Merge pull request #15910 from edsantiago/cron_treadmill

Proof of concept: nightly dependency treadmill

.cirrus.yml

@@ -139,6 +139,22 @@ build_task:
           _gc='git config --file /root/.gitconfig'
           $_gc user.email "TMcTestFace@example.com"
           $_gc user.name "Testy McTestface"
+          # Nightly dependency-bump job: fetch latest versions of the
+          # Big Three dependencies, and run full CI test suite. Notification
+          # email will go out to monitor-list upon failure.
+          if [[ "$CIRRUS_CRON" = "treadmill" ]]; then
+              for pkg in common image/v5 storage; do
+                  echo "go mod edit --require containers/$pkg@main"
+                  go mod edit --require github.com/containers/$pkg@main
+                  make vendor
+              done
+              git add vendor
+              # Show what changed.
+              echo "git diff go.mod, then git diff --stat:"
+              git diff go.mod
+              git diff --stat
+              HOME=/root git commit --allow-empty -asm"Bump containers/common,image,storage"
+          fi
     # Attempt to prevent flakes by confirming basic environment expectations,
     # network service connectivity and essential container image availability.
     prebuild_script: &prebuild $SCRIPT_BASE/prebuild.sh