<freeStyleBuild _class='hudson.model.FreeStyleBuild'><action _class='hudson.model.CauseAction'><cause _class='javaposse.jobdsl.plugin.JenkinsJobManagement$JobDslCause'><shortDescription>Started by a Job DSL script</shortDescription></cause></action><action _class='jenkins.metrics.impl.TimeInQueueAction'><blockedDurationMillis>0</blockedDurationMillis><blockedTimeMillis>0</blockedTimeMillis><buildableDurationMillis>123381</buildableDurationMillis><buildableTimeMillis>123381</buildableTimeMillis><buildingDurationMillis>83655</buildingDurationMillis><executingTimeMillis>83655</executingTimeMillis><executorUtilization>1.0</executorUtilization><subTaskCount>0</subTaskCount><waitingDurationMillis>0</waitingDurationMillis><waitingTimeMillis>0</waitingTimeMillis></action><action _class='hudson.plugins.git.util.BuildData'><buildsByBranchName><originmain _class='hudson.plugins.git.util.Build'><buildNumber>17</buildNumber><marked><SHA1>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</SHA1><branch><SHA1>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</SHA1><name>origin/main</name></branch></marked><revision><SHA1>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</SHA1><branch><SHA1>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</SHA1><name>origin/main</name></branch></revision></originmain></buildsByBranchName><lastBuiltRevision><SHA1>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</SHA1><branch><SHA1>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</SHA1><name>origin/main</name></branch></lastBuiltRevision><remoteUrl>https://github.com/PingCAP-QE/ci.git</remoteUrl><scmName></scmName></action><action></action><action></action><action></action><action></action><action></action><action></action><action></action><action _class='org.jenkinsci.plugins.displayurlapi.actions.RunDisplayAction'></action><building>false</building><displayName>#17</displayName><duration>83655</duration><estimatedDuration>92170</estimatedDuration><fullDisplayName>seed #17</fullDisplayName><id>17</id><inProgress>false</inProgress><keepLog>false</keepLog><number>17</number><queueId>27616</queueId><result>SUCCESS</result><timestamp>1775273349769</timestamp><url>https://prow.tidb.net/jenkins/job/seed/17/</url><builtOn>default-f6sdx</builtOn><changeSet _class='hudson.plugins.git.GitChangeSetList'><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>pipelines/tidbcloud/cloud-storage-engine/dedicated/pull_integration_realcluster_test_next_gen/pipeline.groovy</affectedPath><commitId>690d9cf77afbdd0db5d6f6530d68b8664c77f012</commitId><timestamp>1775187165000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>ci(pipelines): update OCI artifact host for cloud-storage-engine (#4454)
</comment><date>2026-04-03 03:32:45 +0000</date><id>690d9cf77afbdd0db5d6f6530d68b8664c77f012</id><msg>ci(pipelines): update OCI artifact host for cloud-storage-engine (#4454)</msg><path><editType>edit</editType><file>pipelines/tidbcloud/cloud-storage-engine/dedicated/pull_integration_realcluster_test_next_gen/pipeline.groovy</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>prow-jobs/pingcap-qe/ci/periodics.yaml</affectedPath><commitId>76953ae3c8d8ae6bad95454cfd8674e2602103d7</commitId><timestamp>1775188995000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>ci(prow): change flaky test reports from weekly to daily (#4455)

Update periodic-reporter-flaky-tests-tidb to run daily at 22:00 UTC
(6:00 UTC+8) instead of weekly on Fridays.
Change report period from 7 days to 1 day. 
Add periodic-reporter-flaky-tests-tidb-v85 to run daily at 23:00 UTC
(7:00 UTC+8).
</comment><date>2026-04-03 04:03:15 +0000</date><id>76953ae3c8d8ae6bad95454cfd8674e2602103d7</id><msg>ci(prow): change flaky test reports from weekly to daily (#4455)</msg><path><editType>edit</editType><file>prow-jobs/pingcap-qe/ci/periodics.yaml</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>jenkins/pipelines/cd/tidb-operator.groovy</affectedPath><commitId>c2f4d0d85cd3057f3304d4b210a4c4bc36f4fa6b</commitId><timestamp>1775189532000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>ci: replace deprecated PingCAP chart domains (#4452)

## Summary
- replace deprecated `charts.pingcap.org` references in the TiDB
Operator release pipeline
- keep the existing old download-domain compatibility rewrite logic
intact

## Validation
- `git diff --check`
- verified no remaining `charts.pingcap.org` matches in the touched file
</comment><date>2026-04-03 04:12:12 +0000</date><id>c2f4d0d85cd3057f3304d4b210a4c4bc36f4fa6b</id><msg>ci: replace deprecated PingCAP chart domains (#4452)</msg><path><editType>edit</editType><file>jenkins/pipelines/cd/tidb-operator.groovy</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>prow-jobs/pingcap/tidb/latest-postsubmits.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-merged_unit_test.yaml</affectedPath><commitId>d35ee40ae5fa459194f299705e22c75aae7bb6f3</commitId><timestamp>1775196066000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>feat(pipeline): migrate tidb postsubmit jobs to gcp (#4456)

migrate tidb postsubmit jobs to gcp
</comment><date>2026-04-03 06:01:06 +0000</date><id>d35ee40ae5fa459194f299705e22c75aae7bb6f3</id><msg>feat(pipeline): migrate tidb postsubmit jobs to gcp (#4456)</msg><path><editType>edit</editType><file>prow-jobs/pingcap/tidb/latest-postsubmits.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-merged_unit_test.yaml</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>tools/list-go-dependencies/go.mod</affectedPath><affectedPath>tools/list-go-dependencies/go.sum</affectedPath><commitId>852aa09b291e517ab415112498be352e280ee6e9</commitId><timestamp>1775198694000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>fix(deps): update module github.com/rs/zerolog to v1.35.0 (#4388)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/rs/zerolog](https://redirect.github.com/rs/zerolog) |
`v1.34.0` → `v1.35.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2frs%2fzerolog/v1.35.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2frs%2fzerolog/v1.34.0/v1.35.0?slim=true)
|

---

&gt; [!WARNING]
&gt; Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/1780) for more information.

---

### Release Notes

&lt;details&gt;
&lt;summary&gt;rs/zerolog (github.com/rs/zerolog)&lt;/summary&gt;

###
[`v1.35.0`](https://redirect.github.com/rs/zerolog/compare/v1.34.0...v1.35.0)

[Compare
Source](https://redirect.github.com/rs/zerolog/compare/v1.34.0...v1.35.0)

&lt;/details&gt;

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] &lt;!-- rebase-check --&gt;If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/PingCAP-QE/ci).

&lt;!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--&gt;

Co-authored-by: renovate[bot] &lt;29139614+renovate[bot]@users.noreply.github.com&gt;
</comment><date>2026-04-03 06:44:54 +0000</date><id>852aa09b291e517ab415112498be352e280ee6e9</id><msg>fix(deps): update module github.com/rs/zerolog to v1.35.0 (#4388)</msg><path><editType>edit</editType><file>tools/list-go-dependencies/go.sum</file></path><path><editType>edit</editType><file>tools/list-go-dependencies/go.mod</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>scripts/ops/nextgen/get-next-gen-exact-image-tags.sh</affectedPath><affectedPath>scripts/ops/nextgen/README.md</affectedPath><commitId>3fbafbeb1b5d1c7f42f462429545658b1cb73b6b</commitId><timestamp>1775198877000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>fix(nextgen): harden exact image tag lookup auth checks (#4448)

## Summary
- add `oras` to the required tool checks in
`scripts/ops/nextgen/get-next-gen-exact-image-tags.sh`
- authenticate against both `us.gcr.io` and `gcr.io` because tiproxy
trunk still resolves from `gcr.io` while the other next-gen artifacts
use `us.gcr.io`
- update the nextgen README so the prerequisites, tiproxy dual-registry
behavior, and troubleshooting guidance match the script

## Why a follow-up PR
`PingCAP-QE/ci#4446` merged before this extra hardening pass was pushed,
so this change is submitted as a separate follow-up PR.

