mimir-build-image: update to Debian Bookworm

.github/workflows/push-mimir-build-image.yml

@@ -21,7 +21,7 @@ jobs:
       pull-requests: write
     # We want to allow running github actions for all contributors, but don't want all contributors to be able to
     # publish new build images just by sending the PR. Hence this change.
-    if: github.event.pull_request.author_association == 'MEMBER' || github.actor == 'renovate[bot]'
+    if: ${{ contains(fromJSON('["OWNER", "MEMBER"]'), github.event.pull_request.author_association )}} || github.actor == 'renovate[bot]'
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v4

Makefile

@@ -212,7 +212,7 @@ mimir-build-image/$(UPTODATE): mimir-build-image/*
 # All the boiler plate for building golang follows:
 SUDO := $(shell docker info >/dev/null 2>&1 || echo "sudo -E")
 BUILD_IN_CONTAINER ?= true
-LATEST_BUILD_IMAGE_TAG ?= pr6868-e4be452cf9
+LATEST_BUILD_IMAGE_TAG ?= pr6980-478aa31e45
 
 # TTY is parameterized to allow Google Cloud Builder to run builds,
 # as it currently disallows TTY devices. This value needs to be overridden

go.mod

@@ -16,7 +16,7 @@ require (
 	github.com/go-openapi/swag v0.22.5
 	github.com/gogo/protobuf v1.3.2
 	github.com/gogo/status v1.1.1
-	github.com/golang/protobuf v1.5.3
+	github.com/golang/protobuf v1.5.3 // indirect
 	github.com/golang/snappy v0.0.4
 	github.com/google/gopacket v1.1.19
 	github.com/gorilla/mux v1.8.1

mimir-build-image/Dockerfile

@@ -5,7 +5,7 @@
 
 FROM registry.k8s.io/kustomize/kustomize:v5.2.1 as kustomize
 FROM alpine/helm:3.13.2 as helm
-FROM golang:1.21.5-bullseye
+FROM golang:1.21.5-bookworm
 ARG goproxyValue
 ENV GOPROXY=${goproxyValue}
 ENV SKOPEO_DEPS="libgpgme-dev libassuan-dev libbtrfs-dev libdevmapper-dev pkg-config"

packaging/nfpm/mimir/postinstall.sh

@@ -4,7 +4,7 @@
 # Provenance-includes-license: Apache-2.0
 # Provenance-includes-copyright: The Cortex Authors.
 
-# shellcheck disable=SC1090
+# shellcheck disable=SC1091
 . "$OS_ENV_DIR/mimir"
 
 if ! command -V systemctl >/dev/null 2>&1; then
@@ -28,7 +28,7 @@ install() {
     fi
 
     chmod 640 /etc/mimir/config.example.yaml
-    chown root:$MIMIR_GROUP /etc/mimir/config.example.yaml
+    chown root:"$MIMIR_GROUP" /etc/mimir/config.example.yaml
 
     printf "\033[32m Reload the service unit from disk\033[0m\n"
     systemctl daemon-reload ||: