| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | base: take emSign ECC Root CA - G3 out of bun's built-in root store | Adam Soltys | 30 hours | 1 | -0/+6 |
| | | | | | | | | | | | Bun compiles Mozilla's roots into its binary and NODE_USE_SYSTEM_CA only adds to them, so the fixed Debian ca-certificates doesn't reach fetch/tls. docker/bun-distrust.ts overwrites the root's DER in place with a same-length self-signed placeholder (key discarded) at image build time. Drop it once a bun release removes the root itself. Co-Authored-By: Claude Opus 5.5 <[email protected]> | ||||
| * | base: bun 1.3.11 → 1.4.3 | Adam Soltys | 30 hours | 1 | -1/+1 |
| | | | | | Co-Authored-By: Claude Opus 5.5 <[email protected]> | ||||
| * | base: pin bun to 1.3.11 so rebuilding the image (fresh ca-certificates for ↵ | Adam Soltys | 30 hours | 1 | -1/+3 |
| | | | | | | | the emSign CA compromise) doesn't also upgrade bun Co-Authored-By: Claude Opus 5.5 <[email protected]> | ||||
| * | dockerfiles | Adam Soltys | 2026-03-19 | 1 | -0/+18 |
