Changes:

- fix incorrect buildkit version bump for ubuntu-deps
- fix update-container-runtime fetching nerdctl rc tags

Signed-off-by: Swapnanil-Gupta <[email protected]>

Author: Swapnanil-Gupta

.github/workflows/update-dependencies.yaml

@@ -62,13 +62,6 @@ jobs:
       tag: ${{ steps.fetch-tag.outputs.tag }}
 
     steps:
-      - name: Checkout nerdctl
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-        with:
-          repository: containerd/nerdctl
-          fetch-depth: 0
-          fetch-tags: true
-
       - name: Fetch tag for latest release
         id: fetch-tag
         env:
@@ -78,7 +71,12 @@ jobs:
             echo "tag=$OVERRIDE_TAG" >> $GITHUB_OUTPUT
             echo "Override tag: $OVERRIDE_TAG"
           else
-            latest_tag="$(git tag --sort=-version:refname | head -n 1)"
+            latest_tag="$(\
+              curl -s "https://api.github.com/repos/containerd/nerdctl/releases/latest" | \
+              grep '"tag_name":' | \
+              head -1 | \
+              cut -d'"' -f4 \
+            )"
             echo "tag=$latest_tag" >> $GITHUB_OUTPUT
             echo "Latest tag is ${latest_tag}"
           fi

bin/update-debian-dependencies.sh

@@ -98,6 +98,14 @@ NERDCTL_LATEST=$(get_latest_tag "containerd/nerdctl")
 NERDCTL_COMMIT=$(get_commit_for_tag "containerd/nerdctl" "$NERDCTL_LATEST")
 update_dependency "NERDCTL" "$NERDCTL_LATEST" "$NERDCTL_COMMIT"
 
+# Get nerdctl dockerfile content
+echo "Getting nerdctl dockerfile content..."
+NERDCTL_DOCKERFILE=$(get_nerdctl_dockerfile "$NERDCTL_LATEST")
+
+# Get BuildKit version from nerdctl Dockerfile
+echo "Getting BuildKit version from nerdctl Dockerfile..."
+BUILDKIT_VERSION=$(get_buildkit_version "$NERDCTL_DOCKERFILE")
+
 # Update buildkit with version from nerdctl
 echo "Updating buildkit to version $BUILDKIT_VERSION..."
 BUILDKIT_COMMIT=$(get_commit_for_tag "moby/buildkit" "$BUILDKIT_VERSION")
@@ -109,24 +117,16 @@ SOCI_LATEST=$(get_latest_tag "awslabs/soci-snapshotter")
 SOCI_COMMIT=$(get_commit_for_tag "awslabs/soci-snapshotter" "$SOCI_LATEST")
 update_dependency "SOCI" "$SOCI_LATEST" "$SOCI_COMMIT"
 
-# Get nerdctl dockerfile content
-echo "Getting nerdctl dockerfile content..."
-NERDCTL_DOCKERFILE=$(get_nerdctl_dockerfile "$NERDCTL_LATEST")
-
-# Get BuildKit version from nerdctl Dockerfile
-echo "Getting BuildKit version from nerdctl Dockerfile..."
-BUILDKIT_VERSION=$(get_buildkit_version "$NERDCTL_DOCKERFILE")
-
-# Get Cosign version from nerdctl Dockerfile
-echo "Getting Cosign version from nerdctl Dockerfile..."
-COSIGN_VERSION=$(get_cosign_version "$NERDCTL_DOCKERFILE")
-
 # Update CNI plugins
 echo "Updating CNI plugins..."
 CNI_LATEST=$(get_cni_plugin_version "$NERDCTL_DOCKERFILE")
 CNI_COMMIT=$(get_commit_for_tag "containernetworking/plugins" "$CNI_LATEST")
 update_dependency "CNI" "$CNI_LATEST" "$CNI_COMMIT"
 
+# Get Cosign version from nerdctl Dockerfile
+echo "Getting Cosign version from nerdctl Dockerfile..."
+COSIGN_VERSION=$(get_cosign_version "$NERDCTL_DOCKERFILE")
+
 # Update cosign with version from nerdctl
 echo "Updating cosign to version $COSIGN_VERSION..."
 if [ -n "$COSIGN_VERSION" ]; then