Pinned localterra and postgres images in docker-compose.yml to immutable digests (with YAML comments for the logical tags). Documented bump procedure in docs/local-development.md and scripts/qa/README.md. Extended test.yml PR paths to include docker-compose.yml so compose changes trigger CI. @brouie Please confirm E2E/QA still passes with the pinned images.

Pinned `localterra` and `postgres` images in `docker-compose.yml` to immutable digests (with YAML comments for the logical tags). Documented bump procedure in `docs/local-development.md` and `scripts/qa/README.md`. Extended `test.yml` PR paths to include `docker-compose.yml` so compose changes trigger CI. @brouie Please confirm E2E/QA still passes with the pinned images.

Brouie commented

2026-04-20 05:58:10 +00:00

(Migrated from gitlab.com)

@PlasticDigits Verified on current main. Acceptance criteria:

Image tags pinned or version matrix documented: docker-compose.yml pins both services by immutable sha256 digest (localterra: ghcr.io/plasticdigits/localterra-cl8y@sha256:9a58488b..., postgres: postgres@sha256:20edbde7...) with YAML comments for human-readable tag references. Bump procedure in docs/local-development.md lines 46-53 ('docker pull ghcr.io/plasticdigits/localterra-cl8y:latest' then copy sha256 into compose file). Referenced from scripts/qa/README.md line 7. test.yml line 17 adds docker-compose.yml to PR paths so compose changes trigger CI.

Reproducibility locked in: any drift in upstream :latest tags will not silently break QA, and the bump workflow is documented. Closing.

@PlasticDigits Verified on current main. Acceptance criteria: - [x] Image tags pinned or version matrix documented: docker-compose.yml pins both services by immutable sha256 digest (localterra: ghcr.io/plasticdigits/localterra-cl8y@sha256:9a58488b..., postgres: postgres@sha256:20edbde7...) with YAML comments for human-readable tag references. Bump procedure in docs/local-development.md lines 46-53 ('docker pull ghcr.io/plasticdigits/localterra-cl8y:latest' then copy sha256 into compose file). Referenced from scripts/qa/README.md line 7. test.yml line 17 adds docker-compose.yml to PR paths so compose changes trigger CI. Reproducibility locked in: any drift in upstream :latest tags will not silently break QA, and the bump workflow is documented. Closing.

Brouie (Migrated from gitlab.com) closed this issue

2026-04-20 05:58:13 +00:00