Public bug reported:

Following on from previous similar package update requests @ LP:
#2126660, LP: #2096657, LP: #2084496, LP: #2073161, LP: #2064580 and LP:
#2020762, this bug is a request to update the google-osconfig-agent
package to the upstream version `20251028.00` @
https://github.com/GoogleCloudPlatform/osconfig/releases/tag/20251028.00

This package has an SRU exception @
https://wiki.ubuntu.com/StableReleaseUpdates#google-osconfig-agent which
includes an ageing exception detailed @ https://wiki.ubuntu.com/google-
osconfig-agent-Updates

[Impact]

This package is provided by Google for installation within guests that
run on Google Compute Engine. It is part of a collection of tools and
daemons, that ensure that the Ubuntu images published to GCE run
properly on their platform.

Cloud platforms evolve at a rate that can't be handled in six-month
increments, and they will often develop features that they would like to
be available to customers who don't want to upgrade from earlier Ubuntu
releases. As such, updating this package to more recent upstream
releases is required within all Ubuntu releases, so they continue to
function properly in the GCP environment.

[Test Case]

When a new version of this package is uploaded to -proposed, the
following will happen:

 * an image based on -proposed will be built for GCE and published to the 
ubuntu-os-cloud-image-proposed project
 * the CPC team will run internal validations (CTF) and Google's upstream test 
suite `cloud-image-tests` (CIT)
 * the GCE team will be asked to validate that the new package addresses the 
issues it is expected to address, and that the image passes their own internal 
image validation.

If all the testing indicates that the new package is acceptable,
verification can be considered done.

