<freeStyleBuild _class='hudson.model.FreeStyleBuild'><action _class='hudson.model.CauseAction'><cause _class='javaposse.jobdsl.plugin.JenkinsJobManagement$JobDslCause'><shortDescription>Started by a Job DSL script</shortDescription></cause></action><action _class='jenkins.metrics.impl.TimeInQueueAction'><blockedDurationMillis>0</blockedDurationMillis><blockedTimeMillis>0</blockedTimeMillis><buildableDurationMillis>123381</buildableDurationMillis><buildableTimeMillis>123381</buildableTimeMillis><buildingDurationMillis>83655</buildingDurationMillis><executingTimeMillis>83655</executingTimeMillis><executorUtilization>1.0</executorUtilization><queuingDurationMillis>289573</queuingDurationMillis><queuingTimeMillis>289573</queuingTimeMillis><subTaskCount>0</subTaskCount><totalDurationMillis>373228</totalDurationMillis><waitingDurationMillis>0</waitingDurationMillis><waitingTimeMillis>0</waitingTimeMillis></action><action _class='hudson.plugins.git.util.BuildData'><buildsByBranchName><originmain _class='hudson.plugins.git.util.Build'><buildNumber>17</buildNumber><marked><SHA1>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</SHA1><branch><SHA1>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</SHA1><name>origin/main</name></branch></marked><revision><SHA1>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</SHA1><branch><SHA1>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</SHA1><name>origin/main</name></branch></revision></originmain></buildsByBranchName><lastBuiltRevision><SHA1>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</SHA1><branch><SHA1>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</SHA1><name>origin/main</name></branch></lastBuiltRevision><remoteUrl>https://github.com/PingCAP-QE/ci.git</remoteUrl><scmName></scmName></action><action></action><action></action><action></action><action></action><action></action><action></action><action></action><action _class='org.jenkinsci.plugins.displayurlapi.actions.RunDisplayAction'><artifactsUrl>https://prow.tidb.net/jenkins/job/seed/17/artifact</artifactsUrl><changesUrl>https://prow.tidb.net/jenkins/job/seed/changes</changesUrl><displayUrl>https://prow.tidb.net/jenkins/job/seed/17/</displayUrl><testsUrl>https://prow.tidb.net/jenkins/job/seed/17/testReport</testsUrl></action><building>false</building><displayName>#17</displayName><duration>83655</duration><estimatedDuration>92170</estimatedDuration><fullDisplayName>seed #17</fullDisplayName><id>17</id><inProgress>false</inProgress><keepLog>false</keepLog><number>17</number><queueId>27616</queueId><result>SUCCESS</result><timestamp>1775273349769</timestamp><url>https://prow.tidb.net/jenkins/job/seed/17/</url><builtOn>default-f6sdx</builtOn><changeSet _class='hudson.plugins.git.GitChangeSetList'><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>pipelines/tidbcloud/cloud-storage-engine/dedicated/pull_integration_realcluster_test_next_gen/pipeline.groovy</affectedPath><commitId>690d9cf77afbdd0db5d6f6530d68b8664c77f012</commitId><timestamp>1775187165000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>ci(pipelines): update OCI artifact host for cloud-storage-engine (#4454)
</comment><date>2026-04-03 03:32:45 +0000</date><id>690d9cf77afbdd0db5d6f6530d68b8664c77f012</id><msg>ci(pipelines): update OCI artifact host for cloud-storage-engine (#4454)</msg><path><editType>edit</editType><file>pipelines/tidbcloud/cloud-storage-engine/dedicated/pull_integration_realcluster_test_next_gen/pipeline.groovy</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>prow-jobs/pingcap-qe/ci/periodics.yaml</affectedPath><commitId>76953ae3c8d8ae6bad95454cfd8674e2602103d7</commitId><timestamp>1775188995000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>ci(prow): change flaky test reports from weekly to daily (#4455)

Update periodic-reporter-flaky-tests-tidb to run daily at 22:00 UTC
(6:00 UTC+8) instead of weekly on Fridays.
Change report period from 7 days to 1 day. 
Add periodic-reporter-flaky-tests-tidb-v85 to run daily at 23:00 UTC
(7:00 UTC+8).
</comment><date>2026-04-03 04:03:15 +0000</date><id>76953ae3c8d8ae6bad95454cfd8674e2602103d7</id><msg>ci(prow): change flaky test reports from weekly to daily (#4455)</msg><path><editType>edit</editType><file>prow-jobs/pingcap-qe/ci/periodics.yaml</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>jenkins/pipelines/cd/tidb-operator.groovy</affectedPath><commitId>c2f4d0d85cd3057f3304d4b210a4c4bc36f4fa6b</commitId><timestamp>1775189532000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>ci: replace deprecated PingCAP chart domains (#4452)

