From 053a52a032e193ccc16fe6bc517c28b698a37b97 Mon Sep 17 00:00:00 2001
From: "SUSE Observability AI (POC)" <suse-observability-ops@suse.com>
Date: Wed, 21 Oct 2026 09:31:16 +0000
Subject: [PATCH] Require patched BCI runtime packages and restore workflow
 lint

Keep the supported BCI 15.7 micro/runtime installation path. Require current expat, OpenSSL and glibc builds so stale package repositories fail at build time; retain existing ACL, attr, PCRE2 and GLib floors.

Reuse the released Renovate configuration pins from PR #346 to resolve the ref-version-mismatch failure blocking master publication. The matching native amd64/arm64 CI already validates the merged Go toolchain and network module updates; unrelated Go revision and minor-version PRs remain separate.
---
 .github/workflows/auto-approve-bot-prs.yml | 2 +-
 .github/workflows/renovate.yml             | 2 +-
 BCI.dockerfile                             | 4 +++-
 renovate.json                              | 8 ++++----
 4 files changed, 9 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/auto-approve-bot-prs.yml b/.github/workflows/auto-approve-bot-prs.yml
index 4509a69d..d0925836 100644
--- a/.github/workflows/auto-approve-bot-prs.yml
+++ b/.github/workflows/auto-approve-bot-prs.yml
@@ -20,7 +20,7 @@ jobs:
       pull-requests: read
     steps:
       - name: Approve verified Renovate PRs
-        uses: StackVista/renovate-config/.github/actions/auto-approve-renovate@c308265fc9a7ee7aecaf1590383094214045049a # main
+        uses: StackVista/renovate-config/.github/actions/auto-approve-renovate@005e342f15c5481932542b5552b23cdd21e624a9 # v1.0.0
         with:
           app-client-id: ${{ vars.RENOVATE_APPROVAL_GH_APP_CLIENT_ID }}
           app-private-key: ${{ secrets.RENOVATE_APPROVAL_GH_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index dac93137..39fa1244 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   renovate:
-    uses: StackVista/renovate-config/.github/workflows/renovate.yml@c308265fc9a7ee7aecaf1590383094214045049a # main
+    uses: StackVista/renovate-config/.github/workflows/renovate.yml@005e342f15c5481932542b5552b23cdd21e624a9 # v1.0.0
     with:
       docker_registry_1: quay.io
       docker_registry_1_username: ${{ vars.QUAY_USER }}
diff --git a/BCI.dockerfile b/BCI.dockerfile
index 420d806d..dfd19e97 100644
--- a/BCI.dockerfile
+++ b/BCI.dockerfile
@@ -26,7 +26,9 @@ RUN zypper -n --gpg-auto-import-keys --installroot /chroot refresh && \
     zypper -n --gpg-auto-import-keys --installroot /chroot update && \
     zypper -n --installroot /chroot install util-linux libudev1 ca-certificates curl wget xz iproute2 conntrack-tools \
       'libacl1>=2.4.0-150000.4.6.1' 'libattr1>=2.6.0-150000.4.3.1' \
-      'libpcre2-8-0>=10.42-150600.3.3.1' 'glibc>=2.38-150600.14.58.1' \
+      'libpcre2-8-0>=10.42-150600.3.3.1' 'glibc>=2.38-150600.14.61.1' \
+      'libexpat1>=2.8.5-150700.3.15.1' \
+      'libopenssl3>=3.5.0-150700.5.53.2' 'openssl-3>=3.5.0-150700.5.53.2' \
       'glib2-tools>=2.78.6-150600.4.41.1' 'libgio-2_0-0>=2.78.6-150600.4.41.1' \
       'libglib-2_0-0>=2.78.6-150600.4.41.1' 'libgmodule-2_0-0>=2.78.6-150600.4.41.1' \
       'libgobject-2_0-0>=2.78.6-150600.4.41.1' && \
diff --git a/renovate.json b/renovate.json
index 541cf6ea..d8aa9a3b 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,10 +1,10 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "github>StackVista/renovate-config#c308265fc9a7ee7aecaf1590383094214045049a",
-    "github>StackVista/renovate-config:go#c308265fc9a7ee7aecaf1590383094214045049a",
-    "github>StackVista/renovate-config:docker#c308265fc9a7ee7aecaf1590383094214045049a",
-    "github>StackVista/renovate-config:automerge#c308265fc9a7ee7aecaf1590383094214045049a"
+    "github>StackVista/renovate-config#005e342f15c5481932542b5552b23cdd21e624a9",
+    "github>StackVista/renovate-config:go#005e342f15c5481932542b5552b23cdd21e624a9",
+    "github>StackVista/renovate-config:docker#005e342f15c5481932542b5552b23cdd21e624a9",
+    "github>StackVista/renovate-config:automerge#005e342f15c5481932542b5552b23cdd21e624a9"
   ],
   "packageRules": [
     {