mirror of
https://github.com/hanzoai/docdb.git
synced 2026-10-30 18:39:39 +00:00
The official golang images ship GOTOOLCHAIN=local, so a base image older
than the governing go.mod `go` directive is a hard build failure rather
than a toolchain download:
go: go.mod requires go >= 1.26.5 (running go 1.26.4; GOTOOLCHAIN=local)
Every Go stage in build/docdb/*.Dockerfile was on golang:1.26.1-bookworm
while the root go.mod asks for go 1.26.5, so all four image builds were
broken. Pin the nine Go stages to golang:1.26.5-bookworm (same variant,
same --platform, same stage aliases) and set GOTOOLCHAIN=auto in each so
a future go.mod bump downloads the toolchain (checksum-verified against
sum.golang.org) instead of failing the build.
Dependabot bumps these FROM lines on its own cadence while go.mod moves
separately, so the two drift apart routinely; auto makes that self-healing.
No go.mod `go` directive is changed.
Co-authored-by: Hanzo Dev <[email protected]>