dependencies.yaml

dependencies:
  # repo infra
  - name: "repo-infra"
    version: 0.1.1
    refPaths:
    - path: hack/verify-boilerplate.sh
      match: VERSION=v(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?

  # zeitgeist
  - name: "zeitgeist"
    version: 0.3.0
    refPaths:
    - path: hack/verify-dependencies.sh
      match: VERSION=v(?P<major>0|[1-9]\d*)\.(?P<minor>0|[1-9]\d*)\.(?P<patch>0|[1-9]\d*)(?:-(?P<prerelease>(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+(?P<buildmetadata>[0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?

  # CNI plugins
  - name: "CNI plugins"
    version: 0.8.7
    refPaths:
    - path: packages/deb/build.go
      match: currentCNIVersion\s+= "\d+\.\d+.\d+"
    - path: packages/rpm/kubelet.spec
      match: \%global CNI_VERSION \d+\.\d+.\d+
    - path: pkg/kubepkg/kubepkg.go
      match: CurrentCNIVersion\s+= "\d+\.\d+.\d+"

  - name: "CNI plugins: minimum version"
    version: 0.8.6
    refPaths:
    - path: packages/deb/build.go
      match: minimumCNIVersion\s+= "\d+\.\d+.\d+"
    - path: packages/rpm/kubelet.spec
      match: kubernetes-cni >= \d+\.\d+.\d+
    - path: pkg/kubepkg/kubepkg.go
      match: MinimumCNIVersion\s+= "\d+\.\d+.\d+"

  # CRI Tools
  # TODO(deps): Not active yet
  #- name: "crictl"
  #  version: 1.18.0

  # cosign
  - name: "gcr.io/projectsigstore/cosign"
    version: v1.2.1@sha256:68801416e6ae0a48820baa3f071146d18846d8cd26ca8ec3a1e87fca8a735498
    refPaths:
    - path: images/build/go-runner/cloudbuild.yaml
      match: gcr.io/projectsigstore/cosign:v(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?@sha256:[a-f0-9]{64}

  # Docker
  # TODO(deps): Not active yet
  #- name: "docker"
  #  version: 19.03

  # etcd
  - name: "etcd"
    version: 3.4.13
    refPaths:
    - path: images/build/cross/variants.yaml
      match: \d+\.\d+.\d+

  # Golang
  - name: "golang"
    version: 1.17.2
    refPaths:
    - path: Dockerfile-kubepkg
      match: FROM golang:\d+.\d+(alpha|beta|rc)?\.?(\d+)-(bullseye|buster) AS builder
    - path: Dockerfile-kubepkg-rpm
      match: FROM golang:\d+.\d+(alpha|beta|rc)?\.?(\d+)-(bullseye|buster) AS builder
    - path: cmd/vulndash/Makefile
      match: GO_VERSION\ \?=\ \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: cmd/vulndash/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"
    - path: images/build/cross/Makefile
      match: GO_VERSION\ \?=\ \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/build/cross/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"
    - path: images/build/go-runner/Makefile
      match: GO_VERSION\ \?=\ \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/build/go-runner/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"
    - path: images/releng/ci/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"
    - path: packages/deb/Dockerfile
      match: FROM golang:\d+.\d+(alpha|beta|rc)?\.?(\d+)-(bullseye|buster)

  # Golang pre-releases are denoted as `1.y<pre-release stage>.z`
  # Example: go1.17rc1
  #
  # This entry is a stub of the major version to allow dependency checks to
  # pass when building Kubernetes using a pre-release of Golang.
  - name: "golang: 1.<major>"
    version: 1.17
    refPaths:
    - path: images/build/cross/Makefile
      match: GO_MAJOR_VERSION\ \?=\ \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/build/cross/variants.yaml
      match: "GO_MAJOR_VERSION: '\\d+.\\d+'"
    - path: images/build/go-runner/Makefile
      match: GO_MAJOR_VERSION\ \?=\ \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/build/go-runner/variants.yaml
      match: "GO_MAJOR_VERSION: '\\d+.\\d+'"

  - name: "golang: go.mod"
    version: 1.17
    refPaths:
    - path: go.mod
      match: go \d+.\d+
    - path: images/build/go-runner/go.mod
      match: go \d+.\d+
    - path: packages/deb/go.mod
      match: go \d+.\d+

  - name: "golang: after kubernetes/kubernetes update"
    version: 1.17.2
    refPaths:
    - path: images/releng/k8s-ci-builder/Dockerfile
      match: FROM golang:\d+.\d+(alpha|beta|rc)?\.?(\d+)-\${OS_CODENAME} AS builder
    - path: images/releng/k8s-ci-builder/Makefile
      match: GO_VERSION\ \?=\ \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"

