Conversation
Collaborator
umswmayj
commented
May 27, 2026
umswmayj
commented
- feat(nova): probe os_type for KVM servers during server sync
- fix: subtract VM allocations when counting placeable slots
- fix(postgres): rebuild image to resolve CVEs
- fix: kvm-report-capacity to ignore VM allocations
- feat: CR safeguards, throttle CRD creation, adding limit
Two safeguards to prevent a burst of Reservation CRD creates from overwhelming the scheduler on large commitments.
Restore ignoreAllocations: true on filter_has_enough_capacity so that TotalCapacityVMSlots reflects true empty-datacenter capacity. This was removed in bab3199 due to webhook rejection.
The daily CVE scan detected fixable vulnerabilities in the published `cortex-postgres` image. A test rebuild confirms that rebuilding reduces the CVE count (via `apt-get upgrade` picking up security patches). Merging this PR triggers the image rebuild and publish pipeline. This PR was created automatically by the `rebuild-postgres` workflow. Co-authored-by: umswmayj <140147670+umswmayj@users.noreply.github.com>
Adds a daily GitHub Actions workflow that: 1. Scans the published cortex-postgres image for fixable CVEs 2. Builds a fresh image to verify the rebuild reduces CVEs 3. Opens a PR to trigger a rebuild only if confirmed
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/sapcc/go-bits](https://redirect.github.com/sapcc/go-bits) | require | digest | `3088518` → `fcb8a0b` | --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - "after 6pm every weekday,every weekend,before 8am every weekday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/cobaltcore-dev/cortex). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTQuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE5NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [peter-evans/create-pull-request](https://redirect.github.com/peter-evans/create-pull-request) | action | major | `v7` → `v8` | --- ### Release Notes <details> <summary>peter-evans/create-pull-request (peter-evans/create-pull-request)</summary> ### [`v8.1.1`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v8.1.1): Create Pull Request v8.1.1 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v8.1.0...v8.1.1) #### What's Changed - build(deps-dev): bump the npm group with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4305](https://redirect.github.com/peter-evans/create-pull-request/pull/4305) - build(deps): bump minimatch by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4311](https://redirect.github.com/peter-evans/create-pull-request/pull/4311) - build(deps): bump the github-actions group with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4316](https://redirect.github.com/peter-evans/create-pull-request/pull/4316) - build(deps): bump [@​tootallnate/once](https://redirect.github.com/tootallnate/once) and jest-environment-jsdom by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4323](https://redirect.github.com/peter-evans/create-pull-request/pull/4323) - build(deps-dev): bump undici from 6.23.0 to 6.24.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4328](https://redirect.github.com/peter-evans/create-pull-request/pull/4328) - build(deps-dev): bump flatted from 3.3.1 to 3.4.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4334](https://redirect.github.com/peter-evans/create-pull-request/pull/4334) - build(deps): bump picomatch by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4339](https://redirect.github.com/peter-evans/create-pull-request/pull/4339) - build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4344](https://redirect.github.com/peter-evans/create-pull-request/pull/4344) - build(deps-dev): bump the npm group with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4349](https://redirect.github.com/peter-evans/create-pull-request/pull/4349) - fix: retry post-creation API calls on 422 eventual consistency errors by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​4356](https://redirect.github.com/peter-evans/create-pull-request/pull/4356) **Full Changelog**: <peter-evans/create-pull-request@v8.1.0...v8.1.1> ### [`v8.1.0`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v8.1.0): Create Pull Request v8.1.0 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v8...v8.1.0) ##### What's Changed - README.md: bump given GitHub actions to their latest versions by [@​deining](https://redirect.github.com/deining) in [#​4265](https://redirect.github.com/peter-evans/create-pull-request/pull/4265) - build(deps): bump the github-actions group with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4273](https://redirect.github.com/peter-evans/create-pull-request/pull/4273) - build(deps-dev): bump the npm group with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4274](https://redirect.github.com/peter-evans/create-pull-request/pull/4274) - build(deps-dev): bump undici from 6.22.0 to 6.23.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4284](https://redirect.github.com/peter-evans/create-pull-request/pull/4284) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [#​4289](https://redirect.github.com/peter-evans/create-pull-request/pull/4289) - fix: Handle remote prune failures gracefully on self-hosted runners by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​4295](https://redirect.github.com/peter-evans/create-pull-request/pull/4295) - feat: add [@​octokit/plugin-retry](https://redirect.github.com/octokit/plugin-retry) to handle retriable server errors by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​4298](https://redirect.github.com/peter-evans/create-pull-request/pull/4298) ##### New Contributors - [@​deining](https://redirect.github.com/deining) made their first contribution in [#​4265](https://redirect.github.com/peter-evans/create-pull-request/pull/4265) **Full Changelog**: <peter-evans/create-pull-request@v8.0.0...v8.1.0> ### [`v8.0.0`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v8.0.0): Create Pull Request v8.0.0 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v8...v8) ##### What's new in v8 - Requires [Actions Runner v2.327.1](https://redirect.github.com/actions/runner/releases/tag/v2.327.1) or later if you are using a self-hosted runner for Node 24 support. ##### What's Changed - chore: Update checkout action version to v6 by [@​yonas](https://redirect.github.com/yonas) in [#​4258](https://redirect.github.com/peter-evans/create-pull-request/pull/4258) - Update actions/checkout references to [@​v6](https://redirect.github.com/v6) in docs by [@​Copilot](https://redirect.github.com/Copilot) in [#​4259](https://redirect.github.com/peter-evans/create-pull-request/pull/4259) - feat: v8 by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​4260](https://redirect.github.com/peter-evans/create-pull-request/pull/4260) ##### New Contributors - [@​yonas](https://redirect.github.com/yonas) made their first contribution in [#​4258](https://redirect.github.com/peter-evans/create-pull-request/pull/4258) - [@​Copilot](https://redirect.github.com/Copilot) made their first contribution in [#​4259](https://redirect.github.com/peter-evans/create-pull-request/pull/4259) **Full Changelog**: <peter-evans/create-pull-request@v7.0.11...v8.0.0> ### [`v8`](https://redirect.github.com/peter-evans/create-pull-request/compare/v7...v8) [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.11...v8) ### [`v7.0.11`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.11): Create Pull Request v7.0.11 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.10...v7.0.11) ##### What's Changed - fix: restrict remote prune to self-hosted runners by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​4250](https://redirect.github.com/peter-evans/create-pull-request/pull/4250) **Full Changelog**: <peter-evans/create-pull-request@v7.0.10...v7.0.11> ### [`v7.0.10`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.10): Create Pull Request v7.0.10 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.9...v7.0.10) ⚙️ Fixes an issue where updating a pull request failed when targeting a forked repository with the same owner as its parent. ##### What's Changed - build(deps): bump the github-actions group with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4235](https://redirect.github.com/peter-evans/create-pull-request/pull/4235) - build(deps-dev): bump prettier from 3.6.2 to 3.7.3 in the npm group by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​4240](https://redirect.github.com/peter-evans/create-pull-request/pull/4240) - fix: provider list pulls fallback for multi fork same owner by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​4245](https://redirect.github.com/peter-evans/create-pull-request/pull/4245) ##### New Contributors - [@​obnyis](https://redirect.github.com/obnyis) made their first contribution in [#​4064](https://redirect.github.com/peter-evans/create-pull-request/pull/4064) **Full Changelog**: <peter-evans/create-pull-request@v7.0.9...v7.0.10> ### [`v7.0.9`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.9): Create Pull Request v7.0.9 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.8...v7.0.9) ⚙️ Fixes an [incompatibility](https://redirect.github.com/peter-evans/create-pull-request/issues/4228) with the recently released `actions/checkout@v6`. #### What's Changed - \~70 dependency updates by [@​dependabot](https://redirect.github.com/dependabot) - docs: fix workaround description about `ready_for_review` by [@​ybiquitous](https://redirect.github.com/ybiquitous) in [#​3939](https://redirect.github.com/peter-evans/create-pull-request/pull/3939) - Docs: `add-paths` default behavior by [@​joeflack4](https://redirect.github.com/joeflack4) in [#​3928](https://redirect.github.com/peter-evans/create-pull-request/pull/3928) - docs: update to create-github-app-token v2 by [@​Goooler](https://redirect.github.com/Goooler) in [#​4063](https://redirect.github.com/peter-evans/create-pull-request/pull/4063) - Fix compatibility with actions/checkout\@​v6 by [@​ericsciple](https://redirect.github.com/ericsciple) in [#​4230](https://redirect.github.com/peter-evans/create-pull-request/pull/4230) #### New Contributors - [@​joeflack4](https://redirect.github.com/joeflack4) made their first contribution in [#​3928](https://redirect.github.com/peter-evans/create-pull-request/pull/3928) - [@​Goooler](https://redirect.github.com/Goooler) made their first contribution in [#​4063](https://redirect.github.com/peter-evans/create-pull-request/pull/4063) - [@​ericsciple](https://redirect.github.com/ericsciple) made their first contribution in [#​4230](https://redirect.github.com/peter-evans/create-pull-request/pull/4230) **Full Changelog**: <peter-evans/create-pull-request@v7.0.8...v7.0.9> ### [`v7.0.8`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.8): Create Pull Request v7.0.8 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.7...v7.0.8) ##### What's Changed - build(deps-dev): bump ts-jest from 29.2.5 to 29.2.6 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3751](https://redirect.github.com/peter-evans/create-pull-request/pull/3751) - build(deps-dev): bump eslint-import-resolver-typescript from 3.8.1 to 3.8.3 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3752](https://redirect.github.com/peter-evans/create-pull-request/pull/3752) - build(deps): bump [@​octokit/plugin-paginate-rest](https://redirect.github.com/octokit/plugin-paginate-rest) from 11.4.2 to 11.4.3 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3753](https://redirect.github.com/peter-evans/create-pull-request/pull/3753) - build(deps-dev): bump prettier from 3.5.1 to 3.5.2 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3754](https://redirect.github.com/peter-evans/create-pull-request/pull/3754) - fix: suppress output for some git operations by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​3776](https://redirect.github.com/peter-evans/create-pull-request/pull/3776) **Full Changelog**: <peter-evans/create-pull-request@v7.0.7...v7.0.8> ### [`v7.0.7`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.7): Create Pull Request v7.0.7 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.6...v7.0.7) ⚙️ Fixes an issue with commit signing where modifications to the same file in multiple commits squash into the first commit. ##### What's Changed - build(deps): bump [@​octokit/core](https://redirect.github.com/octokit/core) from 6.1.2 to 6.1.3 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3593](https://redirect.github.com/peter-evans/create-pull-request/pull/3593) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.68 to 18.19.70 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3594](https://redirect.github.com/peter-evans/create-pull-request/pull/3594) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [#​3603](https://redirect.github.com/peter-evans/create-pull-request/pull/3603) - build(deps-dev): bump typescript from 5.7.2 to 5.7.3 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3610](https://redirect.github.com/peter-evans/create-pull-request/pull/3610) - build(deps): bump octokit dependencies by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​3618](https://redirect.github.com/peter-evans/create-pull-request/pull/3618) - docs: add workflow tip for showing message via workflow command by [@​ybiquitous](https://redirect.github.com/ybiquitous) in [#​3626](https://redirect.github.com/peter-evans/create-pull-request/pull/3626) - build(deps-dev): bump eslint-plugin-prettier from 5.2.1 to 5.2.3 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3628](https://redirect.github.com/peter-evans/create-pull-request/pull/3628) - build(deps): bump node-fetch-native from 1.6.4 to 1.6.6 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3627](https://redirect.github.com/peter-evans/create-pull-request/pull/3627) - build(deps-dev): bump undici from 6.21.0 to 6.21.1 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3630](https://redirect.github.com/peter-evans/create-pull-request/pull/3630) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.70 to 18.19.71 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3629](https://redirect.github.com/peter-evans/create-pull-request/pull/3629) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [#​3647](https://redirect.github.com/peter-evans/create-pull-request/pull/3647) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.71 to 18.19.74 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3657](https://redirect.github.com/peter-evans/create-pull-request/pull/3657) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.74 to 18.19.75 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3663](https://redirect.github.com/peter-evans/create-pull-request/pull/3663) - build(deps): bump [@​octokit/plugin-rest-endpoint-methods](https://redirect.github.com/octokit/plugin-rest-endpoint-methods) from 13.3.0 to 13.3.1 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3670](https://redirect.github.com/peter-evans/create-pull-request/pull/3670) - build(deps-dev): bump prettier from 3.4.2 to 3.5.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3671](https://redirect.github.com/peter-evans/create-pull-request/pull/3671) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [#​3680](https://redirect.github.com/peter-evans/create-pull-request/pull/3680) - build(deps): bump [@​octokit/request-error](https://redirect.github.com/octokit/request-error) from 6.1.6 to 6.1.7 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3685](https://redirect.github.com/peter-evans/create-pull-request/pull/3685) - build(deps): bump [@​octokit/plugin-paginate-rest](https://redirect.github.com/octokit/plugin-paginate-rest) from 11.4.0 to 11.4.1 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3688](https://redirect.github.com/peter-evans/create-pull-request/pull/3688) - build(deps): bump [@​octokit/endpoint](https://redirect.github.com/octokit/endpoint) from 10.1.2 to 10.1.3 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3700](https://redirect.github.com/peter-evans/create-pull-request/pull/3700) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [#​3691](https://redirect.github.com/peter-evans/create-pull-request/pull/3691) - build(deps-dev): bump prettier from 3.5.0 to 3.5.1 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3709](https://redirect.github.com/peter-evans/create-pull-request/pull/3709) - build(deps-dev): bump eslint-import-resolver-typescript from 3.7.0 to 3.8.1 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3710](https://redirect.github.com/peter-evans/create-pull-request/pull/3710) - build(deps): bump [@​octokit/plugin-paginate-rest](https://redirect.github.com/octokit/plugin-paginate-rest) from 11.4.1 to 11.4.2 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3713](https://redirect.github.com/peter-evans/create-pull-request/pull/3713) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.75 to 18.19.76 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3712](https://redirect.github.com/peter-evans/create-pull-request/pull/3712) - build(deps): bump [@​octokit/core](https://redirect.github.com/octokit/core) from 6.1.3 to 6.1.4 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3711](https://redirect.github.com/peter-evans/create-pull-request/pull/3711) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [#​3736](https://redirect.github.com/peter-evans/create-pull-request/pull/3736) - Use showFileAtRefBase64 to read per-commit file contents by [@​grahamc](https://redirect.github.com/grahamc) in [#​3744](https://redirect.github.com/peter-evans/create-pull-request/pull/3744) ##### New Contributors - [@​ybiquitous](https://redirect.github.com/ybiquitous) made their first contribution in [#​3626](https://redirect.github.com/peter-evans/create-pull-request/pull/3626) - [@​grahamc](https://redirect.github.com/grahamc) made their first contribution in [#​3744](https://redirect.github.com/peter-evans/create-pull-request/pull/3744) **Full Changelog**: <peter-evans/create-pull-request@v7.0.6...v7.0.7> ### [`v7.0.6`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.6): Create Pull Request v7.0.6 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.5...v7.0.6) ⚙️ Fixes an issue with commit signing where unicode characters in file paths were not preserved. ##### What's Changed - build(deps-dev): bump [@​vercel/ncc](https://redirect.github.com/vercel/ncc) from 0.38.1 to 0.38.2 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3365](https://redirect.github.com/peter-evans/create-pull-request/pull/3365) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [#​3370](https://redirect.github.com/peter-evans/create-pull-request/pull/3370) - build(deps): bump [@​octokit/plugin-rest-endpoint-methods](https://redirect.github.com/octokit/plugin-rest-endpoint-methods) from 13.2.4 to 13.2.5 