Switch to Canonical Squid 7.2 image

[Alex-Welsh]

I haven't tested this new image. It looks like it should "just work", volumes mount in the same place etc.
If anyone wants to roll it out and try it, then that would be very much appreciated. Otherwise, I think it's a fairly safe switch

Summary by CodeRabbit

• Changes
  • Updated the seed Squid container to Canonical’s public image.
  • Upgraded Squid from version 6.10 to 7.2.
  • Changed the container base operating system from Rocky Linux 10 to Ubuntu 26.04.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: e271638e-c08e-4013-bb29-bb23b55e3007

📥 Commits

Reviewing files that changed from the base of the PR and between 1864f0e and 4e418a8.

📒 Files selected for processing (2)

• etc/kayobe/seed.yml
• releasenotes/notes/ubuntu-squid-container-75698bf1b9535163.yaml

🚧 Files skipped from review as they are similar to previous changes (2)

• etc/kayobe/seed.yml
• releasenotes/notes/ubuntu-squid-container-75698bf1b9535163.yaml

---

📝 Walkthrough

Walkthrough

The seed configuration changes its Squid container image to Ubuntu Squid 7.2 on Ubuntu 26.04. A release note documents the image maintainer, version upgrade, and base distribution change.

Changes

Squid container update

Layer / File(s)	Summary
Update Squid image and release documentation etc/kayobe/seed.yml, releasenotes/notes/ubuntu-squid-container-75698bf1b9535163.yaml	The seed configuration uses ubuntu/squid:7.2-26.04_edge. The release note documents the image maintainer, Squid version, and base distribution changes.

Estimated code review effort: 1 (Trivial) | ~5 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: switching to Canonical's Squid 7.2 container image.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch 2026.1-bump-squid

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🧹 Nitpick comments (1)

etc/kayobe/seed.yml (1)

142-144: 🔒 Security & Privacy | 🔵 Trivial | ⚡ Quick win

Pin the tested image digest.

7.2-26.04_edge is a channel tag. Docker Hub shows that its manifest was pushed recently. This indicates that later deployments can pull different image content without a repository change. Pin the digest used for validation, or add automated image-update testing. Verify that Kayobe’s separate image and tag fields support the required digest reference. (hub.docker.com)

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@etc/kayobe/seed.yml` around lines 142 - 144, Update the Squid image reference
in the seed configuration around image and tag to use the digest corresponding
to the validated ubuntu/squid image instead of the mutable 7.2-26.04_edge
channel tag. Confirm Kayobe’s separate image and tag fields accept the digest
format, preserving the existing image and pre configuration.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@releasenotes/notes/ubuntu-squid-container-75698bf1b9535163.yaml`:
- Line 7: Correct the wording in the release note by changing “the new on is
based” to “the new one is based,” leaving the rest of the note unchanged.

---

Nitpick comments:
In `@etc/kayobe/seed.yml`:
- Around line 142-144: Update the Squid image reference in the seed
configuration around image and tag to use the digest corresponding to the
validated ubuntu/squid image instead of the mutable 7.2-26.04_edge channel tag.
Confirm Kayobe’s separate image and tag fields accept the digest format,
preserving the existing image and pre configuration.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 292fefc8-ec9d-4590-9514-ac95085f4e0b

📥 Commits

Reviewing files that changed from the base of the PR and between 625c066 and 1864f0e.

📒 Files selected for processing (2)

• etc/kayobe/seed.yml
• releasenotes/notes/ubuntu-squid-container-75698bf1b9535163.yaml