Skip to content

build: pin uv image version - #58

Merged
davidpoblador merged 1 commit into
mainfrom
build/pin-uv-image
Oct 6, 2026
Merged

davidpoblador merged 1 commit into
mainfrom
build/pin-uv-image

Conversation

@davidpoblador

Copy link
Copy Markdown
Member

Summary

Both Dockerfile stages copied uv from ghcr.io/astral-sh/uv:latest, so every release build picked up whatever uv happened to be current. This pins them to ghcr.io/astral-sh/uv:0.12.23@sha256:61d393e44e249f2e4b526b6c7ddcecce245946826e608e11c93ad4f5bba55b21 (the multi-arch index digest, so amd64 and arm64 builds both resolve).

  • 0.12.23 is the latest uv release (2026-10-03) and sits inside the project's uv_build>=0.12,<0.13 range.
  • renovate.json extends config:recommended with no overrides, so Renovate's dockerfile manager tracks COPY --from=image:tag@digest and will bump tag and digest together.
  • cab/Dockerfile does not use uv; no workflow or doc references the :latest tag.

Verification

  • docker build . succeeds.
  • uv --version in the built image: uv 0.12.23 (aarch64-unknown-linux-musl).
  • Container started with -p 18765:8000; GET / returned 200 and granian logged a clean startup.

🤖 Generated with Claude Code

Release builds copied uv from ghcr.io/astral-sh/uv:latest, so each build picked up whatever uv was current. Pin both stages to 0.12.23 by tag and multi-arch index digest; Renovate's dockerfile manager keeps both updated.
@davidpoblador
davidpoblador merged commit 964beb6 into main Oct 6, 2026
1 check passed
@davidpoblador
davidpoblador deleted the build/pin-uv-image branch October 6, 2026 19:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant