Skip to content

merge queue: checking #9984 on unstable (115bd16) - #9991

Closed
mergify[bot] wants to merge 4 commits into
unstablefrom
mergify/merge-queue/d3cce6fd53
Closed

merge queue: checking #9984 on unstable (115bd16)#9991
mergify[bot] wants to merge 4 commits into
unstablefrom
mergify/merge-queue/d3cce6fd53

Conversation

@mergify

@mergify mergify Bot commented Sep 7, 2026

Copy link
Copy Markdown

🎉 This pull request has been checked successfully and will be merged soon. 🎉

#9984 is queued for merge on branch unstable (115bd16).

This pull request has been created by Mergify to check the mergeability of #9984.
You don't need to do anything. Mergify will close this pull request automatically when it is complete.

Required conditions of queue rule default for merge:

Required conditions to stay in the queue:

---
checking_base_sha: 115bd16fb565c3df2b169a740fa5754adde00762
previous_check_retries: []
previous_failed_batches: []
pull_requests:
  - number: 9984
    scopes: []
scopes: []
...

michaelsproul and others added 4 commits September 7, 2026 15:48
Keep Rust at 1.88.0 while moving the builder off Bullseye to avoid the failing Debian security package downloads. Update the Ubuntu runtime to 24.04 so its glibc is newer than the builder's.
`lcli/Dockerfile` carries the same bullseye pin as the main `Dockerfile`, so
it breaks the same way now that Debian 11 has reached LTS EOL. Apply the
identical fix: bookworm builder, and Ubuntu 24.04 runtime so its glibc is
newer than the builder's.

Not built by CI (`docker.yml` uses `lcli/Dockerfile.cross`), but broken for
local builds.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qny4QevtjCbyAyAB7rT7M7
The reproducible build path still pins `rust:1.88-bullseye` by digest in
three places, and pins exact bullseye package versions. Debian 11 reached
LTS EOL on 2026-08-31, so `apt-get update` in this image fails once the
`bullseye-security` Release file expires.

Bump the per-arch digests to the current `rust:1.88-bookworm` and repin the
build dependencies to their bookworm versions. Rust stays at 1.88.

Verified both pinned images install the pinned packages cleanly:

  amd64  Debian 12, rustc 1.88.0, cmake 3.25.1, glibc 2.36
  arm64  Debian 12, rustc 1.88.0, cmake 3.25.1, glibc 2.36

This also aligns the builder with the `distroless/cc-debian12` runtime,
which previously ran a bullseye-built binary against a bookworm userland.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qny4QevtjCbyAyAB7rT7M7
@cla-assistant

cla-assistant Bot commented Sep 7, 2026

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
2 out of 3 committers have signed the CLA.

✅ antondlr
✅ michaelsproul
❌ mergify[bot]
You have signed the CLA already but the status is still pending? Let us recheck it.

@mergify mergify Bot closed this Sep 7, 2026
@mergify
mergify Bot deleted the mergify/merge-queue/d3cce6fd53 branch September 7, 2026 15:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants