Commit Graph
4 Commits
Author SHA1 Message Date
OpenCode Cabillot 42ff058a6f fix(ci): correct handed-corrupted SHA for anothrNick/github-tag-action
PR Checks / hadolint (pull_request) Successful in 12s
PR Checks / build-test (pull_request) Successful in 26s
The tag job in main.yaml references
  anothrNick/github-tag-action@4ed44965e0
which does not exist upstream: the runner fails with
  Unable to resolve 4ed44965...: reference not found
  ##[error]reference not found

The first 12 chars match the real commit, the rest is fabricated - the
signature of a hand-rewritten YAML (commit 5e1827b re-added the step with a
bad SHA after 8b583cc had removed it). The correct commit for tag v1.75.0
is 4ed44965e0db8dab2b466a16da04aec3cc312fd8.

Impact: main.yaml has been red on every push to master since (runs 8197 and
8616: hadolint/test/build green, tag failed), so no release tag is created
and tag.yaml never runs -> no release build pushed to Docker Hub.

Verified against the upstream repo: tag 1.75.0 (and the v1 alias) both point
at 4ed44965e0db8dab2b466a16da04aec3cc312fd8.
2026-09-13 14:57:01 +00:00
OpenCode Cabillot fb061f33a1 fix(docker): pin numeric uid/gid so hadolint DL3066 passes
PR Checks / hadolint (pull_request) Successful in 11s
PR Checks / build-test (pull_request) Successful in 31s
hadolint 2.15.x - pulled in by hadolint-action v3.5.0 - adds DL3066
("Non-numeric user-id may not be resolvable by host system"). The
Dockerfile's `USER muser` trips it and the hadolint job exits 1 (hadolint
fails on info-level findings by default), turning the PR Checks pipeline
red on the Renovate bump PR.

muser was created without an explicit uid/gid, so its numeric identity
depended on busybox's auto-assignment. Both ids are now pinned at
1000:1000 - the values Alpine was already assigning - and USER uses the
numeric form, which is always resolvable by the host.

Verified with the upstream hadolint v2.15.1 binary: the previous
Dockerfile reports "Dockerfile:9 DL3066 info" and exits 1, the fixed one
lints clean and exits 0.

The hadolint-action v3.3.0 -> v3.5.0 bump is included here (all four
workflows, SHA 06be81ba) so that master ends up on v3.5.0 with a clean
lint - superseding Renovate PR #23.
2026-09-13 14:41:49 +00:00
OpenCode Cabillot e7a3584fd2 chore: remove legacy GitLab CI and Jenkins files
PR Checks / hadolint (pull_request) Successful in 1m18s
PR Checks / build-test (pull_request) Successful in 2m49s
2026-09-02 13:47:31 +00:00
OpenCode Cabillot 5d3e32cce6 ci: add Renovate workflow
PR Checks / hadolint (pull_request) Successful in 24s
PR Checks / build-test (pull_request) Successful in 45s
2026-08-02 23:41:21 +00:00