From 95da19e5515cd0794ecff1ce65cf99daf03582c7 Mon Sep 17 00:00:00 2001 From: Mike Foster Date: Mon, 7 Sep 2026 09:00:28 +0200 Subject: [PATCH 1/4] remove llvm (flaky) --- Dockerfile | 2 -- 1 file changed, 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 5ccf9d1..2d8388e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -99,8 +99,6 @@ WORKDIR /opt && rustup toolchain install stable beta nightly \ && rustup component add \ clippy \ - llvm-tools \ - llvm-tools-preview \ rustfmt \ rust-src \ && cargo binstall --secure -y \ From 6510444dc7f0f8a694337173dfbbcdc848e50d62 Mon Sep 17 00:00:00 2001 From: Mike Foster Date: Mon, 7 Sep 2026 09:00:39 +0200 Subject: [PATCH 2/4] remove beta & nightly) no advantage --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 2d8388e..c6b2328 100644 --- a/Dockerfile +++ b/Dockerfile @@ -95,8 +95,8 @@ WORKDIR /opt RUN umask 0002 \ && chmod a+x rustup/rustup-init \ && rustup/rustup-init -v -y \ - # beta & nightly add 2Gb each to the image, but I use them a lot ... - && rustup toolchain install stable beta nightly \ + # Don't bother with nightly, as pulling larger base image then updating is slower than just installing via updateContentCommand + && rustup toolchain install stable \ && rustup component add \ clippy \ rustfmt \ From 9960b13e42a4cfac39ea972c21b2452efaad221f Mon Sep 17 00:00:00 2001 From: Mike Foster Date: Mon, 7 Sep 2026 09:01:33 +0200 Subject: [PATCH 3/4] update fedora latest --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index c6b2328..9237685 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM fedora:latest@sha256:498c452f32a739b61f0ef215bce9924ebc4866cbe44710f58157d77723b7a6d2 +FROM fedora:latest@sha256:43b29f65a41eb9c35e1cd5323e3bdf3b655c2357a9f4f1ff2f9c2798e5045d80 # --- # Setup base system ... From 795adb767732d5945cbc926f4f2856a948bec018 Mon Sep 17 00:00:00 2001 From: Mike Foster Date: Mon, 7 Sep 2026 09:09:25 +0200 Subject: [PATCH 4/4] dependabot should get latest fedora & use cooldowns --- .github/dependabot.yml | 17 ++++++++++++++--- 1 file changed, 14 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a798c06..65a9fee 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,18 +3,29 @@ updates: - package-ecosystem: "cargo" directories: - "ninja-xtask" - - "ninja-build_rs" + schedule: + interval: "weekly" + cooldown: + default-days: 10 +- package-ecosystem: "docker" + directory: "/" + # trust fedora to release images fast to fix CVEs schedule: interval: "daily" - package-ecosystem: "docker" directory: "/.devcontainer" + # this is our own image schedule: interval: "daily" - package-ecosystem: "devcontainers" directory: "/" schedule: - interval: "daily" + interval: "weekly" + cooldown: + default-days: 10 - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "daily" + interval: "weekly" + cooldown: + default-days: 10