  - name: "go-runner"
    version: v2.3.1
    refPaths:
    - path: images/build/go-runner/VERSION

  # Golang images

  # Represents the targeted Kubernetes version at the time the images
  # are to be created e.g., 'v1.100.0'
  #
  # Note: There is no need to increment the patch version of this variable.
  #       The reason for the inclusion of the patch version here is to satisfy
  #       a SemVer regex on the IMAGE_VERSION.
  #
  # Example:
  # - v1.100.0-go1.17-buster.0 satisfies SemVer regex, while:
  # - v1.100-go1.17-buster.0 does not
  - name: "Kubernetes version (stable.0)"
    version: v1.22.0
    refPaths:
    - path: images/build/cross/Makefile
      match: KUBERNETES_VERSION\ \?=\ v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
    - path: images/build/cross/variants.yaml
      match: "KUBERNETES_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "Kubernetes version (next candidate.0)"
    version: v1.23.0
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "KUBERNETES_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "gcr.io/k8s-staging-releng/releng-ci: image revision"
    version: 0
    refPaths:
    - path: images/releng/ci/variants.yaml
      match: REVISION:\ '\d+'

  - name: "k8s.gcr.io/artifact-promoter/vulndash"
    version: v0.4.3-8
    refPaths:
    - path: cmd/vulndash/Makefile
      match: IMAGE_VERSION\ \?=\ v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)-([0-9]+)
    - path: cmd/vulndash/variants.yaml
      match: v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)-([0-9]+)

  - name: "k8s.gcr.io/build-image/go-runner"
    version: v2.3.1-go1.17.2-buster.0
    refPaths:
    - path: images/build/go-runner/variants.yaml
      match: v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)

  - name: "k8s.gcr.io/build-image/go-runner: image revision"
    version: 0
    refPaths:
    - path: images/build/go-runner/Makefile
      match: REVISION \?= \d+
    - path: images/build/go-runner/variants.yaml
      match: REVISION:\ '\d+'

  - name: "k8s.gcr.io/build-image/kube-cross"
    version: v1.23.0-go1.17.2-buster.0
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "IMAGE_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "k8s.gcr.io/build-image/kube-cross: config variant"
    version: go1.17-buster
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "CONFIG: 'go\\d+.\\d+-(bullseye|buster)'"

  - name: "k8s.gcr.io/build-image/kube-cross: image revision"
    version: 0
    refPaths:
    - path: images/build/cross/Makefile
      match: REVISION \?= \d+
    - path: images/build/cross/variants.yaml
      match: REVISION:\ '\d+'

  - name: "k8s.gcr.io/build-image/kube-cross: dependents bullseye"
    version: v1.23.0-go1.17.2-bullseye.0
    refPaths:
    - path: images/k8s-cloud-builder/variants.yaml
      match: "KUBE_CROSS_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "k8s.gcr.io/build-image/kube-cross: dependents buster"
    version: v1.23.0-go1.17.2-buster.0
    refPaths:
    - path: images/k8s-cloud-builder/variants.yaml
      match: "KUBE_CROSS_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  # Golang (next candidate)
  - name: "golang (next candidate)"
    version: 1.17
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"
    - path: images/build/go-runner/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"
    - path: images/releng/ci/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: "GO_VERSION: '\\d+.\\d+(alpha|beta|rc)?\\.?(\\d+)?'"

  # Golang images (next candidate)
  - name: "gcr.io/k8s-staging-releng/releng-ci: image revision (next candidate)"
    version: 0
    refPaths:
    - path: images/releng/ci/variants.yaml
      match: REVISION:\ '\d+'

  - name: "k8s.gcr.io/build-image/go-runner (next candidate)"
    version: v2.3.1-go1.17.2-buster.0
    refPaths:
    - path: images/build/go-runner/variants.yaml
      match: "IMAGE_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "k8s.gcr.io/build-image/go-runner: image revision (next candidate)"
    version: 0
    refPaths:
    - path: images/build/go-runner/variants.yaml
      match: REVISION:\ '\d+'

  - name: "k8s.gcr.io/build-image/kube-cross (next candidate)"
    version: v1.23.0-go1.17.2-buster.0
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "IMAGE_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "k8s.gcr.io/build-image/kube-cross: config variant (next candidate)"
    version: go1.17-buster
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "CONFIG: 'go\\d+.\\d+-(bullseye|buster)'"

  - name: "k8s.gcr.io/build-image/kube-cross: dependents (next candidate)"
    version: v1.23.0-go1.17.2-buster.0
    refPaths:
    - path: images/k8s-cloud-builder/variants.yaml
      match: "KUBE_CROSS_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  # Golang (for previous release branches 1.21/1.22)
  - name: "golang (for previous release branches)"
    version: 1.16.9
    refPaths:
    - path: images/build/cross/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/build/go-runner/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/releng/ci/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?

