From bb11530dd38582908c94f15f58cacbe94211127b Mon Sep 17 00:00:00 2001
From: Phuoc Ho <phuoc.ho@df.technology>
Date: Mon, 17 Aug 2026 09:07:11 +0700
Subject: [PATCH] ci: pin django-common-utils to the ref CI resolves

---
 Dockerfile | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 081f048..2c4aa14 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,9 +9,12 @@ RUN apk add --no-cache \
 
 WORKDIR /install
 
+# Pinned by CI to the commit image-plan.py hashed into this image's content
+# key. Defaults to dev so a hand build still works.
+ARG COMMON_UTILS_REF=dev
 RUN --mount=type=secret,id=github_token \
     pip install --no-cache-dir --prefix=/install \
-    git+https://$(cat /run/secrets/github_token)@github.com/Space-DF/django-common-utils.git@dev
+    git+https://$(cat /run/secrets/github_token)@github.com/Space-DF/django-common-utils.git@${COMMON_UTILS_REF}
 
 COPY requirements.txt .
 RUN pip install --no-cache-dir --prefix=/install -r requirements.txt