## Summary
- replace deprecated `charts.pingcap.org` references in the TiDB
Operator release pipeline
- keep the existing old download-domain compatibility rewrite logic
intact

## Validation
- `git diff --check`
- verified no remaining `charts.pingcap.org` matches in the touched file
</comment><date>2026-04-03 04:12:12 +0000</date><id>c2f4d0d85cd3057f3304d4b210a4c4bc36f4fa6b</id><msg>ci: replace deprecated PingCAP chart domains (#4452)</msg><path><editType>edit</editType><file>jenkins/pipelines/cd/tidb-operator.groovy</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>pipelines/pingcap/tidb/latest/pod-merged_unit_test.yaml</affectedPath><affectedPath>prow-jobs/pingcap/tidb/latest-postsubmits.yaml</affectedPath><commitId>d35ee40ae5fa459194f299705e22c75aae7bb6f3</commitId><timestamp>1775196066000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>feat(pipeline): migrate tidb postsubmit jobs to gcp (#4456)

migrate tidb postsubmit jobs to gcp
</comment><date>2026-04-03 06:01:06 +0000</date><id>d35ee40ae5fa459194f299705e22c75aae7bb6f3</id><msg>feat(pipeline): migrate tidb postsubmit jobs to gcp (#4456)</msg><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-merged_unit_test.yaml</file></path><path><editType>edit</editType><file>prow-jobs/pingcap/tidb/latest-postsubmits.yaml</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>tools/list-go-dependencies/go.mod</affectedPath><affectedPath>tools/list-go-dependencies/go.sum</affectedPath><commitId>852aa09b291e517ab415112498be352e280ee6e9</commitId><timestamp>1775198694000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>fix(deps): update module github.com/rs/zerolog to v1.35.0 (#4388)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/rs/zerolog](https://redirect.github.com/rs/zerolog) |
`v1.34.0` → `v1.35.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2frs%2fzerolog/v1.35.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2frs%2fzerolog/v1.34.0/v1.35.0?slim=true)
|

---

&gt; [!WARNING]
&gt; Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/1780) for more information.

---

### Release Notes

&lt;details&gt;
&lt;summary&gt;rs/zerolog (github.com/rs/zerolog)&lt;/summary&gt;

###
[`v1.35.0`](https://redirect.github.com/rs/zerolog/compare/v1.34.0...v1.35.0)

[Compare
Source](https://redirect.github.com/rs/zerolog/compare/v1.34.0...v1.35.0)

&lt;/details&gt;

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] &lt;!-- rebase-check --&gt;If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/PingCAP-QE/ci).

&lt;!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--&gt;

Co-authored-by: renovate[bot] &lt;29139614+renovate[bot]@users.noreply.github.com&gt;
</comment><date>2026-04-03 06:44:54 +0000</date><id>852aa09b291e517ab415112498be352e280ee6e9</id><msg>fix(deps): update module github.com/rs/zerolog to v1.35.0 (#4388)</msg><path><editType>edit</editType><file>tools/list-go-dependencies/go.sum</file></path><path><editType>edit</editType><file>tools/list-go-dependencies/go.mod</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>scripts/ops/nextgen/README.md</affectedPath><affectedPath>scripts/ops/nextgen/get-next-gen-exact-image-tags.sh</affectedPath><commitId>3fbafbeb1b5d1c7f42f462429545658b1cb73b6b</commitId><timestamp>1775198877000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>fix(nextgen): harden exact image tag lookup auth checks (#4448)

## Summary
- add `oras` to the required tool checks in
`scripts/ops/nextgen/get-next-gen-exact-image-tags.sh`
- authenticate against both `us.gcr.io` and `gcr.io` because tiproxy
trunk still resolves from `gcr.io` while the other next-gen artifacts
use `us.gcr.io`
- update the nextgen README so the prerequisites, tiproxy dual-registry
behavior, and troubleshooting guidance match the script

## Why a follow-up PR
`PingCAP-QE/ci#4446` merged before this extra hardening pass was pushed,
so this change is submitted as a separate follow-up PR.

## Validation
- `bash -n scripts/ops/nextgen/get-next-gen-exact-image-tags.sh`
- `PATH="$PWD/../.cache/bin:$PATH" shellcheck -S error
scripts/ops/nextgen/get-next-gen-exact-image-tags.sh`
- `git diff --check`

