Update hashes by ted-xie · Pull Request #2951 · bazelbuild/continuous-integration

ted-xie · 2026-10-21T20:10:04Z

No description provided.

github-actions · 2026-10-21T20:10:37Z

Terraform Plan for `bazel-trusted` 📖

Plan: 0 to add, 8 to change, 0 to destroy.

Show Plan

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # buildkite_pipeline.collect-infra-ci-metrics will be updated in-place
  ~ resource "buildkite_pipeline" "collect-infra-ci-metrics" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTljMDk1MC03ZDQ1LTQ0MjAtOTViZC05N2JjM2Y5MzBmMmI="
        name                                     = "Collect Infra CI-Metrics"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "collect-infra-ci-metrics" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
            priority: 0
            steps:
              - command: |-
                  cd buildkite
                  python3 -m pip install --upgrade pip setuptools wheel
                  python3 -m pip install pyyaml requests google-cloud-kms google-cloud-bigquery
                  python3 collect_infra_metrics.py
                label: ":chart_with_upwards_trend: Collect Infra CI-Metrics"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
          -           image: "gcr.io/bazel-public/ubuntu2204@sha256:2a482c928ff7527594f2e528ac3724486f9cf0fd682394b8aa2f5fed4eb9676f"
          +           image: "gcr.io/bazel-public/ubuntu2204@sha256:07887f6469bb5594b3b86bf6023398356e3791006570695a556086eff13ded74"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.create-linux-vm-image will be updated in-place
  ~ resource "buildkite_pipeline" "create-linux-vm-image" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTkzNzk0NC05MTc4LTQ2MmEtOWMxZi1lNTRiZTIxZDBkYzI="
        name                                     = "Create Linux VM image"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "create-linux-vm-image" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
              BAZEL_PROD_INSTANCE_GROUPS: "bk-docker,bk-docker-arm64,bk-trusted-docker,bk-trusted-docker-arm64"
              BAZEL_TEST_VM_NAMES: "bk-testing-docker,bk-testing-docker-arm64"
              BAZEL_VM_NAMES: "bk-docker,bk-docker-arm64"
            
            priority: 100
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/publish-vm-image.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
          -           image: "gcr.io/bazel-public/ubuntu2204@sha256:2a482c928ff7527594f2e528ac3724486f9cf0fd682394b8aa2f5fed4eb9676f"
          +           image: "gcr.io/bazel-public/ubuntu2204@sha256:07887f6469bb5594b3b86bf6023398356e3791006570695a556086eff13ded74"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.create-windows-vm-image will be updated in-place
  ~ resource "buildkite_pipeline" "create-windows-vm-image" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTkzNzkxNS00YTVlLTQyYzEtOThlNy05NjZkYjZiZjliYjU="
        name                                     = "Create Windows VM image"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "create-windows-vm-image" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
              BAZEL_PROD_INSTANCE_GROUPS: "bk-windows,bk-trusted-windows"
              BAZEL_TEST_VM_NAMES: "bk-testing-windows"
              BAZEL_VM_NAMES: "bk-windows"
            
            priority: 100
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/publish-vm-image.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
          -           image: "gcr.io/bazel-public/ubuntu2204@sha256:2a482c928ff7527594f2e528ac3724486f9cf0fd682394b8aa2f5fed4eb9676f"
          +           image: "gcr.io/bazel-public/ubuntu2204@sha256:07887f6469bb5594b3b86bf6023398356e3791006570695a556086eff13ded74"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.docker-update will be updated in-place
  ~ resource "buildkite_pipeline" "docker-update" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTg4MGQyMS0yNjI4LTRiYWYtYjRjOS01NDhkMDI4NmI0MTg="
        name                                     = "Docker update"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "docker-update" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
            priority: 0
            steps:
              - command: |-
                  bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/docker-update.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
          -           image: "gcr.io/bazel-public/ubuntu2404@sha256:53dd4ae8e1a2b4c070bc15fb3b60e0d30b81ccc85c6c44e18b20de992be8e9a3"
          +           image: "gcr.io/bazel-public/ubuntu2404@sha256:4df19f6dfb4fdb99576105689751d3680dd5103770b3739e6a1cda41e9e8a16d"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.java-tools-release will be updated in-place
  ~ resource "buildkite_pipeline" "java-tools-release" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMThhNDNkMy1jODQ4LTRhNjEtOGE4NS0zYzBkNmVmOWMyZDE="
        name                                     = "java_tools release"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "java-tools-release" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
            priority: 0
            steps:
              - command: |-
          -       bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/refs/heads/master/pipelines/java_tools-release.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
          +       bash -c 'set -euo pipefail; curl -s "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/pipelines/java_tools-release.yml?$(date +%s)" | tee /dev/tty | buildkite-agent pipeline upload --replace'
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
                      image: "gcr.io/bazel-public/ubuntu2404@sha256:53dd4ae8e1a2b4c070bc15fb3b60e0d30b81ccc85c6c44e18b20de992be8e9a3"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.mirror-bazel-external-deps will be updated in-place
  ~ resource "buildkite_pipeline" "mirror-bazel-external-deps" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMWExMTE4Ny1iODk1LTQ3NjYtYTQ3Zi01M2M3N2IyMDQwMWI="
        name                                     = "Mirror Bazel External Deps"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "mirror-bazel-external-deps" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
            priority: 0
            steps:
              - command: |-
                  ./tools/mirror_external_deps.py --upload
                label: ":mirror: Mirror missing artifacts"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
          -           image: "gcr.io/bazel-public/ubuntu2204@sha256:2a482c928ff7527594f2e528ac3724486f9cf0fd682394b8aa2f5fed4eb9676f"
          +           image: "gcr.io/bazel-public/ubuntu2204@sha256:07887f6469bb5594b3b86bf6023398356e3791006570695a556086eff13ded74"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (14 unchanged attributes hidden)
    }

