Skip to content

Conversation

@octo-sts
Copy link
Contributor

@octo-sts octo-sts bot commented Nov 10, 2025

Commit: 72863f5f81d3de4a4068b34c188190cc6cb49027

@octo-sts octo-sts bot added automated pr grafana-image-renderer request-version-update request for a newer version of a package P1 This label indicates our scanning found High, Medium or Low CVEs for these packages. labels Nov 10, 2025
@octo-sts
Copy link
Contributor Author

octo-sts bot commented Nov 10, 2025

🩹 Build Failed: Patch Application Failed

patch: can't find file to patch at input line 5
Perhaps you used the wrong -p or --strip option?
Failed to run command "/bin/sh -c 'set -e \n[ -d '/home/build' ] || mkdir -p '/home/build'\ncd '/home/build'\nseries=''\nif [ -z $series ]; then\n\tif [ -n 'bump-axios-CVE-2025-58754.patch\n' ]; then\n\t\tseries=$(mktemp)\n\t\techo 'bump-axios-CVE-2025-58754.patch\n' | awk '{ for(i = 1; i <= NF; i++) { print $i; } }' >$series\n\telse\n\t\techo "ERROR: Neither patches or series was set."\n\t\texit 1\n\tfi\nfi\ngrep -v -E '^(#|$)' $series | (while read patchfile; do\n\tpatch '-p1' --fuzz=2 --verbose <$patchfile\ndone)\n\nexit 0'": Process exited with status 1

Build Details

Category Details
Build System melange
Failure Point patch step in melange build pipeline

Root Cause Analysis 🔍

The patch file 'bump-axios-CVE-2025-58754.patch' cannot be applied because the target file 'package.json' cannot be found at the expected location. This suggests either the patch paths are incorrect (wrong -p strip level), the target files don't exist in the checked-out source, or there's a mismatch between the patch content and the actual file structure of the grafana-image-renderer repository at tag v5.0.8.


Was this comment helpful? Please use 👍 or 👎 reactions on this comment.

@octo-sts octo-sts bot added the ai/skip-comment Stop AI from commenting on PR label Nov 10, 2025
@octo-sts octo-sts bot changed the title grafana-image-renderer/5.0.7 package update grafana-image-renderer/5.0.8 package update Nov 12, 2025
@octo-sts octo-sts bot removed P1 This label indicates our scanning found High, Medium or Low CVEs for these packages. ai/skip-comment Stop AI from commenting on PR labels Nov 12, 2025
@octo-sts octo-sts bot force-pushed the staging-update-bot/grafana-image-renderer.yaml branch from 08ec37c to 5bf2cf7 Compare November 12, 2025 14:55
@octo-sts octo-sts bot added the ai/skip-comment Stop AI from commenting on PR label Nov 12, 2025
@AmberArcadia
Copy link
Member

See #71012 (comment)

@octo-sts octo-sts bot added the bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. label Nov 12, 2025
@AmberArcadia AmberArcadia requested a review from a team November 12, 2025 22:58
Copy link
Member

@aborrero aborrero left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

@aborrero aborrero merged commit 6aa1e17 into main Nov 13, 2025
26 checks passed
@aborrero aborrero deleted the staging-update-bot/grafana-image-renderer.yaml branch November 13, 2025 09:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ai/skip-comment Stop AI from commenting on PR automated pr bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. grafana-image-renderer manual/review-needed request-version-update request for a newer version of a package

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants