This pull request updates the httpbin Docker image used across the testing infrastructure. The outdated kennethreitz/httpbin image is replaced with the modern, API-compatible mccutchen/go-httpbin image. Crucially, the new image is pinned to a specific SHA256 digest, which enhances the security and reproducibility of the test builds.

Files Changed Analysis

The change is a simple find-and-replace operation across 7 configuration files, resulting in 8 additions and 8 deletions. The modifications are consistently applied to the main release workflow (.github/workflows/release.yml) and various docker-compose.yml files within the ci/ directory, which define services for different test suites.

Architecture & Impact Assessment

• What this PR accomplishes: It modernizes a core test dependency, replacing an unmaintained image with a current, secure, and compatible alternative. This improves the overall health and reliability of the CI/CD pipeline.
• Key technical changes introduced: The only technical change is the value of the image attribute for the httpbin service in GitHub Actions and Docker Compose configurations. The introduction of image pinning via a SHA256 digest is a significant security and stability improvement.
• Affected system components: The impact is strictly limited to the continuous integration (CI) and testing environments. Production code, application runtime, and end-user functionality are unaffected. The change touches test setups for release upgrades, smoke tests, API functionality, metrics, plugins, and tracing.

Scope Discovery & Context Expansion

The scope of this PR is narrow and well-defined, impacting only the development and testing lifecycle. As mccutchen/go-httpbin is a drop-in replacement, no corresponding changes are needed in the tests that consume this service. The impact is fully contained within the configuration files modified in this PR.

Powered by Visor from Probelabs

Last updated: 2026-07-02T19:04:52.136Z | Triggered by: pr_updated | Commit: 725774b

💡 TIP: You can chat with Visor using /visor ask <your question>

✅ Security Check Passed

No security issues found – changes LGTM.

✅ Performance Check Passed

No performance issues found – changes LGTM.

✅ Security Check Passed

No security issues found – changes LGTM.

✅ Performance Check Passed

No performance issues found – changes LGTM.

✅ Quality Check Passed

No quality issues found – changes LGTM.

Powered by Visor from Probelabs

Last updated: 2026-07-02T19:04:48.114Z | Triggered by: pr_updated | Commit: 725774b

💡 TIP: You can chat with Visor using /visor ask <your question>

Quality Gate failed

Failed conditions
1 Security Hotspot

See analysis details on SonarQube Cloud

SentinelOne CNS Hardcoded Secret Detector
✅ Congratulations, your code is safe

SentinelOne CNS is a cloud-agnostic, agentless CSPM & CWPP solution that continuously detects and prevents vulnerabilities that have the highest probability of being exploited in Azure, AWS, Google Cloud, and Kubernetes.

🚨 Jira Linter Failed

Commit: 725774b
Failed at: 2026-07-02 19:13:11 UTC

The Jira linter failed to validate your PR. Please check the error details below:

failed to validate branch and PR title rules: branch name 'update-httpbin-image-5.14.0' must contain a valid Jira ticket ID (e.g., ABC-123)

Next Steps

• Ensure your branch name contains a valid Jira ticket ID (e.g., ABC-123)
• Verify your PR title matches the branch's Jira ticket ID
• Check that the Jira ticket exists and is accessible

This comment will be automatically deleted once the linter passes.