webgrip/infrastructure
5
0
Fork 0
Code Issues 1 Pull requests 2 Projects Releases 102 Packages Wiki Activity Actions

fix(semantic-release-rust): pin the node base to a digest #112

Merged
ryangr0 merged 1 commit from fix/semantic-release-rust-pin-base into main 2026-08-08 13:17:59 +00:00
Conversation 0 Commits 1 Files changed 1 +8 -7
ryangr0 commented 2026-08-08 06:32:14 +00:00
Owner
Copy link

node:24-bookworm-slim floated: the toolchain that decides every repo's version numbers was itself built on whatever upstream had rebuilt that day — the exact failure mode the locked package-lock.json exists to prevent, one layer down.

One ARG now carries tag and digest (house pattern), moved together by #106's digest-aware Renovate manager. Pinned at today's digest, so the image is unchanged.

One of three identical PRs (semantic-release / -monorepo / -rust): one image per PR because Forgejo ignores max-parallel, and these must not release simultaneously.

Generated with Claude Code

node:24-bookworm-slim floated: the toolchain that decides every repo's version numbers was itself built on whatever upstream had rebuilt that day — the exact failure mode the locked package-lock.json exists to prevent, one layer down. One ARG now carries tag and digest (house pattern), moved together by #106's digest-aware Renovate manager. Pinned at today's digest, so the image is unchanged. One of three identical PRs (semantic-release / -monorepo / -rust): one image per PR because Forgejo ignores max-parallel, and these must not release simultaneously. Generated with [Claude Code](https://claude.com/claude-code)
fix(semantic-release-rust): pin the node base to a digest
All checks were successful
[Workflow] On Source Change / Guard: per-image .releaserc.cjs present (push) Successful in 7s
Details
[Workflow] On Source Change / Determine Changed Directories (push) Successful in 42s
Details
[Workflow] On Source Change / Determine changed images (push) Successful in 0s
Details
[Workflow] On Source Change / Resolve release matrix (push) Successful in 2s
Details
[Workflow] On Source Change / Build check (semantic-release-rust, ops/docker/semantic-release-rust) (push) Successful in 59s
Details
[Workflow] On Source Change / Release (semantic-release-rust, ops/docker/semantic-release-rust) (push) Has been skipped
Details
a97e7a0b8a 
node:24-bookworm-slim floated: the toolchain that decides every repo's
version numbers was itself built on whatever upstream had rebuilt that day —
the exact failure mode the locked package-lock.json exists to prevent, one
layer down. One ARG now carries tag and digest (house pattern), moved
together by the digest-aware Renovate manager. Pinned at the digest the tag
resolves to today, so the image is unchanged.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
pull-request
Mirrored from GitHub Pull Request

  
released
No labels
pull-request
released
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
webgrip/infrastructure!112
No description provided.