  # buildkite_pipeline.mirror-last-green-commit-for-bazel will be updated in-place
  ~ resource "buildkite_pipeline" "mirror-last-green-commit-for-bazel" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTkyYjMzMS00OTI3LTQwZmItODcyYi05OTdkZjhhOTA5Nzc="
        name                                     = "Mirror last green commit for Bazel"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "mirror-last-green-commit-for-bazel" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
            priority: 0
            steps:
              - command: |-
                  gsutil cp gs://bazel-builds/last_green_commit/github.com/bazelbuild/bazel.git/publish-bazel-binaries gs://bazel-untrusted-builds/last_green_commit/github.com/bazelbuild/bazel.git/bazel-bazel
                label: ":pipeline:"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
          -           image: "gcr.io/bazel-public/ubuntu2204@sha256:2a482c928ff7527594f2e528ac3724486f9cf0fd682394b8aa2f5fed4eb9676f"
          +           image: "gcr.io/bazel-public/ubuntu2204@sha256:07887f6469bb5594b3b86bf6023398356e3791006570695a556086eff13ded74"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

  # buildkite_pipeline.update-git-mirror-tar-ball will be updated in-place
  ~ resource "buildkite_pipeline" "update-git-mirror-tar-ball" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTliYmUyMi05YzMzLTQzOTgtYTFmYy0xODZhMzNjMTk1M2Q="
        name                                     = "Update git mirror tar ball"
      ~ provider_settings                        = {
          ~ filter_condition                              = null -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
            # (22 unchanged attributes hidden)
        }
      ~ slug                                     = "update-git-mirror-tar-ball" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
            
            priority: 0
            steps:
              - command: |-
                  cd ./gitbundle
                  sudo apt-get update && sudo apt-get install -y jq
                  ./gitbundle.sh
                label: "Creating git mirror tar ball"
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
          -           image: "gcr.io/bazel-public/ubuntu2204@sha256:2a482c928ff7527594f2e528ac3724486f9cf0fd682394b8aa2f5fed4eb9676f"
          +           image: "gcr.io/bazel-public/ubuntu2204@sha256:07887f6469bb5594b3b86bf6023398356e3791006570695a556086eff13ded74"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (11 unchanged attributes hidden)
    }

Plan: 0 to add, 8 to change, 0 to destroy.

github-actions · 2026-10-21T20:10:44Z

Terraform Plan for `bazel` 📖

Plan: 0 to add, 1 to change, 0 to destroy.

Show Plan

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # buildkite_pipeline.bcr-bazel-compatibility-test will be updated in-place
  ~ resource "buildkite_pipeline" "bcr-bazel-compatibility-test" {
      + cluster_name                             = (known after apply)
        id                                       = "UGlwZWxpbmUtLS0wMTkyYWY4Yy0xMzIxLTRmMjEtOTBkMi1jODc4ODU4NDFkYTk="
        name                                     = "BCR Bazel Compatibility Test"
      ~ provider_settings                        = {
          ~ build_branches                                = false -> (known after apply)
          ~ build_merge_group_checks_requested            = false -> (known after apply)
          ~ build_pull_request_base_branch_changed        = false -> (known after apply)
          ~ build_pull_request_forks                      = false -> (known after apply)
          ~ build_pull_request_labels_changed             = false -> (known after apply)
          ~ build_pull_request_ready_for_review           = false -> (known after apply)
          ~ build_pull_requests                           = false -> (known after apply)
          ~ build_tags                                    = false -> (known after apply)
          ~ cancel_deleted_branch_builds                  = false -> (known after apply)
          ~ cancel_when_merge_group_destroyed             = false -> (known after apply)
          ~ filter_condition                              = null -> (known after apply)
          ~ filter_enabled                                = false -> (known after apply)
          ~ ignore_default_branch_pull_requests           = false -> (known after apply)
          ~ prefix_pull_request_fork_branch_names         = false -> (known after apply)
          ~ publish_blocked_as_pending                    = false -> (known after apply)
          ~ publish_commit_status                         = false -> (known after apply)
          ~ publish_commit_status_per_step                = false -> (known after apply)
          ~ pull_request_branch_filter_configuration      = null -> (known after apply)
          ~ pull_request_branch_filter_enabled            = false -> (known after apply)
          ~ separate_pull_request_statuses                = false -> (known after apply)
          ~ skip_builds_for_existing_commits              = false -> (known after apply)
          ~ skip_pull_request_builds_for_existing_commits = false -> (known after apply)
          ~ use_merge_group_base_commit_for_git_diff_base = false -> (known after apply)
            # (1 unchanged attribute hidden)
        }
      ~ slug                                     = "bcr-bazel-compatibility-test" -> (known after apply)
      ~ steps                                    = <<-EOT
            ---
            env:
              GIT_HTTP_LOW_SPEED_LIMIT: "102400"
              GIT_HTTP_LOW_SPEED_TIME: "180"
              CI_RESOURCE_PERCENTAGE: "10"
              USE_BAZEL_VERSION: "last_rc"
            