[Vendored Dependencies]

```
diff --git a/go.mod b/go.mod
index e07fdafb..c5377c18 100644
--- a/go.mod
+++ b/go.mod
@@ -14,25 +14,25 @@ require (
        github.com/go-ole/go-ole v1.3.0
        github.com/golang/mock v1.6.0
        github.com/google/go-cmp v0.7.0
-       github.com/google/osv-scalibr v0.2.0
+       github.com/google/osv-scalibr v0.2.1
        github.com/kr/pretty v0.3.1
        github.com/tarm/serial v0.0.0-20180830185346-98f6abe2eb07
-       github.com/ulikunitz/xz v0.5.12
+       github.com/ulikunitz/xz v0.5.15
        golang.org/x/crypto v0.38.0
-       golang.org/x/oauth2 v0.24.0
-       golang.org/x/sys v0.33.0
+       golang.org/x/oauth2 v0.28.0
+       golang.org/x/sys v0.35.0
        google.golang.org/api v0.214.0
        google.golang.org/genproto v0.0.0-20241118233622-e639e219e697
-       google.golang.org/genproto/googleapis/rpc 
v0.0.0-20241209162323-e6fa225c2576
-       google.golang.org/grpc v1.70.0
-       google.golang.org/protobuf v1.36.5
+       google.golang.org/genproto/googleapis/rpc 
v0.0.0-20250227231956-55c901821b1e
+       google.golang.org/grpc v1.72.0
+       google.golang.org/protobuf v1.36.9
 )
 
 require (
        cel.dev/expr v0.22.0 // indirect
        cloud.google.com/go v0.117.0 // indirect
-       cloud.google.com/go/auth v0.14.0 // indirect
-       cloud.google.com/go/auth/oauth2adapt v0.2.7 // indirect
+       cloud.google.com/go/auth v0.15.0 // indirect
+       cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
        cloud.google.com/go/iam v1.2.2 // indirect
        cloud.google.com/go/logging v1.13.0 // indirect
        cloud.google.com/go/longrunning v0.6.3 // indirect
@@ -46,14 +46,14 @@ require (
        github.com/AdamKorcz/go-118-fuzz-build 
v0.0.0-20230306123547-8075edf89bb0 // indirect
        github.com/BurntSushi/toml v1.3.2 // indirect
        github.com/CycloneDX/cyclonedx-go v0.9.0 // indirect
-       
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp 
v1.25.0 // indirect
+       
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp 
v1.26.0 // indirect
        
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric 
v0.49.0 // indirect
        
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping
 v0.49.0 // indirect
        github.com/Microsoft/go-winio v0.6.2 // indirect
        github.com/Microsoft/hcsshim v0.11.7 // indirect
        github.com/anchore/go-struct-converter 
v0.0.0-20230627203149-c72ef8859ca9 // indirect
        github.com/cespare/xxhash/v2 v2.3.0 // indirect
-       github.com/cncf/xds/go v0.0.0-20240905190251-b4127c9b8d78 // indirect
+       github.com/cncf/xds/go v0.0.0-20250121191232-2f005788dc42 // indirect
        github.com/containerd/cgroups v1.1.0 // indirect
        github.com/containerd/containerd v1.7.27 // indirect
        github.com/containerd/containerd/api v1.8.0 // indirect
@@ -70,30 +70,32 @@ require (
        github.com/distribution/reference v0.6.0 // indirect
        github.com/docker/cli v25.0.3+incompatible // indirect
        github.com/docker/distribution v2.8.3+incompatible // indirect
-       github.com/docker/docker v25.0.6+incompatible // indirect
+       github.com/docker/docker v28.0.4+incompatible // indirect
        github.com/docker/docker-credential-helpers v0.8.1 // indirect
+       github.com/docker/go-connections v0.6.0 // indirect
        github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c // 
indirect
+       github.com/docker/go-units v0.5.0 // indirect
        github.com/edsrzf/mmap-go v1.1.0 // indirect
-       github.com/envoyproxy/go-control-plane/envoy v1.32.3 // indirect
-       github.com/envoyproxy/go-control-plane/ratelimit v0.1.0 // indirect
+       github.com/envoyproxy/go-control-plane/envoy v1.32.4 // indirect
        github.com/envoyproxy/protoc-gen-validate v1.2.1 // indirect
        github.com/erikvarga/go-rpmdb v0.0.0-20240208180226-b97e041ef9af // 
indirect
        github.com/felixge/httpsnoop v1.0.4 // indirect
        github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
        github.com/go-git/go-billy/v5 v5.6.2 // indirect
        github.com/go-git/go-git/v5 v5.14.0 // indirect
-       github.com/go-logr/logr v1.4.2 // indirect
+       github.com/go-jose/go-jose/v4 v4.0.5 // indirect
+       github.com/go-logr/logr v1.4.3 // indirect
        github.com/go-logr/stdr v1.2.2 // indirect
        github.com/gobwas/glob v0.2.3 // indirect
        github.com/gogo/protobuf v1.3.2 // indirect
-       github.com/golang/glog v1.2.4 // indirect
+       github.com/golang/glog v1.2.5 // indirect
        github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // 
indirect
        github.com/golang/protobuf v1.5.4 // indirect
        github.com/google/go-containerregistry v0.19.1 // indirect
-       github.com/google/s2a-go v0.1.8 // indirect
+       github.com/google/s2a-go v0.1.9 // indirect
        github.com/google/uuid v1.6.0 // indirect
