From e7e928fd6acf8321d36d96acb85ba6ab389e7ce3 Mon Sep 17 00:00:00 2001 From: Manuel de Brito Fontes Date: Wed, 14 Oct 2026 08:06:17 -0300 Subject: [PATCH] versions: Docker Hub's images from mirror.gcr.io Docker Hub counts every anonymous pull, a digest lookup included, against the address, and the machines that build this share one: spin's gate was refused with 429 halfway through on 2026-10-14. mirror.gcr.io serves the same manifests; alpine's, debian's and ubuntu's pins were each checked there by digest, so nothing a build reads changes. Co-Authored-By: Claude Opus 5.5 (1M context) --- versions.yaml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/versions.yaml b/versions.yaml index b58bd93..0b24aee 100644 --- a/versions.yaml +++ b/versions.yaml @@ -16,7 +16,9 @@ # reason not to bump; it is a reason for the bump to be its own commit. # # Each entry: -# kind image: an OCI image; version its tag, pin its digest. +# kind image: an OCI image; version its tag, pin its digest. A Docker Hub image is +# mirror.gcr.io's copy, the same manifest: Docker Hub counts every +# anonymous pull, a digest lookup included, against the address. # git: a repository built here; version the branch it is on, pin the commit. # download: a file; source its URL with {version} (and {major}), pin its sha256. # date: a point in time; version the date, no pin. @@ -51,7 +53,7 @@ - name: alpine kind: image - source: alpine + source: mirror.gcr.io/library/alpine version: '3.24' pin: sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 track: digest @@ -80,7 +82,7 @@ - name: debian kind: image - source: debian + source: mirror.gcr.io/library/debian version: trixie pin: sha256:913f6706df59a68922d1dd08f78c2476560a8d367897200a6005b00e5f67c2d5 track: digest @@ -126,7 +128,7 @@ - name: ubuntu kind: image - source: ubuntu + source: mirror.gcr.io/library/ubuntu version: '26.04' pin: sha256:f144425ff09be612d6d9ad965196e9cdc23dae1f42110a8a11a3e9a8198759f7 track: digest