## Validation
- `bash -n scripts/ops/nextgen/get-next-gen-exact-image-tags.sh`
- `PATH="$PWD/../.cache/bin:$PATH" shellcheck -S error
scripts/ops/nextgen/get-next-gen-exact-image-tags.sh`
- `git diff --check`

## Notes
- Live registry execution is still not exercised in this workspace
because `gcloud` is unavailable here.

---------

Co-authored-by: gemini-code-assist[bot] &lt;176961590+gemini-code-assist[bot]@users.noreply.github.com&gt;
</comment><date>2026-04-03 06:47:57 +0000</date><id>3fbafbeb1b5d1c7f42f462429545658b1cb73b6b</id><msg>fix(nextgen): harden exact image tag lookup auth checks (#4448)</msg><path><editType>edit</editType><file>scripts/ops/nextgen/get-next-gen-exact-image-tags.sh</file></path><path><editType>edit</editType><file>scripts/ops/nextgen/README.md</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_common_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_nodejs_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/ghpr_check2.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_ddl_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_mysql_client_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_copr_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_tici_test/pod.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_mysql_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_common_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_nodejs_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_jdbc_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_python_orm_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_e2e_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_br_integration_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_tici_test/pipeline.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_python_orm_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_lightning_integration_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_jdbc_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_lightning_integration_test.yaml</affectedPath><affectedPath>prow-jobs/pingcap/tidb/latest-presubmits.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_sqllogic_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_sqllogic_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_e2e_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_br_integration_test.yaml</affectedPath><commitId>19da92fcb5eaf9cf9decc2acf83fce552e421f0b</commitId><timestamp>1775207133000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>feat(pipeline): migrate tidb presubmit jobs to gcp (#4457)

migrate tidb presubmit jobs to gcp
</comment><date>2026-04-03 09:05:33 +0000</date><id>19da92fcb5eaf9cf9decc2acf83fce552e421f0b</id><msg>feat(pipeline): migrate tidb presubmit jobs to gcp (#4457)</msg><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_nodejs_test.groovy</file></path><path><editType>edit</editType><file>prow-jobs/pingcap/tidb/latest-presubmits.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_mysql_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_jdbc_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_python_orm_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_sqllogic_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_jdbc_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_lightning_integration_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_e2e_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_ddl_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_nodejs_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_br_integration_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_mysql_client_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_tici_test/pod.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_sqllogic_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_copr_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_lightning_integration_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_common_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_python_orm_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_br_integration_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_e2e_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/ghpr_check2.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_common_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_tici_test/pipeline.groovy</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-branch-push-single-platform.yaml</affectedPath><affectedPath>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-tag-create-single-platform.yaml</affectedPath><affectedPath>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-pr.yaml</affectedPath><affectedPath>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-branch-push.yaml</affectedPath><affectedPath>tekton/v1/triggers/bindings/ksy-dev-build-params.yaml</affectedPath><affectedPath>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-pr-single-platform.yaml</affectedPath><affectedPath>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-tag-create.yaml</affectedPath><commitId>aa1dc84b1c9ac07530bd6e4ef5f863717aad3290</commitId><timestamp>1775208906000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>ci(tekton): use dynamic registry for hotfix builds (#4459)

This pull request updates how the container registry is selected for
Tekton pipeline triggers, making the selection dynamic based on the
event type. Instead of hardcoding the registry, the configuration now
determines whether to use the hotfix or dev registry by inspecting the
event header. This improves flexibility and ensures that hotfix builds
are pushed to the correct registry.

**Dynamic registry selection based on event type:**

* Added a `registry` parameter to multiple trigger files (PR, branch
push, and tag creation), which uses an expression to select the hotfix
or dev registry depending on whether the event type starts with
`net.pingcap.tibuild.hotfix.`
(`tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-branch-push.yaml`,
`fake-github-branch-push-single-platform.yaml`, `fake-github-pr.yaml`,
`fake-github-pr-single-platform.yaml`, `fake-github-tag-create.yaml`,
`fake-github-tag-create-single-platform.yaml`)
[[1]](diffhunk://#diff-701e172d7957f7729eb568b89eb3792f67986d0be3d087c888ee3f11ce921b0cR148-R152)
[[2]](diffhunk://#diff-6a91abaebf470476a3ede56259ce3a9aea4c03d6e7a551bfa00b5a38fa9ef712R150-R155)
[[3]](diffhunk://#diff-f69e7eca2ab1ea5e98e43f6fee3bfb5c896d32ba6e6b4b69d81664ee422a8904R148-R153)
[[4]](diffhunk://#diff-9d850ebf70c39ddd5babcf9dc7fc5fe058ab9f61ead3f04e6a5fb103974f6591R150-R155)
[[5]](diffhunk://#diff-e1424e05dfaa1f85fe71d2e0365337c7fcad48767eead843e042e248d0dcf1a0R148-R153)
[[6]](diffhunk://#diff-c613d97eae5f67f2326053c71fca1985b8b8e7a3bfb2c60a0be9aac9407cf838R152-R157)

**Parameterization of build registry:**

* Updated the `ksy-dev-build-params.yaml` binding to use the dynamically
determined `registry` value from the trigger extensions, instead of a
hardcoded dev registry value
(`tekton/v1/triggers/bindings/ksy-dev-build-params.yaml`)
</comment><date>2026-04-03 09:35:06 +0000</date><id>aa1dc84b1c9ac07530bd6e4ef5f863717aad3290</id><msg>ci(tekton): use dynamic registry for hotfix builds (#4459)</msg><path><editType>edit</editType><file>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-tag-create.yaml</file></path><path><editType>edit</editType><file>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-branch-push-single-platform.yaml</file></path><path><editType>edit</editType><file>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-branch-push.yaml</file></path><path><editType>edit</editType><file>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-pr-single-platform.yaml</file></path><path><editType>edit</editType><file>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-pr.yaml</file></path><path><editType>edit</editType><file>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-tag-create-single-platform.yaml</file></path><path><editType>edit</editType><file>tekton/v1/triggers/bindings/ksy-dev-build-params.yaml</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.4/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.3/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.2/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_integration_binlog_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.2/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.4/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.3/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_integration_binlog_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.2/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.2/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_common_test.groovy</affectedPath><affectedPath>pipelines/tikv/copr-test/latest/pull_integration_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.4/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.4/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_integration_binlog_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.3/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_integration_binlog_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.4/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.3/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.2/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.3/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.2/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.3/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.4/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_integration_binlog_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_integration_mysql_test.groovy</affectedPath><commitId>1b271fa111189bad5238beff6fad1570659804ff</commitId><timestamp>1775209443000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>fix(pipelines): stop exposing github token to PR jobs (#4460)

## Summary
- remove global `GITHUB_TOKEN = credentials('github-bot-token')`
injection from `pull_*` pipelines that execute untrusted PR code
- keep non-sensitive `environment` entries such as `OCI_ARTIFACT_HOST`
unchanged
- limit the scope to PR-triggered pipelines; merged pipelines are not
changed in this patch

## Risk
These PR jobs were exposing a GitHub bot token to the full Jenkins
execution environment even though the variable was not consumed later in
the pipeline. A malicious PR could potentially read the token from the
process environment.

## Verification
- `git diff --check`
- verified no `pull_*.groovy` file still contains `GITHUB_TOKEN =
credentials(...)` or `GH_TOKEN = credentials(...)`
- verified no empty `environment {}` blocks remain after the cleanup
</comment><date>2026-04-03 09:44:03 +0000</date><id>1b271fa111189bad5238beff6fad1570659804ff</id><msg>fix(pipelines): stop exposing github token to PR jobs (#4460)</msg><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.2/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.3/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_integration_tidb_tools_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.3/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.3/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.4/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.3/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.2/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_integration_binlog_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.4/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.2/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.3/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.4/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.4/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_integration_binlog_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.4/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_integration_binlog_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.4/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_integration_tidb_tools_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.2/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/tikv/copr-test/latest/pull_integration_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_integration_tidb_tools_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_integration_binlog_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.3/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.2/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.2/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_integration_tidb_tools_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_tidb_tools_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_integration_binlog_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_integration_tidb_tools_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_integration_tidb_tools_test.groovy</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>tekton/v1/tasks/pingcap-git-clone.yaml</affectedPath><commitId>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</commitId><timestamp>1775210404000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>chore(deps): update alpine docker tag to v3.23 (#4458)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| alpine | minor | `3.22` → `3.23` |

---

&gt; [!WARNING]
&gt; Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/1780) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] &lt;!-- rebase-check --&gt;If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/PingCAP-QE/ci).

&lt;!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=--&gt;

Co-authored-by: renovate[bot] &lt;29139614+renovate[bot]@users.noreply.github.com&gt;
</comment><date>2026-04-03 10:00:04 +0000</date><id>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</id><msg>chore(deps): update alpine docker tag to v3.23 (#4458)</msg><path><editType>edit</editType><file>tekton/v1/tasks/pingcap-git-clone.yaml</file></path></item><kind>git</kind></changeSet><culprit><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></culprit></freeStyleBuild>