Rock update action should look at more than just latest

[mmkay]

Rock update action is fetching the release that's marked as latest. However, sometimes, as a CVE response, upstream project might release more versions (example: This Grafana CVE fix was released as 10.4.7, 11.0.3, 11.1.4, but none of them is marked as latest at the time of writing).

We might need to fetch more than just latest release.

[sed-i]

Line ref:

observability/.github/workflows/rock-update.yaml

Line 50 in 4b5bbdc

https://api.github.com/repos/${{ inputs.source-repo }}/releases/latest \

[sed-i]

If we query for all releases, we'd be able to obtain the list of all "new" releases if somehow we could store and compare against the last id or date we processed.

curl 'https://api.github.com/repos/grafana/grafana/releases' \
  | jq '[.[] | select(.prerelease == false and .draft == false) | {id: .id, name: .name, tag: .tag_name, created: .created_at}] | sort_by(.id) | reverse'

[
  {
    "id": 170251194,
    "name": "11.1.4",
    "tag": "v11.1.4",
    "created": "2024-07-30T15:06:32Z"
  },
  {
    "id": 170238980,
    "name": "11.0.3",
    "tag": "v11.0.3",
    "created": "2024-07-30T15:08:04Z"
  },
  {
    "id": 170229652,
    "name": "10.4.7",
    "tag": "v10.4.7",
    "created": "2024-07-30T15:04:39Z"
  },
  {
    "id": 167392844,
    "name": "11.1.3 (2024-07-26)",
    "tag": "v11.1.3",
    "created": "2024-07-26T13:34:40Z"
  },
  {
    "id": 167254543,
    "name": "10.4.6 (2024-07-23)",
    "tag": "v10.4.6",
    "created": "2024-07-23T22:09:25Z"
  },
  {
    "id": 167254473,
    "name": "11.1.2 (2024-07-24)",
    "tag": "v11.1.2",
    "created": "2024-07-24T10:58:38Z"
  },
  {
    "id": 167247327,
    "name": "11.1.1 (2024-07-10)",
    "tag": "v11.1.1",
    "created": "2024-07-25T14:40:10Z"
  },
  {
    "id": 167241467,
    "name": "11.0.2 (2024-07-23)",
    "tag": "v11.0.2",
    "created": "2024-07-23T22:23:55Z"
  },
  {
    "id": 162396015,
    "name": "10.3.7 (2024-06-21)",
    "tag": "v10.3.7",
    "created": "2024-06-21T11:27:51Z"
  },
  {
    "id": 162388847,
    "name": "10.2.8 (2024-06-21)",
    "tag": "v10.2.8",
    "created": "2024-06-21T10:23:23Z"
  },
  {
    "id": 162388394,
    "name": "9.5.20 (2024-06-21)",
    "tag": "v9.5.20",
    "created": "2024-06-21T09:09:29Z"
  },
  {
    "id": 162285319,
    "name": "10.4.5 (2024-06-21)",
    "tag": "v10.4.5",
    "created": "2024-06-21T13:27:27Z"
  },
  {
    "id": 162283422,
    "name": "11.0.1 (2024-06-21)",
    "tag": "v11.0.1",
    "created": "2024-06-21T16:23:52Z"
  },
  {
    "id": 162265226,
    "name": "11.1.0 (2024-06-21)",
    "tag": "v11.1.0",
    "created": "2024-06-24T13:40:14Z"
  },
  {
    "id": 160320353,
    "name": "10.4.4 (2024-06-13)",
    "tag": "v10.4.4",
    "created": "2024-06-13T12:36:49Z"
  },
  {
    "id": 155783140,
    "name": "9.5.19 (2024-05-13)",
    "tag": "v9.5.19",
    "created": "2024-05-13T14:12:50Z"
  },
  {
    "id": 155782645,
    "name": "10.1.10 (2024-05-13)",
    "tag": "v10.1.10",
    "created": "2024-05-13T12:43:32Z"
  },
  {
    "id": 155762099,
    "name": "10.2.7 (2024-05-13)",
    "tag": "v10.2.7",
    "created": "2024-05-13T12:32:24Z"
  },
  {
    "id": 155724048,
    "name": "10.4.3 (2024-05-13)",
    "tag": "v10.4.3",
    "created": "2024-05-13T11:47:17Z"
  },
  {
    "id": 155719155,
    "name": "10.3.6 (2024-05-13)",
    "tag": "v10.3.6",
    "created": "2024-05-13T11:58:30Z"
  },
  {
    "id": 155649770,
    "name": "11.0.0 (2024-05-14)",
    "tag": "v11.0.0",
    "created": "2024-05-13T08:56:13Z"
  },
  {
    "id": 150818241,
    "name": "10.4.2 (2024-04-10)",
    "tag": "v10.4.2",
    "created": "2024-04-10T15:00:01Z"
  },
  {
    "id": 150192569,
    "name": "11.0.0-preview (2024-04-08)",
    "tag": "v11.0.0-preview",
    "created": "2024-04-04T08:21:00Z"
  },
  {
    "id": 148483949,
    "name": "10.2.6 (2024-03-25)",
    "tag": "v10.2.6",
    "created": "2024-03-25T11:21:22Z"
  },
  {
    "id": 148477494,
    "name": "10.1.9 (2024-03-25)",
    "tag": "v10.1.9",
    "created": "2024-03-25T11:48:02Z"
  },
  {
    "id": 148471768,
    "name": "10.0.13 (2024-03-25)",
    "tag": "v10.0.13",
    "created": "2024-03-25T11:20:47Z"
  },
  {
    "id": 148467786,
    "name": "9.5.18 (2024-03-25)",
    "tag": "v9.5.18",
    "created": "2024-03-25T11:45:51Z"
  },
  {
    "id": 147770775,
    "name": "10.3.5 (2024-03-20)",
    "tag": "v10.3.5",
    "created": "2024-03-20T20:55:39Z"
  },
  {
    "id": 147767941,
    "name": "10.4.1 (2024-03-20)",
    "tag": "v10.4.1",
    "created": "2024-03-20T18:05:02Z"
  },
  {
    "id": 145088948,
    "name": "10.3.4 (2024-03-06)",
    "tag": "v10.3.4",
    "created": "2024-03-06T11:31:52Z"
  }
]

[lucabello]

That's an interesting idea!