  - name: "golang: after kubernetes/kubernetes update (for previous release branches 1.21/1.22)"
    version: 1.16.9
    refPaths:
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?

  # Golang (for previous release branches 1.19/1.20)
  - name: "golang (for previous release branches 1.19/1.20)"
    version: 1.15.15
    refPaths:
    - path: images/build/cross/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?
    - path: images/releng/ci/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?

  - name: "golang: after kubernetes/kubernetes update (for previous release branches 1.19/1.20)"
    version: 1.15.15
    refPaths:
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: \d+.\d+(alpha|beta|rc)?\.?(\d+)?

  # Golang images (for previous release branches)
  - name: "gcr.io/k8s-staging-releng/releng-ci: image revision (for previous release branches)"
    version: 0
    refPaths:
    - path: images/releng/ci/variants.yaml
      match: REVISION:\ '\d+'

  - name: "k8s.gcr.io/build-image/go-runner (for previous release branches 1.21/1.22)"
    version: v2.3.1-go1.16.9-buster.0
    refPaths:
    - path: images/build/go-runner/variants.yaml
      match: v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)

  - name: "k8s.gcr.io/build-image/go-runner (for previous release branches 1.19/1.20)"
    version: v2.3.1-go1.15.15-buster.0
    refPaths:

  - name: "k8s.gcr.io/build-image/go-runner: image revision (for previous release branches)"
    version: 0
    refPaths:
    - path: images/build/go-runner/variants.yaml
      match: REVISION:\ '\d+'

  - name: "k8s.gcr.io/build-image/kube-cross (for previous release branches 1.21/1.22)"
    version: v1.22.0-go1.16.9-buster.0
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "IMAGE_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "k8s.gcr.io/build-image/kube-cross: config variant (for previous release branches 1.21/1.22)"
    version: go1.16-buster
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "CONFIG: 'go\\d+.\\d+-(bullseye|buster)'"

  - name: "k8s.gcr.io/build-image/kube-cross (for previous release branches 1.19/1.20)"
    version: v1.20.0-go1.15.15-buster.0
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "IMAGE_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "k8s.gcr.io/build-image/kube-cross: config variant (for previous release branches 1.19/1.20)"
    version: go1.15-buster
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "CONFIG: 'go\\d+.\\d+-(bullseye|buster)'"

  - name: "k8s.gcr.io/build-image/kube-cross: dependents (for previous release branches 1.19/1.20)"
    version: v1.15.15-legacy-1
    refPaths:
    - path: images/k8s-cloud-builder/variants.yaml
      match: "KUBE_CROSS_VERSION: 'v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)-\\d+'"

  # golangci-lint
  - name: "golangci-lint"
    version: 1.42.0
    refPaths:
    - path: hack/verify-golangci-lint.sh
      match: VERSION=v(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?

  # Base images
  - name: "Debian: codename (default)"
    version: buster
    refPaths:
    # Must match distroless Debian version as well
    - path: cmd/vulndash/Makefile
      match: OS_CODENAME\ \?=\ (bullseye|buster)
    - path: cmd/vulndash/variants.yaml
      match: "OS_CODENAME: '(bullseye|buster)'"
    - path: images/build/cross/Makefile
      match: OS_CODENAME\ \?=\ (bullseye|buster)
    - path: images/build/cross/variants.yaml
      match: "OS_CODENAME: '(bullseye|buster)'"
    - path: images/build/debian-base/Makefile
      match: CONFIG\ \?=\ (bullseye|buster)
    - path: images/build/debian-base/variants.yaml
      match: "CONFIG: '(bullseye|buster)'"
    - path: images/build/debian-iptables/Makefile
      match: CONFIG\ \?=\ (bullseye|buster)
    - path: images/build/debian-iptables/variants.yaml
      match: "CONFIG: '(bullseye|buster)'"
    # Must match distroless Debian version as well
    - path: images/build/go-runner/Makefile
      match: OS_CODENAME\ \?=\ (bullseye|buster)
    - path: images/build/go-runner/variants.yaml
      match: "OS_CODENAME: '(bullseye|buster)'"
    - path: images/build/setcap/Makefile
      match: CONFIG\ \?=\ (bullseye|buster)
    - path: images/build/setcap/variants.yaml
      match: "CONFIG: '(bullseye|buster)'"
    - path: images/releng/ci/variants.yaml
      match: "OS_CODENAME: '(bullseye|buster)'"
    - path: images/releng/k8s-ci-builder/Makefile
      match: OS_CODENAME\ \?=\ (bullseye|buster)
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: "OS_CODENAME: '(bullseye|buster)'"
    - path: packages/deb/Dockerfile
      match: FROM golang:\d+.\d+(alpha|beta|rc)?\.?(\d+)-(bullseye|buster)