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3375](https://redirect.github.com/peter-evans/create-pull-request/pull/3375) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.50 to 18.19.54 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3376](https://redirect.github.com/peter-evans/create-pull-request/pull/3376) - build(deps): bump [@​octokit/plugin-paginate-rest](https://redirect.github.com/octokit/plugin-paginate-rest) from 11.3.3 to 11.3.5 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3377](https://redirect.github.com/peter-evans/create-pull-request/pull/3377) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [#​3388](https://redirect.github.com/peter-evans/create-pull-request/pull/3388) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.54 to 18.19.55 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3400](https://redirect.github.com/peter-evans/create-pull-request/pull/3400) - build(deps): bump [@​actions/core](https://redirect.github.com/actions/core) from 1.10.1 to 1.11.1 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3401](https://redirect.github.com/peter-evans/create-pull-request/pull/3401) - build(deps): bump [@​octokit/plugin-rest-endpoint-methods](https://redirect.github.com/octokit/plugin-rest-endpoint-methods) from 13.2.5 to 13.2.6 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3403](https://redirect.github.com/peter-evans/create-pull-request/pull/3403) - build(deps-dev): bump eslint-plugin-import from 2.30.0 to 2.31.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3402](https://redirect.github.com/peter-evans/create-pull-request/pull/3402) - build(deps): bump [@​octokit/plugin-throttling](https://redirect.github.com/octokit/plugin-throttling) from 9.3.1 to 9.3.2 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3404](https://redirect.github.com/peter-evans/create-pull-request/pull/3404) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [#​3423](https://redirect.github.com/peter-evans/create-pull-request/pull/3423) - build(deps-dev): bump typescript from 5.6.2 to 5.6.3 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3441](https://redirect.github.com/peter-evans/create-pull-request/pull/3441) - build(deps): bump undici from 6.19.8 to 6.20.1 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3442](https://redirect.github.com/peter-evans/create-pull-request/pull/3442) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [#​3451](https://redirect.github.com/peter-evans/create-pull-request/pull/3451) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.55 to 18.19.58 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3457](https://redirect.github.com/peter-evans/create-pull-request/pull/3457) - build(deps-dev): bump [@​types/jest](https://redirect.github.com/types/jest) from 29.5.13 to 29.5.14 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3462](https://redirect.github.com/peter-evans/create-pull-request/pull/3462) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.58 to 18.19.60 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3463](https://redirect.github.com/peter-evans/create-pull-request/pull/3463) - chore: don't bundle undici by [@​benmccann](https://redirect.github.com/benmccann) in [#​3475](https://redirect.github.com/peter-evans/create-pull-request/pull/3475) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [#​3478](https://redirect.github.com/peter-evans/create-pull-request/pull/3478) - chore: use node-fetch-native support for proxy env vars by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​3483](https://redirect.github.com/peter-evans/create-pull-request/pull/3483) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.60 to 18.19.64 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3488](https://redirect.github.com/peter-evans/create-pull-request/pull/3488) - build(deps-dev): bump undici from 6.20.1 to 6.21.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3499](https://redirect.github.com/peter-evans/create-pull-request/pull/3499) - build(deps-dev): bump [@​vercel/ncc](https://redirect.github.com/vercel/ncc) from 0.38.2 to 0.38.3 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3500](https://redirect.github.com/peter-evans/create-pull-request/pull/3500) - docs: note `push-to-repo` classic PAT `workflow` scope requirement by [@​scop](https://redirect.github.com/scop) in [#​3511](https://redirect.github.com/peter-evans/create-pull-request/pull/3511) - docs: spelling fixes by [@​scop](https://redirect.github.com/scop) in [#​3512](https://redirect.github.com/peter-evans/create-pull-request/pull/3512) - build(deps-dev): bump typescript from 5.6.3 to 5.7.2 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3516](https://redirect.github.com/peter-evans/create-pull-request/pull/3516) - build(deps-dev): bump prettier from 3.3.3 to 3.4.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3517](https://redirect.github.com/peter-evans/create-pull-request/pull/3517) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.64 to 18.19.66 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3518](https://redirect.github.com/peter-evans/create-pull-request/pull/3518) - docs(README): clarify that an existing open PR is managed by [@​caugner](https://redirect.github.com/caugner) in [#​3498](https://redirect.github.com/peter-evans/create-pull-request/pull/3498) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [#​3529](https://redirect.github.com/peter-evans/create-pull-request/pull/3529) - build(deps): bump [@​octokit/plugin-paginate-rest](https://redirect.github.com/octokit/plugin-paginate-rest) from 11.3.5 to 11.3.6 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3542](https://redirect.github.com/peter-evans/create-pull-request/pull/3542) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.66 to 18.19.67 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3543](https://redirect.github.com/peter-evans/create-pull-request/pull/3543) - build(deps-dev): bump prettier from 3.4.0 to 3.4.1 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3544](https://redirect.github.com/peter-evans/create-pull-request/pull/3544) - build(deps-dev): bump eslint-import-resolver-typescript from 3.6.3 to 3.7.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3559](https://redirect.github.com/peter-evans/create-pull-request/pull/3559) - build(deps-dev): bump prettier from 3.4.1 to 3.4.2 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3560](https://redirect.github.com/peter-evans/create-pull-request/pull/3560) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.67 to 18.19.68 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3570](https://redirect.github.com/peter-evans/create-pull-request/pull/3570) - build(deps): bump p-limit from 6.1.0 to 6.2.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3578](https://redirect.github.com/peter-evans/create-pull-request/pull/3578) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [#​3583](https://redirect.github.com/peter-evans/create-pull-request/pull/3583) - fix: preserve unicode in filepaths when commit signing by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​3588](https://redirect.github.com/peter-evans/create-pull-request/pull/3588) ##### New Contributors - [@​benmccann](https://redirect.github.com/benmccann) made their first contribution in [#​3475](https://redirect.github.com/peter-evans/create-pull-request/pull/3475) - [@​scop](https://redirect.github.com/scop) made their first contribution in [#​3511](https://redirect.github.com/peter-evans/create-pull-request/pull/3511) - [@​caugner](https://redirect.github.com/caugner) made their first contribution in [#​3498](https://redirect.github.com/peter-evans/create-pull-request/pull/3498) **Full Changelog**: <peter-evans/create-pull-request@v7.0.5...v7.0.6> ### [`v7.0.5`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.5): Create Pull Request v7.0.5 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.4...v7.0.5) ⚙️ Fixes an issue with commit signing to allow it to support symlinks ##### What's Changed - fix: support symlinks when commit signing by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​3359](https://redirect.github.com/peter-evans/create-pull-request/pull/3359) **Full Changelog**: <peter-evans/create-pull-request@v7.0.4...v7.0.5> ### [`v7.0.4`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.4): Create Pull Request v7.0.4 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.3...v7.0.4) ⚙️ Fixes an issue with commit signing to allow it to support submodules #### What's Changed - docs: correct suggestion for bot setup by [@​henryiii](https://redirect.github.com/henryiii) in [#​3342](https://redirect.github.com/peter-evans/create-pull-request/pull/3342) - build(deps-dev): bump [@​types/jest](https://redirect.github.com/types/jest) from 29.5.12 to 29.5.13 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3343](https://redirect.github.com/peter-evans/create-pull-request/pull/3343) - build(deps-dev): bump eslint from 8.57.0 to 8.57.1 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3344](https://redirect.github.com/peter-evans/create-pull-request/pull/3344) - fix: support submodules when commit signing by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​3354](https://redirect.github.com/peter-evans/create-pull-request/pull/3354) #### New Contributors - [@​henryiii](https://redirect.github.com/henryiii) made their first