fix(techdocs-builder): annotate every stage base so Renovate can see them #115

Merged
ryangr0 merged 1 commit from fix/techdocs-builder-annotate-stages into main 2026-08-09 07:37:45 +00:00
Owner

The node and python stages sat on alpine3.20 digests while the final stage moved to alpine 3.23 — three Alpine minors of drift inside one Dockerfile, because the digests were pinned without annotations and nothing was watching them. Java 11 on Jammy in the plantuml stage is the oldest surface in the repo (ADR-0006 calls it out by name).

Digests unchanged: annotating is not upgrading. Renovate (with #106's digest-aware manager) now proposes the catch-up bumps as reviewable PRs, which is where a lineage move belongs — behind the build-check, one at a time. Also drops a stale 'trigger a release' scratch comment.

Generated with Claude Code

The node and python stages sat on **alpine3.20** digests while the final stage moved to alpine 3.23 — three Alpine minors of drift inside one Dockerfile, because the digests were pinned without annotations and nothing was watching them. Java 11 on Jammy in the plantuml stage is the oldest surface in the repo (ADR-0006 calls it out by name). **Digests unchanged: annotating is not upgrading.** Renovate (with #106's digest-aware manager) now proposes the catch-up bumps as reviewable PRs, which is where a lineage move belongs — behind the build-check, one at a time. Also drops a stale 'trigger a release' scratch comment. Generated with [Claude Code](https://claude.com/claude-code)
fix(techdocs-builder): annotate every stage base so Renovate can see them
All checks were successful
[Workflow] On Source Change / Guard: per-image .releaserc.cjs present (push) Successful in 19s
[Workflow] On Source Change / Determine Changed Directories (push) Successful in 17s
[Workflow] On Source Change / Determine changed images (push) Successful in 0s
[Workflow] On Source Change / Resolve release matrix (push) Successful in 12s
[Workflow] On Source Change / Release (techdocs-builder, ops/docker/techdocs-builder) (push) Has been skipped
[Workflow] On Source Change / Build check (techdocs-builder, ops/docker/techdocs-builder) (push) Successful in 25m24s
17ba443009
The node and python stages sat on alpine3.20 digests while the final stage
moved to alpine 3.23 — three Alpine minors of drift inside one Dockerfile,
because the digests were pinned without annotations and nothing was watching
them. Java 11 on Jammy in the plantuml stage is the oldest surface in the
repo (ADR-0006 calls it out by name).

Digests unchanged: annotating is not upgrading. Renovate (with #106's
digest-aware manager) now proposes the catch-up bumps as reviewable PRs,
which is where a lineage move belongs — behind the build-check, one at a
time. Also drops a stale 'trigger a release' scratch comment.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
webgrip/infrastructure!115
No description provided.