Repository navigation
Conversation
edda1eb to
0970e69
Compare
|
/ddci trigger |
|
View all feedbacks in Devflow UI.
Tasks sourcing running asynchronously in workflow devflow:4924896d-a00c-476c-a539-b3c721df0f9f_47:01a1a763-25c5-7b53-9ea7-7b5e2b14c881 under run id 01a1a763-2e2d-7a17-b0cb-f742a5242fe9 |
There was a problem hiding this comment.
With SKIP_PIP_INSTALL unset, the Noble-based layer-publishing jobs still invoke system pip and abort under PEP 668 before publishing any layers.
🤖 Bits Code Review · Commit 0970e69
1ff3e17 to
628602f
Compare
There was a problem hiding this comment.
More details
CI jobs now use digest-pinned Docker images with internal Buildx, apt-installed AWS tools, and Python virtual environments. Publishing exports SKIP_PIP_INSTALL=true, resolving the earlier Noble system-pip failure. No findings remain open. Full container and CI integration validation remains outstanding.
🤖 Bits Code Review · Commit 97c3648
| rules: | ||
| # Image-maintenance validation has no authorization to deploy Lambda services. | ||
| - if: '$CI_COMMIT_BRANCH == "ericlim/internal-buildx-modern-docker-20261103" || $CI_MERGE_REQUEST_SOURCE_BRANCH_NAME == "ericlim/internal-buildx-modern-docker-20261103"' | ||
| when: never |
There was a problem hiding this comment.
Do we want to commit these?
|
/gitlab resync-job-status |
|
View all feedbacks in Devflow UI.
47 jobs status updated and 0 skipped for a total of 47 jobs |
Use maintained
docker:27.3.1anddocker:29.4.0-noble-py3tags in CI instead of pipeline-specific candidates or fixed digests. Keep Python virtual environments, the SKIP_PIP_INSTALL guard and existing deployment/E2E controls. The tools check logs the inherited Buildx version without rejecting later releases.Earlier candidate runs passed layer builds, size checks and unit tests. Those results validate earlier artifacts; current CI will validate the maintained-tag configuration.
Publication prerequisite: images#12612 is still unmerged. Its newer Buildx client reaches these maintained tags only after source merge and normal default-branch image publication. Docker 27.3.1 is already published from master.
Mutable tags are intentional. New job image resolution follows the runner pull policy; existing running jobs and already-built derived images keep their current contents. Validation: diff checks and applicable YAML parsing pass; CI remains enabled on signed commits. No image promotion or deployment was performed.