-       github.com/googleapis/enterprise-certificate-proxy v0.3.4 // indirect
-       github.com/googleapis/gax-go/v2 v2.14.0 // indirect
+       github.com/googleapis/enterprise-certificate-proxy v0.3.6 // indirect
+       github.com/googleapis/gax-go/v2 v2.14.1 // indirect
        github.com/groob/plist v0.1.1 // indirect
        github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // 
indirect
        github.com/julienschmidt/httprouter v1.3.0 // indirect
@@ -101,6 +103,7 @@ require (
        github.com/kr/text v0.2.0 // indirect
        github.com/mattn/go-sqlite3 v1.14.28 // indirect
        github.com/mitchellh/go-homedir v1.1.0 // indirect
+       github.com/moby/docker-image-spec v1.3.1 // indirect
        github.com/moby/locker v1.0.1 // indirect
        github.com/moby/sys/mountinfo v0.6.2 // indirect
        github.com/moby/sys/sequential v0.5.0 // indirect
@@ -121,32 +124,33 @@ require (
        github.com/sirupsen/logrus v1.9.3 // indirect
        github.com/spdx/gordf v0.0.0-20221230105357-b735bd5aac89 // indirect
        github.com/spdx/tools-golang v0.5.3 // indirect
+       github.com/spiffe/go-spiffe/v2 v2.5.0 // indirect
        github.com/tidwall/gjson v1.18.0 // indirect
        github.com/tidwall/jsonc v0.3.2 // indirect
        github.com/tidwall/match v1.1.1 // indirect
-       github.com/tidwall/pretty v1.2.0 // indirect
+       github.com/tidwall/pretty v1.2.1 // indirect
        github.com/vbatts/tar-split v0.11.5 // indirect
+       github.com/zeebo/errs v1.4.0 // indirect
        go.chromium.org/luci v0.0.0-20201204084249-3e81ee3e83fe // indirect
        go.etcd.io/bbolt v1.3.10 // indirect
        go.opencensus.io v0.24.0 // indirect
        go.opentelemetry.io/auto/sdk v1.1.0 // indirect
-       go.opentelemetry.io/contrib/detectors/gcp v1.32.0 // indirect
-       
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 
v0.57.0 // indirect
-       go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.57.0 
// indirect
-       go.opentelemetry.io/otel v1.35.0 // indirect
-       go.opentelemetry.io/otel/metric v1.35.0 // indirect
-       go.opentelemetry.io/otel/sdk v1.35.0 // indirect
-       go.opentelemetry.io/otel/sdk/metric v1.35.0 // indirect
-       go.opentelemetry.io/otel/trace v1.35.0 // indirect
+       go.opentelemetry.io/contrib/detectors/gcp v1.34.0 // indirect
+       
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 
v0.59.0 // indirect
+       go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 
// indirect
+       go.opentelemetry.io/otel v1.38.0 // indirect
+       go.opentelemetry.io/otel/metric v1.38.0 // indirect
+       go.opentelemetry.io/otel/sdk v1.38.0 // indirect
+       go.opentelemetry.io/otel/sdk/metric v1.38.0 // indirect
+       go.opentelemetry.io/otel/trace v1.38.0 // indirect
        go.uber.org/multierr v1.11.0 // indirect
-       golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
        golang.org/x/mod v0.21.0 // indirect
        golang.org/x/net v0.40.0 // indirect
        golang.org/x/sync v0.14.0 // indirect
        golang.org/x/text v0.25.0 // indirect
-       golang.org/x/time v0.9.0 // indirect
+       golang.org/x/time v0.12.0 // indirect
        golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
-       google.golang.org/genproto/googleapis/api 
v0.0.0-20241202173237-19429a94021a // indirect
+       google.golang.org/genproto/googleapis/api 
v0.0.0-20250218202821-56aae31c358a // indirect
        gopkg.in/ini.v1 v1.67.0 // indirect
        gopkg.in/warnings.v0 v0.1.2 // indirect
        gopkg.in/yaml.v3 v3.0.1 // indirect

```

[Where Problems Could Occur]

There are 31 commits and 29 file changes between `20251028.00` vs.
`20250701.00`; however between the cloud-image-tests suite [0] (which is
run for validation by CPC _and_ Google) and CPC's own internal test
harness (CTF), there is confidence that most if not all "edge cases"
and/or obvious regressions concerns can be dismissed before the new
version lands in `-updates`. Also, `google-guest-agent` is not a seeded
package, and we vendor all golang dependencies.

[Other Information]

This bug is used for tracking of releasing the new upstream version for
all supported series, as per the approved policy mentioned in the
following MRE:

https://wiki.ubuntu.com/google-osconfig-agent-Updates

This package is only used on AMD64 and ARM64 but it is build for all
available architectures.

[0]: https://github.com/GoogleCloudPlatform/cloud-image-tests

** Affects: google-osconfig-agent (Ubuntu)
     Importance: Undecided
     Assignee: Chloé Smith (kajiya)
         Status: New

** Changed in: google-osconfig-agent (Ubuntu)
     Assignee: (unassigned) => Chloé Smith (kajiya)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2139288

Title:
  Please update to 20251028.00

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/google-osconfig-agent/+bug/2139288/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to