Skip to content

v0.2.0 — Maintained runner runtime

Latest
Latest

Choose a tag to compare

View all tags
@zFl4wless zFl4wless released this 02 Nov 22:42
v0.2.0
f36e9b3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Updates the template to Runner 2.338.2 with default shell Node24 24.22.1, using the maintained public AMD64/ARM64 upstream image.

  • Adds the Node24 PATH/startup floor, runtime inventories, daily update detection and real GitHub smoke automation from #3.
  • Updates actions/setup-python to 7.1.0 (#5).
  • Completes the 2.338.2 image update and fixes monitoring when Node's index includes alpha/RC builds (#4).
  • Keeps deployment/security instructions concise and updates, validation and rollback in one maintenance guide. Full machine evidence is attached to this release.

Upgrade from v0.1.0: default shell Node changes from 18 to 24 and the standalone service key changes from runner to dokploy-actions-runner. Stop/remove the old service using its old Compose definition before installing the new one, preserving intended inputs/resource limits. Recreate while idle and verify one registration and real jobs. Runner self-updates remain enabled; no Node20 binary is replaced with another major version.

Image index:
sha256:23e3a4a1da30de5b462ad0ae13d901288e803a688075c3b9b5bb79b7148c07fa

Validation: 15 regression tests; native AMD64/ARM64 offline lifecycle/inventory CI; anonymous image pull; real GitHub jobs before and after restart with clean deregistration. Live ARM64 was native in Docker Desktop and AMD64 used Rosetta. Updated Dokploy preview files match the released blueprint; fresh Dokploy UI deployment of 2.338.2 and actual self-update execution were not observed.

Known limits: retained Node18/Node20 and additional tool vulnerabilities remain. Grype 0.121.1 with the 2 November database reports 26 Critical and 170 High matches per architecture, with zero matches for Node24 24.22.1 in that database. These are scanner matches, not proof of exploitability or vulnerability freedom. All reported findings are retained in the attachment, alongside 3,242 excluded indirect linux-libc-dev matches per architecture and their applied scanner rules.

The repaired update monitor correctly still alerts that Node24 24.22.2 is available but not yet bundled by upstream Runner: follow-up #6. That alert is not suppressed.

Matching Dokploy catalog PR #1255 remains subject to upstream review. Publishing this release does not update installed services or change live deployments.

Assets 4
Loading