docker: pin the two unpinned Dockerfile FROM lines #291

Merged

mysticalsoap merged 1 commit from pin-dockerfile-from into trunk

2026-09-19 23:17:20 -04:00

mysticalsoap commented

2026-09-19 22:50:07 -04:00

Owner

Problem

_helper/config-renderer/Dockerfile (alpine:3) and _helper/knock/Dockerfile (python:3.14-alpine) were the only image references in the repo without a digest. Renovate has nothing to bump, and a rebuild silently takes whatever the tag points at that day. Closes #289.

Fix

Both FROM lines pinned to the current Docker Hub index digests. alpine's is the same digest dagu/tools/Dockerfile already carries.

Verification

docker build of both Dockerfiles from a clean worktree of this branch: config-renderer and knock (13 layers) build from the pinned digests. Nothing live changes until this lands and just deploy rebuilds them, which needs #290 first; merge that one before this.

## Problem `_helper/config-renderer/Dockerfile` (`alpine:3`) and `_helper/knock/Dockerfile` (`python:3.14-alpine`) were the only image references in the repo without a digest. Renovate has nothing to bump, and a rebuild silently takes whatever the tag points at that day. Closes #289. ## Fix Both `FROM` lines pinned to the current Docker Hub index digests. alpine's is the same digest `dagu/tools/Dockerfile` already carries. ## Verification `docker build` of both Dockerfiles from a clean worktree of this branch: config-renderer and knock (13 layers) build from the pinned digests. Nothing live changes until this lands and `just deploy` rebuilds them, which needs #290 first; merge that one before this.

mysticalsoap added 1 commit

2026-09-19 22:50:07 -04:00

docker: pin the two unpinned Dockerfile FROM lines

validate / validate (pull_request) Successful in 22s

Details

00988b0615

config-renderer's alpine:3 and knock's python:3.14-alpine were the only
image references in the repo without a digest: nothing for Renovate to bump,
and a rebuild silently took whatever the tag pointed at that day. Pinned to
the current index digests; alpine's is the one dagu/tools already carries.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

mysticalsoap merged commit ba28e0696e into trunk

2026-09-19 23:17:20 -04:00

mysticalsoap deleted branch pin-dockerfile-from

2026-09-19 23:17:20 -04:00

mysticalsoap referenced this pull request from a commit

2026-09-19 23:17:21 -04:00

Merge pull request 'docker: pin the two unpinned Dockerfile FROM lines' (#291) from pin-dockerfile-from into trunk

mysticalsoap referenced this pull request

2026-09-19 23:26:55 -04:00

dagu: run dagu-tools on the stock docker CLI image #293