image(mise): pin the usage tool version#159
Closed
nozaq wants to merge 5 commits into
Closed
Conversation
2 tasks
docker/metadata-action previously derived every label from the repository, so all nine images shared the same generic title and description. Add a top-level description field to each build.yaml (moving variant entries under a variants key), expose it through a new build-config.sh description subcommand, and override the org.opencontainers.image.title/description labels and index annotations with per-image values at publish time. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Rt6cdQY4Q3ie1xpMgyy33S
mise 2026.7.0 and later require a newer glibc than bookworm provides, and mise uses calendar versioning, so no future release can ever be compatible with bookworm again. The variant was pinned to 2026.6.14 forever, meaning mise security fixes would never reach it. Discontinue the variant instead of shipping a permanently frozen tool; previously published bookworm tags remain on GHCR but stop receiving updates. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Rt6cdQY4Q3ie1xpMgyy33S
`mise use -g usage` resolved the latest usage release at build time, an unpinned network fetch not covered by the minisign-verified mise binary. Pin it to a Renovate-managed USAGE_VERSION build arg so the fetch is deterministic and version bumps go through review like every other dependency. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Rt6cdQY4Q3ie1xpMgyy33S
nozaq
force-pushed
the
claude/pr-mise-usage-pin
branch
from
787fec5 to
b587669
Compare
nozaq
force-pushed
the
claude/pr-pin-checksums
branch
from
2a17da7 to
73df312
Compare
3 tasks
nozaq
changed the base branch from
claude/pr-pin-checksums
to
claude/pr-mise-drop-bookworm
5 tasks
Removed comments about usage pinning and build-time fetch. Signed-off-by: nozaq <code@nozaq.com>
Removed redundant line about 'usage' tool installation. Signed-off-by: nozaq <code@nozaq.com>
Base automatically changed from
claude/pr-mise-drop-bookworm
to
claude/pr-per-image-oci-labels
July 13, 2026 00:36
Member
Author
|
in favor of #162 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closing — superseded by #162, which took the opposite approach (remove
mise use -g usageauto-installation entirely rather than pin its version). No longer needed.