## Notes
- Live registry execution is still not exercised in this workspace
because `gcloud` is unavailable here.

---------

Co-authored-by: gemini-code-assist[bot] &lt;176961590+gemini-code-assist[bot]@users.noreply.github.com&gt;
</comment><date>2026-04-03 06:47:57 +0000</date><id>3fbafbeb1b5d1c7f42f462429545658b1cb73b6b</id><msg>fix(nextgen): harden exact image tag lookup auth checks (#4448)</msg><path><editType>edit</editType><file>scripts/ops/nextgen/README.md</file></path><path><editType>edit</editType><file>scripts/ops/nextgen/get-next-gen-exact-image-tags.sh</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_common_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_nodejs_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/ghpr_check2.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_ddl_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_mysql_client_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_copr_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_tici_test/pod.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_mysql_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_common_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_nodejs_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_jdbc_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_python_orm_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_e2e_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_br_integration_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_tici_test/pipeline.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_python_orm_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_lightning_integration_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_integration_jdbc_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_lightning_integration_test.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_sqllogic_test.yaml</affectedPath><affectedPath>prow-jobs/pingcap/tidb/latest-presubmits.yaml</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_e2e_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_sqllogic_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pod-pull_br_integration_test.yaml</affectedPath><commitId>19da92fcb5eaf9cf9decc2acf83fce552e421f0b</commitId><timestamp>1775207133000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>feat(pipeline): migrate tidb presubmit jobs to gcp (#4457)

migrate tidb presubmit jobs to gcp
</comment><date>2026-04-03 09:05:33 +0000</date><id>19da92fcb5eaf9cf9decc2acf83fce552e421f0b</id><msg>feat(pipeline): migrate tidb presubmit jobs to gcp (#4457)</msg><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_e2e_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_nodejs_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_jdbc_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_e2e_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_nodejs_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_lightning_integration_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_tici_test/pod.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_mysql_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_common_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_br_integration_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_python_orm_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_lightning_integration_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_tici_test/pipeline.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_python_orm_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_br_integration_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/ghpr_check2.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_copr_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_sqllogic_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_integration_ddl_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_mysql_client_test.yaml</file></path><path><editType>edit</editType><file>prow-jobs/pingcap/tidb/latest-presubmits.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pod-pull_common_test.yaml</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_jdbc_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_sqllogic_test.groovy</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-branch-push-single-platform.yaml</affectedPath><affectedPath>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-tag-create-single-platform.yaml</affectedPath><affectedPath>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-pr.yaml</affectedPath><affectedPath>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-branch-push.yaml</affectedPath><affectedPath>tekton/v1/triggers/bindings/ksy-dev-build-params.yaml</affectedPath><affectedPath>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-pr-single-platform.yaml</affectedPath><affectedPath>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-tag-create.yaml</affectedPath><commitId>aa1dc84b1c9ac07530bd6e4ef5f863717aad3290</commitId><timestamp>1775208906000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>ci(tekton): use dynamic registry for hotfix builds (#4459)

This pull request updates how the container registry is selected for
Tekton pipeline triggers, making the selection dynamic based on the
event type. Instead of hardcoding the registry, the configuration now
determines whether to use the hotfix or dev registry by inspecting the
event header. This improves flexibility and ensures that hotfix builds
are pushed to the correct registry.

**Dynamic registry selection based on event type:**

* Added a `registry` parameter to multiple trigger files (PR, branch
push, and tag creation), which uses an expression to select the hotfix
or dev registry depending on whether the event type starts with
`net.pingcap.tibuild.hotfix.`
(`tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-branch-push.yaml`,
`fake-github-branch-push-single-platform.yaml`, `fake-github-pr.yaml`,
`fake-github-pr-single-platform.yaml`, `fake-github-tag-create.yaml`,
`fake-github-tag-create-single-platform.yaml`)
[[1]](diffhunk://#diff-701e172d7957f7729eb568b89eb3792f67986d0be3d087c888ee3f11ce921b0cR148-R152)
[[2]](diffhunk://#diff-6a91abaebf470476a3ede56259ce3a9aea4c03d6e7a551bfa00b5a38fa9ef712R150-R155)
[[3]](diffhunk://#diff-f69e7eca2ab1ea5e98e43f6fee3bfb5c896d32ba6e6b4b69d81664ee422a8904R148-R153)
[[4]](diffhunk://#diff-9d850ebf70c39ddd5babcf9dc7fc5fe058ab9f61ead3f04e6a5fb103974f6591R150-R155)
[[5]](diffhunk://#diff-e1424e05dfaa1f85fe71d2e0365337c7fcad48767eead843e042e248d0dcf1a0R148-R153)
[[6]](diffhunk://#diff-c613d97eae5f67f2326053c71fca1985b8b8e7a3bfb2c60a0be9aac9407cf838R152-R157)

