From d9c7f72461768d644b250d8745b5f5311f2c3dd5 Mon Sep 17 00:00:00 2001 From: TO Date: Sat, 17 Oct 2026 21:24:11 +0200 Subject: [PATCH] docs(ci): note the Docker 29.9.1 image Co-Authored-By: Claude Opus 5.5 --- docs/gitea-actions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/gitea-actions.md b/docs/gitea-actions.md index d031482..efe18b0 100644 --- a/docs/gitea-actions.md +++ b/docs/gitea-actions.md @@ -42,7 +42,7 @@ branch slug; stable promotions share one group and are not cancelled in progress ## Runners and permissions Every job that runs project commands uses Bun 1.4.3 with the frozen lockfile (see [Bun toolchain and Node](#bun-toolchain-and-node)). Job containers stay on Node 24.21.0. The image -job uses Docker 29.8.2 and its matching Docker-in-Docker service. Scanner +job uses Docker 29.9.1 and its matching Docker-in-Docker service. Scanner versions are Semgrep 1.180.0 and Trivy 0.75.0; Trivy downloads are checksum-checked. Trivy downloads its vulnerability database from Aqua's public ECR mirror because the default registries returned a missing database blob and a download timeout.