webgrip/infrastructure
5
0
Fork 0
Code Issues 1 Pull requests 2 Projects Releases 102 Packages Wiki Activity Actions

fix(mkdocs-runner): pin the parent by digest #120

Merged
ryangr0 merged 1 commit from fix/mkdocs-runner-pin-parent into main 2026-08-09 08:53:19 +00:00
Conversation 0 Commits 1 Files changed 1 +4 -2
ryangr0 commented 2026-08-08 07:37:59 +00:00
Owner
Copy link

techdocs-builder:1.2.21 was pinned by tag alone. The digest added is what run 287 measured 1.2.21 at — the exact artifact this image already builds on, now named immutably.

Context that makes this matter: the techdocs chain is the worst surface in the estate — the parent measures 131 critical / 501 high, and this child inherits nearly all of it (this image measured 125/474). Its baseline above all needs to name an exact artifact. Renovate moves tag and digest together via #106.

Generated with Claude Code

techdocs-builder:1.2.21 was pinned by tag alone. The digest added is what run 287 measured 1.2.21 at — the exact artifact this image already builds on, now named immutably. Context that makes this matter: the techdocs chain is the **worst surface in the estate** — the parent measures 131 critical / 501 high, and this child inherits nearly all of it (this image measured 125/474). Its baseline above all needs to name an exact artifact. Renovate moves tag and digest together via #106. Generated with [Claude Code](https://claude.com/claude-code)
fix(mkdocs-runner): pin the parent by digest
All checks were successful
[Workflow] On Source Change / Guard: per-image .releaserc.cjs present (push) Successful in 3s
Details
[Workflow] On Source Change / Determine Changed Directories (push) Successful in 25s
Details
[Workflow] On Source Change / Determine changed images (push) Successful in 0s
Details
[Workflow] On Source Change / Resolve release matrix (push) Successful in 11s
Details
[Workflow] On Source Change / Release (mkdocs-runner, ops/docker/mkdocs-runner) (push) Has been skipped
Details
[Workflow] On Source Change / Build check (mkdocs-runner, ops/docker/mkdocs-runner) (push) Successful in 3m37s
Details
af9b0ac1cd 
techdocs-builder:1.2.21 was pinned by tag alone. The digest added is what
run 287 measured 1.2.21 at — the exact artifact this image already builds
on, now named immutably. Context: the techdocs chain is the worst surface
in the estate (parent measures 131 critical / 501 high), so its children
above all need baselines that name exact artifacts. Renovate moves tag and
digest together (#106).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
pull-request
Mirrored from GitHub Pull Request

  
released
No labels
pull-request
released
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
webgrip/infrastructure!120
No description provided.