**Parameterization of build registry:**

* Updated the `ksy-dev-build-params.yaml` binding to use the dynamically
determined `registry` value from the trigger extensions, instead of a
hardcoded dev registry value
(`tekton/v1/triggers/bindings/ksy-dev-build-params.yaml`)
</comment><date>2026-04-03 09:35:06 +0000</date><id>aa1dc84b1c9ac07530bd6e4ef5f863717aad3290</id><msg>ci(tekton): use dynamic registry for hotfix builds (#4459)</msg><path><editType>edit</editType><file>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-branch-push.yaml</file></path><path><editType>edit</editType><file>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-pr-single-platform.yaml</file></path><path><editType>edit</editType><file>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-tag-create-single-platform.yaml</file></path><path><editType>edit</editType><file>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-pr.yaml</file></path><path><editType>edit</editType><file>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-branch-push-single-platform.yaml</file></path><path><editType>edit</editType><file>tekton/v1/triggers/bindings/ksy-dev-build-params.yaml</file></path><path><editType>edit</editType><file>tekton/v1/triggers/triggers/env-prod2/_/fake-github/fake-github-tag-create.yaml</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.4/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.3/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.2/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_integration_binlog_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.2/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.4/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.3/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_tidb_tools_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_integration_binlog_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.2/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.2/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_common_test.groovy</affectedPath><affectedPath>pipelines/tikv/copr-test/latest/pull_integration_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.5/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.4/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.4/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.1/pull_integration_binlog_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.3/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_integration_binlog_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.4/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.3/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.2/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.3/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.2/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.1/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_mysql_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_mysql_client_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.3/pull_integration_copr_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-8.4/pull_integration_ddl_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_integration_binlog_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-7.5/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/latest/pull_integration_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_common_test.groovy</affectedPath><affectedPath>pipelines/pingcap/tidb/release-6.1/pull_integration_mysql_test.groovy</affectedPath><commitId>1b271fa111189bad5238beff6fad1570659804ff</commitId><timestamp>1775209443000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>fix(pipelines): stop exposing github token to PR jobs (#4460)

## Summary
- remove global `GITHUB_TOKEN = credentials('github-bot-token')`
injection from `pull_*` pipelines that execute untrusted PR code
- keep non-sensitive `environment` entries such as `OCI_ARTIFACT_HOST`
unchanged
- limit the scope to PR-triggered pipelines; merged pipelines are not
changed in this patch

## Risk
These PR jobs were exposing a GitHub bot token to the full Jenkins
execution environment even though the variable was not consumed later in
the pipeline. A malicious PR could potentially read the token from the
process environment.

## Verification
- `git diff --check`
- verified no `pull_*.groovy` file still contains `GITHUB_TOKEN =
credentials(...)` or `GH_TOKEN = credentials(...)`
- verified no empty `environment {}` blocks remain after the cleanup
</comment><date>2026-04-03 09:44:03 +0000</date><id>1b271fa111189bad5238beff6fad1570659804ff</id><msg>fix(pipelines): stop exposing github token to PR jobs (#4460)</msg><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.3/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.2/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_integration_tidb_tools_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_integration_tidb_tools_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.3/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/tikv/copr-test/latest/pull_integration_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.4/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.3/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.3/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.2/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_integration_binlog_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_integration_binlog_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_integration_tidb_tools_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.2/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_integration_binlog_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.3/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.4/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_integration_tidb_tools_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_integration_binlog_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/latest/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_integration_binlog_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.4/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_integration_tidb_tools_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.1/pull_integration_tidb_tools_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.2/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-9.0-beta/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.1/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.2/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.4/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5/pull_integration_tidb_tools_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.3/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.4/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.2/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_copr_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_integration_mysql_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_integration_common_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.5/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-6.1/pull_integration_ddl_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-7.5/pull_mysql_client_test.groovy</file></path><path><editType>edit</editType><file>pipelines/pingcap/tidb/release-8.4/pull_integration_copr_test.groovy</file></path></item><item _class='hudson.plugins.git.GitChangeSet'><affectedPath>tekton/v1/tasks/pingcap-git-clone.yaml</affectedPath><commitId>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</commitId><timestamp>1775210404000</timestamp><author><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName></author><authorEmail>noreply@github.com</authorEmail><comment>chore(deps): update alpine docker tag to v3.23 (#4458)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| alpine | minor | `3.22` → `3.23` |

---

&gt; [!WARNING]
&gt; Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/1780) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] &lt;!-- rebase-check --&gt;If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/PingCAP-QE/ci).

&lt;!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=--&gt;

Co-authored-by: renovate[bot] &lt;29139614+renovate[bot]@users.noreply.github.com&gt;
</comment><date>2026-04-03 10:00:04 +0000</date><id>c23f5560f5cb72258ebeb7653b370fbd2fc9e6d9</id><msg>chore(deps): update alpine docker tag to v3.23 (#4458)</msg><path><editType>edit</editType><file>tekton/v1/tasks/pingcap-git-clone.yaml</file></path></item><kind>git</kind></changeSet><culprit><absoluteUrl>https://prow.tidb.net/jenkins/user/noreply</absoluteUrl><fullName>noreply</fullName><id>noreply</id></culprit></freeStyleBuild>