Savannah Savings 7803d229eb fix(auth): pin base image to node 22.22.2 digest (CAR-1279 Phase 2) ...

Pin both build and runtime stages of auth/Dockerfile to
node:22-alpine@sha256:8ea2348b068a9544dae7317b4f3aafcdc032df1647bb7d768a05a5cad1a7683f
— the Docker Hub manifest digest for node:22.22.2-alpine (verified against
the registry by CTO).

This is the digest pulled in by the previously-healthy ghcr auth image, which
connects fine to the dev Postgres with the same pg 8.20.0 driver and
byte-identical source. The Gitea-built image, which bundles node 22.22.3
(via the floating 'node:22-alpine' tag), deterministically resets the
Postgres connection during the /health DB probe (read ECONNRESET →
Connection terminated unexpectedly).

Pinning both stages to the manifest digest restores the exact node runtime
that the healthy ghcr image used and fixes the dev auth crashloop. The
'RUN apk update && apk upgrade --no-cache' lines are kept as-is per task
spec.

Refs CAR-1279, CAR-1276 (CAR-1287)

2026-06-06 02:26:54 +00:00

..

src

fix(auth): restore unconditional Better-Auth fallback, add unknown-path test

2026-05-04 20:58:50 +00:00

.env.example

feat(auth): enable email verification with Resend

2026-04-15 03:30:44 +00:00

Dockerfile

fix(auth): pin base image to node 22.22.2 digest (CAR-1279 Phase 2)

2026-06-06 02:26:54 +00:00

package-lock.json

feat(auth): enable email verification with Resend

2026-04-15 03:30:44 +00:00

package.json

test(auth): add health endpoint unit tests

2026-05-04 15:40:04 +00:00

tsconfig.json

fix(auth): exclude test files from tsc compilation

2026-05-05 11:11:53 +00:00