don't use floating tags
ci/woodpecker/cron/renovate Pipeline was successful

This commit is contained in:
2026-05-28 23:46:17 +02:00
parent dca233f9f2
commit d5a32d13dd
2 changed files with 10 additions and 8 deletions
+7 -5
View File
@@ -289,13 +289,15 @@ docker buildx build --platform linux/arm64 \
All upstream dependencies are version-pinned for reproducible builds:
All versions are fully qualified (no floating `major.minor` tags):
| Dependency | Where | Pinned form |
|---|---|---|
| Go toolchain | `Dockerfile` `FROM golang:…` | tag + `@sha256` digest |
| Alpine (busybox build base) | `Dockerfile` `FROM alpine:…` | tag + `@sha256` digest |
| Tailscale | `Dockerfile` `ARG TAILSCALE_VERSION` | git release tag |
| busybox | `Dockerfile` `ARG BUSYBOX_VERSION` | release version |
| Renovate runner | `.woodpecker/renovate.yaml` `image:` | tag |
| Go toolchain | `Dockerfile` `FROM golang:…` | full version tag + `@sha256` digest |
| Alpine (busybox build base) | `Dockerfile` `FROM alpine:…` | full version tag + `@sha256` digest |
| Tailscale | `Dockerfile` `ARG TAILSCALE_VERSION` | full git release tag |
| busybox | `Dockerfile` `ARG BUSYBOX_VERSION` | full release version |
| Renovate / OpenBao | `.woodpecker/renovate.yaml` `image:` | full version tag |
Updates are proposed automatically by [Renovate](https://docs.renovatebot.com/),
run **self-hosted** from a Woodpecker cron pipeline (Woodpecker has no native