            steps:
              - command: |-
                  curl -sS "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/buildkite/bazelci.py?$(date +%s)" -o bazelci.py
                  curl -sS "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/buildkite/bazel-central-registry/bcr_presubmit.py?$(date +%s)" -o bcr_presubmit.py
                  curl -sS "https://raw.githubusercontent.com/bazelbuild/continuous-integration/master/buildkite/bazel-central-registry/bcr_compatibility.py?$(date +%s)" -o bcr_compatibility.py
                  python3 bcr_compatibility.py
                label: ":pipeline:"
                checkout:
                  skip: false
                agents:
                  - "queue=default"
                plugins:
                  - docker#v3.8.0:
                      always-pull: true
                      environment:
                        - "ANDROID_HOME"
                        - "ANDROID_NDK_HOME"
                        - "BUILDKITE_ARTIFACT_UPLOAD_DESTINATION"
          -           image: "gcr.io/bazel-public/ubuntu2404@sha256:53dd4ae8e1a2b4c070bc15fb3b60e0d30b81ccc85c6c44e18b20de992be8e9a3"
          +           image: "gcr.io/bazel-public/ubuntu2404@sha256:4df19f6dfb4fdb99576105689751d3680dd5103770b3739e6a1cda41e9e8a16d"
                      network: "host"
                      privileged: true
                      propagate-environment: true
                      propagate-uid-gid: true
                      volumes:
                        - "/etc/group:/etc/group:ro"
                        - "/etc/passwd:/etc/passwd:ro"
                        - "/etc/shadow:/etc/shadow:ro"
                        - "/opt/android-ndk-r15c:/opt/android-ndk-r15c:ro"
                        - "/opt/android-ndk-r25b:/opt/android-ndk-r25b:ro"
                        - "/opt/android-sdk-linux:/opt/android-sdk-linux:ro"
                        - "/var/lib/buildkite-agent:/var/lib/buildkite-agent"
                        - "/var/lib/gitmirrors:/var/lib/gitmirrors:ro"
        EOT
        tags                                     = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

ted-xie deployed to bazel-trusted October 21, 2026 20:10 — with GitHub Actions Active

ted-xie deployed to bazel October 21, 2026 20:10 — with GitHub Actions Active

ted-xie added the CI:run label Oct 21, 2026

ted-xie marked this pull request as ready for review October 21, 2026 20:12

ted-xie requested a review from a team as a code owner October 21, 2026 20:12

ted-xie requested review from fweikert and meteorcloudy and removed request for a team October 21, 2026 20:12

meteorcloudy approved these changes Oct 22, 2026

View reviewed changes

meteorcloudy enabled auto-merge (squash) October 22, 2026 14:48

meteorcloudy disabled auto-merge October 22, 2026 14:49

Update hashes

3eb8b7c

meteorcloudy force-pushed the update-docker-2026-10-21-1792613188 branch from eaa0582 to 3eb8b7c Compare October 22, 2026 14:49

meteorcloudy deployed to bazel-trusted October 22, 2026 14:49 — with GitHub Actions Active

meteorcloudy deployed to bazel October 22, 2026 14:49 — with GitHub Actions Active

Navigation Menu

Repository navigation

Update hashes - #2951

Update hashes#2951
ted-xie wants to merge 1 commit into
masterfrom
update-docker-2026-10-21-1792613188

ted-xie commented Oct 21, 2026

Uh oh!

github-actions Bot commented Oct 21, 2026

Uh oh!

github-actions Bot commented Oct 21, 2026

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

ted-xie commented Oct 21, 2026

Uh oh!

github-actions Bot commented Oct 21, 2026

Terraform Plan for bazel-trusted 📖

Uh oh!

github-actions Bot commented Oct 21, 2026

Terraform Plan for bazel 📖

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Terraform Plan for `bazel-trusted` 📖

Terraform Plan for `bazel` 📖