[antoinetoussaint-byte]

v0.17.0 carries two request-contract fields this agent reads: the composition's provenance on the deploy request (codefly-dev/core#752 — the agent judges its dependency edges with the rendering composition; the proven last blocker of the staging render) and the runtime image on InitRequest (codefly-dev/core#749). Pinned with codefly agent deps --pin v0.17.0: standalone build OK; the native CreateToRun suite is green. One of seven agents moved together.

Not verified locally: TestCreateToRunDocker. On this machine the generated service's REST endpoint answers EOF for 30s inside Docker — the same local Docker environment that fails service-python-fastapi's Docker variant on a platform wheel — while the native variant of the same test passes. CI's runners decide the Docker one.

🤖 Generated with Claude Code

[antoinetoussaint-byte]

Head 482bf55 adds the fix for the red TestCreateToRunDocker: the runtime container (codeflydev/go:0.0.11, Go 1.27.0, GOTOOLCHAIN=local, no recipe anywhere) and the builder stage (golang:1.27.0-alpine3.23 digest + GoVersion = "1.27.0") both refused the go 1.27.2 directive core v0.17.0 lifts into every module; the test only reports the 30 s readiness timeout.

• runtime image → service-go's locked image, by digest: ghcr.io/codefly-dev/service-go-runtime:go1.27.2-alpine3.23@sha256:341506e8… (recipe, lock, reproducibility gate and publish workflow: fix(runtime): pin the Go runtime image to a reproducible ghcr.io lock service-go#131; published from tag runtime-v1, pulled anonymously in the workflow).
• GoVersion and the builder digest → 1.27.2 (golang:1.27.2-alpine3.23@sha256:2ac5c2a6…).

Classification: fix at the owners — the image now has a source in service-go, and this repo's two exact Go pins track the release the modules require. The cascade itself ends when core's directive drops the patch (owner rule); until then an exact image pin moves with it.

Verified locally: go test ./ -run 'TestCreateToRunDocker$' -count=1 → --- PASS: TestCreateToRunDocker (49.25s) against the published image; the template/recipe unit tests pass. go-grpc still carries its own copy of the reference rather than goruntime.RuntimeImage because it pins service-go v0.0.63; de-duplicate when that pin moves to the release carrying #131.

🤖 Generated with Claude Code