aboutsummaryrefslogtreecommitdiffstats
path: root/docker/base.Dockerfile
Commit message (Collapse)AuthorAgeFilesLines
* base: take emSign ECC Root CA - G3 out of bun's built-in root storeAdam Soltys30 hours1-0/+6
| | | | | | | | | | Bun compiles Mozilla's roots into its binary and NODE_USE_SYSTEM_CA only adds to them, so the fixed Debian ca-certificates doesn't reach fetch/tls. docker/bun-distrust.ts overwrites the root's DER in place with a same-length self-signed placeholder (key discarded) at image build time. Drop it once a bun release removes the root itself. Co-Authored-By: Claude Opus 5.5 <[email protected]>
* base: bun 1.3.11 → 1.4.3Adam Soltys30 hours1-1/+1
| | | | Co-Authored-By: Claude Opus 5.5 <[email protected]>
* base: pin bun to 1.3.11 so rebuilding the image (fresh ca-certificates for ↵Adam Soltys30 hours1-1/+3
| | | | | | the emSign CA compromise) doesn't also upgrade bun Co-Authored-By: Claude Opus 5.5 <[email protected]>
* dockerfilesAdam Soltys2026-03-191-0/+18