Skip to content

Dev Container lock file and Dependabot configuration for devcontainers#1781

Merged
brooke-hamilton merged 3 commits intobrooke-hamilton/devcontainer-lockfrom
copilot/sub-pr-1776
Mar 16, 2026
Merged

Dev Container lock file and Dependabot configuration for devcontainers#1781
brooke-hamilton merged 3 commits intobrooke-hamilton/devcontainer-lockfrom
copilot/sub-pr-1776

Conversation

Copy link
Contributor

Copilot AI commented Mar 16, 2026

Thank you for helping make the Radius documentation better!

Please follow this checklist before submitting:

  • Read the contribution guide
  • Commands include options for Linux, MacOS, and Windows within codetabs
  • New file and folder names are globally unique
  • Page references use shortcodes instead of markdown or URL links
  • Images use HTML style and have alternative text
  • Places where multiple code/command options are given have codetabs

Description

Pins devcontainer feature versions for reproducible builds and adds Dependabot automation to keep them updated.

  • .devcontainer/devcontainer.json: Updated feature references to use explicit version identifiers (e.g. git:1.3.5, go:1.3.3, hugo:1.1.3, node:1.7.1) so versions are visible and match the lock file 1:1
  • .devcontainer/devcontainer-lock.json (new): Locks each feature to a specific version with SHA-256 integrity hash for reproducible environment builds. Feature keys use explicit version identifiers matching those in devcontainer.json
  • .github/dependabot.yml: Adds devcontainers ecosystem entry targeting the edge branch with weekly updates — Dependabot will keep both devcontainer.json and devcontainer-lock.json in sync automatically

Issue reference

N/A — Proactive improvement to pin devcontainer feature versions and enable automated dependency updates.


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Co-authored-by: brooke-hamilton <45323234+brooke-hamilton@users.noreply.github.com>
Copilot AI changed the title [WIP] Add dev container lock file and Dependabot configuration Dev Container lock file and Dependabot configuration for devcontainers Mar 16, 2026
Copilot AI requested a review from brooke-hamilton March 16, 2026 22:48
@brooke-hamilton
Copy link
Member

@copilot I think you need to update the dev container lock file identifiers too

…ontainer.json

Co-authored-by: brooke-hamilton <45323234+brooke-hamilton@users.noreply.github.com>
Copy link
Contributor Author

Copilot AI commented Mar 16, 2026

@copilot I think you need to update the dev container lock file identifiers too

Updated the lock file keys in commit 83d53e0. Both files now use matching explicit version identifiers (e.g. git:1.3.5, go:1.3.3, hugo:1.1.3, node:1.7.1).

@brooke-hamilton brooke-hamilton marked this pull request as ready for review March 16, 2026 22:52
@brooke-hamilton brooke-hamilton requested review from a team as code owners March 16, 2026 22:52
@brooke-hamilton brooke-hamilton merged commit d1a8b0c into brooke-hamilton/devcontainer-lock Mar 16, 2026
1 check passed
@brooke-hamilton brooke-hamilton deleted the copilot/sub-pr-1776 branch March 16, 2026 22:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants