Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migrate away from deprecated heroku/buildpacks:20 CNB builder image #285

Open
edmorley opened this issue Oct 30, 2023 · 6 comments
Open

Comments

@edmorley
Copy link

edmorley commented Oct 30, 2023

Hi 👋

This project uses Heroku's heroku/buildpacks:20 CNB builder images:
https://github.com/search?q=repo%3Atheketchio%2Fketch+%22heroku%2Fbuildpacks%3A20%22&type=code

We have deprecated this builder image as of heroku/cnb-builder-images#429.

Please migrate to heroku/builder:22 or heroku/builder:20, to continue to receive security updates, and to avoid disruption when the build time deprecation warning is upgraded to an error in the future.

More information on the difference between the various builder images can be seen here:
https://github.com/heroku/cnb-builder-images#heroku-cnb-builder-images

I also see there are references to the even older (and EOL/insecure) heroku/buildpacks:18 - these need to be migrated too:
https://github.com/search?q=repo%3Atheketchio%2Fketch+%22heroku%2Fbuildpacks%3A18%22&type=code

@edmorley
Copy link
Author

Gentle nudge that builds using these images will start erroring in the future, plus the underlying images themselves will stop receiving security updates.

@edmorley
Copy link
Author

@koncar @dechegaray ^

@dechegaray
Copy link
Collaborator

Gentle nudge that builds using these images will start erroring in the future, plus the underlying images themselves will stop receiving security updates.

Hi @edmorley, thanks for the issue raised and the nudge. The team is scoping the work now to address this migration in the next few days.

@edmorley
Copy link
Author

edmorley commented Mar 7, 2024

Gentle nudge that builds using these images will start erroring in the future, plus the underlying images themselves will stop receiving security updates.

This will be happening within the next couple of weeks in heroku/cnb-builder-images#474. We'll be adding an env var override for the errors, but I strongly recommend you switch from heroku/buildpacks:20 to heroku/builder:* as soon as possible.

@edmorley
Copy link
Author

Please migrate to heroku/builder:22 or heroku/builder:20, to continue to receive security updates, and to avoid disruption when the build time deprecation warning is upgraded to an error in the future.

The deprecation warnings were upgraded to errors this morning:
heroku/cnb-builder-images#478

@edmorley
Copy link
Author

edmorley commented May 4, 2024

As of yesterday, the legacy heroku/buildpacks:20 and heroku/builder-classic:22 builder images are no longer updated, and so won't receive security updates, fixes or support for new language runtime version releases. Please switch to using the heroku/builder:* images instead:
https://github.com/heroku/cnb-builder-images#available-images

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants