Current docker image ships a broken poetry installation

[languitar]

How are you running Renovate?

Self-hosted

Please select which platform you are using if self-hosting.

No response

If you're self-hosting Renovate, tell us what version of Renovate you run.

v28.20.0

Describe the bug

Recent Docker images contain a version of CacheControl inside the venv containing poetry that renders poetry unusable in some cases. The respective upstream bugs in poetry and CacheControl are python-poetry/poetry#4688 and psf/cachecontrol#263.

To make poetry usable again in all cases, a temporary workaround inside the docker image of renovate would be needed that downgrades CacheControl inside the poetry venv as proposed in the first issue.

Relevant debug logs

No response

Have you created a minimal reproduction repository?

No reproduction repository

[rarkins]

Thanks for the heads-up, although it's not something we can fix here so I will close this issue.

The full image is built here: https://github.com/renovatebot/docker-renovate-full

And that is built using scripts from https://github.com/containerbase/buildpack

As I'm not familiar with CacheControl so not sure where would be best to raise a fix. If you can work it out, can you raise an issue in the correct repo?

[languitar]

Sorry, I didn't know about that repository. Can you transfer this issue to the correct repository. I can try to come up with a fix then.

[rarkins]

I have transferred and reopened it, although as I mentioned the fix might need to be e.g. in https://github.com/containerbase/buildpack/blob/main/src/usr/local/buildpack/tools/poetry.sh which is a different github org so can't be transferred to

[languitar]

I have transferred and reopened it, although as I mentioned the fix might need to be e.g. in https://github.com/containerbase/buildpack/blob/main/src/usr/local/buildpack/tools/poetry.sh which is a different github org so can't be transferred to

I'm not sure how far this should traverse the dependency tree. #367 would solve this at least for the renovate docker image.

[viceice]

this is now fixed by composer update #368, as composer is before poetry, so it invalidates cache.

[viceice]

fixed versions: 28.20.1, 28.20.2, 28.21.0, 28.21.1, 28.21.2, 28.21.3, 28.21.4, 28.21.5, 28.21.6, 28.21.7