fix(rust-ci-runner): pin the build-stage rust image; make the rustup pin real #114

Merged
ryangr0 merged 1 commit from fix/rust-ci-runner-pin-build-stage into main 2026-08-09 06:13:49 +00:00
Owner

Two things, same file:

  • rust:1.97.0-slim-bookworm floated by digest. Pinned at what the tag resolves to today (image unchanged), as its own ARG because RUST_VERSION doubles as a rustup toolchain name where a digest suffix would corrupt it. Both ARGs carry the same Renovate depName so they move in one PR.
  • A latent no-op: RUST_VERSION was never redeclared after FROM, so step 1.6's rustup default ${RUST_VERSION} has been running as a bare rustup default — which prints the default instead of setting it. Green only because the base image's default happens to match. Redeclared, so the pin actually operates.

Generated with Claude Code

Two things, same file: - **rust:1.97.0-slim-bookworm floated by digest.** Pinned at what the tag resolves to today (image unchanged), as its own ARG because RUST_VERSION doubles as a rustup toolchain name where a digest suffix would corrupt it. Both ARGs carry the same Renovate depName so they move in one PR. - **A latent no-op:** RUST_VERSION was never redeclared after FROM, so step 1.6's `rustup default ${RUST_VERSION}` has been running as a bare `rustup default` — which **prints** the default instead of setting it. Green only because the base image's default happens to match. Redeclared, so the pin actually operates. Generated with [Claude Code](https://claude.com/claude-code)
fix(rust-ci-runner): pin the build-stage rust image; make the rustup pin real
All checks were successful
[Workflow] On Source Change / Guard: per-image .releaserc.cjs present (push) Successful in 27s
[Workflow] On Source Change / Determine Changed Directories (push) Successful in 2m54s
[Workflow] On Source Change / Determine changed images (push) Successful in 0s
[Workflow] On Source Change / Resolve release matrix (push) Successful in 2s
[Workflow] On Source Change / Build check (rust-ci-runner, ops/docker/rust-ci-runner) (push) Successful in 5m35s
[Workflow] On Source Change / Release (rust-ci-runner, ops/docker/rust-ci-runner) (push) Has been skipped
2ed94021c4
Two things, same file:

- rust:1.97.0-slim-bookworm floated by digest. Pinned at what the tag
  resolves to today (image unchanged), as its own ARG because RUST_VERSION
  doubles as a rustup toolchain name where a digest suffix would corrupt it.
  Both ARGs carry the same Renovate depName so they move in one PR.
- RUST_VERSION was never redeclared after FROM, so step 1.6's
  'rustup default ${RUST_VERSION}' has been running as a bare
  'rustup default' — which PRINTS the default instead of setting it. Green
  only because the base image's default happens to match. Redeclared, so the
  pin actually operates.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
webgrip/infrastructure!114
No description provided.