  - name: "Debian: codename (next candidate)"
    version: bullseye
    refPaths:
    - path: images/build/cross/variants.yaml
      match: "OS_CODENAME: '(bullseye|buster)'"
    - path: images/build/debian-base/variants.yaml
      match: "CONFIG: '(bullseye|buster)'"
    - path: images/build/go-runner/variants.yaml
      match: "OS_CODENAME: '(bullseye|buster)'"
    - path: images/releng/ci/variants.yaml
      match: "OS_CODENAME: '(bullseye|buster)'"
    - path: images/releng/k8s-ci-builder/variants.yaml
      match: "OS_CODENAME: '(bullseye|buster)'"

  - name: "k8s.gcr.io/build-image/debian-base"
    version: buster-v1.9.0
    refPaths:
    - path: images/build/debian-base/Makefile
      match: IMAGE_VERSION\ \?=\ (bullseye|buster)-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
    - path: images/build/debian-base/variants.yaml
      match: "IMAGE_VERSION: '(bullseye|buster)-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "k8s.gcr.io/build-image/debian-base: dependents"
    version: buster-v1.9.0
    refPaths:
    - path: images/build/debian-iptables/Makefile
      match: DEBIAN_BASE_VERSION\ \?=\ (bullseye|buster)-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
    - path: images/build/debian-iptables/variants.yaml
      match: "DEBIAN_BASE_VERSION: '(bullseye|buster)-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"
    - path: images/build/setcap/Makefile
      match: DEBIAN_BASE_VERSION\ \?=\ (bullseye|buster)-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
    - path: images/build/setcap/variants.yaml
      match: "DEBIAN_BASE_VERSION: '(bullseye|buster)-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "k8s.gcr.io/build-image/debian-iptables"
    version: buster-v1.6.7
    refPaths:
    - path: images/build/debian-iptables/Makefile
      match: IMAGE_VERSION\ \?=\ (bullseye|buster)-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
    - path: images/build/debian-iptables/variants.yaml
      match: "IMAGE_VERSION: '(bullseye|buster)-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "k8s.gcr.io/build-image/setcap"
    version: buster-v2.0.4
    refPaths:
    - path: images/build/setcap/Makefile
      match: IMAGE_VERSION\ \?=\ (bullseye|buster)-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
    - path: images/build/setcap/variants.yaml
      match: "IMAGE_VERSION: '(bullseye|buster)-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  # Base images (next candidate)
  - name: "k8s.gcr.io/build-image/debian-base (next candidate)"
    version: bullseye-v1.0.0
    refPaths:
    - path: images/build/debian-base/variants.yaml
      match: "IMAGE_VERSION: '(bullseye|buster)-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "k8s.gcr.io/build-image/debian-base: dependents (next candidate)"
    version: bullseye-v1.0.0
    refPaths:
    - path: images/build/debian-iptables/variants.yaml
      match: "DEBIAN_BASE_VERSION: '(bullseye|buster)-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"
    - path: images/build/setcap/variants.yaml
      match: "DEBIAN_BASE_VERSION: '(bullseye|buster)-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "k8s.gcr.io/build-image/debian-iptables (next candidate)"
    version: bullseye-v1.0.0
    refPaths:
    - path: images/build/debian-iptables/variants.yaml
      match: "IMAGE_VERSION: '(bullseye|buster)-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

  - name: "k8s.gcr.io/build-image/setcap (next candidate)"
    version: bullseye-v1.0.0
    refPaths:
    - path: images/build/setcap/variants.yaml
      match: "IMAGE_VERSION: '(bullseye|buster)-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"

# Build environments
  - name: "gcr.io/k8s-staging-test-infra/gcb-docker-gcloud"
    version: v20210917-12df099d55
    refPaths:
    - path: cmd/vulndash/cloudbuild.yaml
      match: "name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v[0-9]{8}-[a-z0-9]{10}'"
    - path: images/build/cross/cloudbuild.yaml
      match: "name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v[0-9]{8}-[a-z0-9]{10}'"
    - path: images/build/debian-base/cloudbuild.yaml
      match: "name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v[0-9]{8}-[a-z0-9]{10}'"
    - path: images/build/debian-iptables/cloudbuild.yaml
      match: "name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v[0-9]{8}-[a-z0-9]{10}'"
    - path: images/build/go-runner/cloudbuild.yaml
      match: "name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v[0-9]{8}-[a-z0-9]{10}'"
    - path: images/build/setcap/cloudbuild.yaml
      match: "name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v[0-9]{8}-[a-z0-9]{10}'"
    - path: images/releng/k8s-ci-builder/cloudbuild.yaml
      match: "name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v[0-9]{8}-[a-z0-9]{10}'"