contribution in [#​3342](https://redirect.github.com/peter-evans/create-pull-request/pull/3342) **Full Changelog**: <peter-evans/create-pull-request@v7.0.3...v7.0.4> ### [`v7.0.3`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.3): Create Pull Request v7.0.3 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.2...v7.0.3) ⚙️ Fixes an issue with commit signing where commit SHAs have variable lengths when abbreviated. ##### What's Changed - fix: disable abbreviated commit shas in diff by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​3337](https://redirect.github.com/peter-evans/create-pull-request/pull/3337) **Full Changelog**: <peter-evans/create-pull-request@v7.0.2...v7.0.3> ### [`v7.0.2`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.2): Create Pull Request v7.0.2 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.1...v7.0.2) ⚙️ Fixes an issue with commit signing when a change was detected as being a rename or copy. ##### What's Changed - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.48 to 18.19.50 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3320](https://redirect.github.com/peter-evans/create-pull-request/pull/3320) - build(deps-dev): bump typescript from 5.5.4 to 5.6.2 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3319](https://redirect.github.com/peter-evans/create-pull-request/pull/3319) - fix: disable diff detection for renames and copies by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​3330](https://redirect.github.com/peter-evans/create-pull-request/pull/3330) **Full Changelog**: <peter-evans/create-pull-request@v7.0.1...v7.0.2> ### [`v7.0.1`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.1): Create Pull Request v7.0.1 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7...v7.0.1) ⚙️ Fixes [an issue](https://redirect.github.com/peter-evans/create-pull-request/issues/3311) affecting one particular use case where the action fails on `diff --stat` with `fatal: ambiguous argument`. ##### What's Changed - build(deps): bump peter-evans/create-pull-request from 6 to 7 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3283](https://redirect.github.com/peter-evans/create-pull-request/pull/3283) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.46 to 18.19.48 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3288](https://redirect.github.com/peter-evans/create-pull-request/pull/3288) - build(deps-dev): bump [@​typescript-eslint/parser](https://redirect.github.com/typescript-eslint/parser) from 7.17.0 to 7.18.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3289](https://redirect.github.com/peter-evans/create-pull-request/pull/3289) - build(deps-dev): bump eslint-plugin-import from 2.29.1 to 2.30.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3290](https://redirect.github.com/peter-evans/create-pull-request/pull/3290) - build(deps-dev): bump [@​typescript-eslint/eslint-plugin](https://redirect.github.com/typescript-eslint/eslint-plugin) from 7.17.0 to 7.18.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​3291](https://redirect.github.com/peter-evans/create-pull-request/pull/3291) - fix: handle ambiguous argument failure on diff stat by [@​peter-evans](https://redirect.github.com/peter-evans) in [#​3312](https://redirect.github.com/peter-evans/create-pull-request/pull/3312) **Full Changelog**: <peter-evans/create-pull-request@v7.0.0...v7.0.1> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - "after 6pm every weekday,every weekend,before 8am every weekday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/cobaltcore-dev/cortex). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTQuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE5NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
probeScheduler always used raw effectiveCapacity for slot counting, making running VMs invisible in usage = totalSlots - placeableSlots. The total probe correctly ignores allocations (empty-datacenter view), but the placeable probe must subtract hv.Status.Allocation so that each host's remaining capacity reflects slots still available after running VMs are accounted for.
* feat(nova): probe os_type for KVM servers during server sync * fix: subtract VM allocations when counting placeable slots * fix(postgres): rebuild image to resolve CVEs * fix: kvm-report-capacity to ignore VM allocations * feat: CR safeguards, throttle CRD creation, adding limit
umswmayj
requested review from
PhilippMatthes,
SoWieMarkus,
auhlig,
juliusclausnitzer and
mblos
as code owners
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
SoWieMarkus
approved these changes
May 27, 2026
juliusclausnitzer
approved these changes
May 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.