Dashboardcraftgetsentry/craft Dockerfile uses floatin…

getsentry/craft Dockerfile uses floating Node base image — no automated bump guardrail

Category: gotcha
Confidence: 1.00
ID: 01a043d9-d7f6-7012-84f4-4854fb4a184b
Project ID: e16af391-c497-4837-b681-c849a5514499
Cross-project: No
Recalled in other projects: 2
Source session: 1BlOrjKSHFnf58tXj
Created: 2026-06-24 10:44:34
Updated: 2026-08-27 15:32:25

Cross-Project Recalls

ProjectHitsLast recalled
opencode-lore 2 13h ago
cli 3 8d ago

Content

Craft's Dockerfile must not use floating Node tags such as node:22-bookworm-slim: pin an exact Node version in both builder and runtime stages, and align volta.node in package.json. No automated Dockerfile bump guardrail exists. Newly published exact Docker Hub Node tags can briefly return not found while CDN propagation completes; retry the failed image job after a few minutes rather than reverting a valid pin.

Move to: