || true`) on the second
copy command, leading to incomplete or corrupted documentation. The repository context
explicitly warns that patch versions of this kit can introduce breaking changes leading
to silent documentation build failures.

Did we get this right? 👍 / 👎 to inform future reviews.
Reference ID: 5938605

@github-actions github-actions Bot added qa:success QA workflow passed successfully status:ready-for-review Pull request is ready for review status:mergeable Pull request is approved, tests pass, and ready to merge and removed qa:running QA workflow is currently running status:ready-for-review Pull request is ready for review status:approved Pull request has been approved labels Dec 6, 2025
@renovate renovate Bot merged commit 104156b into main Dec 6, 2025
17 checks passed
@renovate renovate Bot deleted the renovate/ghcr.io-settlemint-codestudio-asset-tokenization-kit-2.x branch December 6, 2025 05:58
@github-actions github-actions Bot added status:merged Pull request has been merged and removed status:mergeable Pull request is approved, tests pass, and ready to merge labels Dec 6, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates qa:success QA workflow passed successfully status:merged Pull request has been merged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants