UNCLASSIFIED - NO CUI

ironbank-github custom manager issue request

Summary

@w_scott_rogers @joek

I've been hunting down a renovate bug/assumption that has been troubling me in some of the afdco repos.

I would like to work up an MR for consideration against the manager if possible, specifically in the update.ts

It appears however that back in Dec 2025 this MR1455 moved the custom manager code into an area I don't have visibility, somewhere in dsop/dccscr.


Details:

The issue I'm experiencing is an assumption made in the ironbank-github-release logic where the currentValue extraction includes the v e.g. v0.0.0

const releasePattern = new RegExp(`(https://github\\.com/${escapedPackageName}/releases/download/)(${currentValue})(/[^\\s]+)`, "g");

The assumption made here is that the semver of the release will be incorporated in the release artifact name, which would be the standard convention, but for some projects like arkime, they chose not to follow this pattern.

Reference this MR diff dsop/afdco/arkime/arkime-5!56 (diffs)

The releases/download path update looks like the following. The path of course is incorrect and the digest lookup will fail and quietly not update in the MR.

- https://github.com/arkime/arkime/releases/download/v5.8.2/arkime-5.8.2-1.el10.x86_64.rpm
+ https://github.com/arkime/arkime/releases/download/v5.8.3/arkime-5.8.2-1.el10.x86_64.rpm
                                                          ^            ^

I have some prototype js code that I applied directly to the container that demonstrates a fix available.

Steps to reproduce

Normal renovate operations

What is the current bug behavior?

Incomplete renovate update MRs

What is the expected correct behavior?

Full corrected change in the manifest with corresponding object digest.

Relevant logs and/or screenshots

renovate logs are not included in the project pipelines. This does show the resulting output dsop/afdco/arkime/arkime-5!56 (diffs) for example

Possible fixes

See summary

Tasks

  • Bug has been identified and corrected within the container

Please read the Iron Bank Documentation for more info