claude-code
  • Joined on 2026-10-05
claude-code pushed to claude-code/go-toolchain at mi/werkdock 2026-10-20 15:43:22 +02:00
e9701feabf Version 0.13.1 after the rebase onto 0.13.0; the plan marks the Dockerfile build of PR#14 as merged
ebefc42e1a PR document: a clearer sentence in the problem
ba17072942 The risk analysis keeps the manual rollout as an open risk; the toolchain is the default, not a minimum
15287fb33d The PR document says which toolchain check-licenses uses, and how it finds it
60e1b281c9 go.mod names go1.26.10 as the minimum toolchain, and the texts say so
Compare 11 commits »
claude-code commented on pull request mi/werkdock#14 2026-10-20 15:37:17 +02:00
A Dockerfile builds on the target, and two backends for one interface (0.12.0)

Right: the rebase onto main after PR#15 (0.12.1) raised the version to 0.13.0. The title is the author's; mi changes it to "(0.13.0)" before the merge.

claude-code pushed to claude-code/go-toolchain at mi/werkdock 2026-10-20 15:35:18 +02:00
737ee6df81 PR document: a clearer sentence in the problem
claude-code commented on pull request mi/werkdock#14 2026-10-20 15:32:48 +02:00
A Dockerfile builds on the target, and two backends for one interface (0.12.0)

Fixed in 8dd301e: every line at most 128 characters.

claude-code commented on pull request mi/werkdock#14 2026-10-20 15:32:47 +02:00
A Dockerfile builds on the target, and two backends for one interface (0.12.0)

Fixed in 8dd301e: FROM scratch starts from an empty directory with empty metadata, without lookup or pull; README and CHANGELOG say so. Test: TestRunBuildsFromScratchWithoutAskingForIt, red…

claude-code commented on pull request mi/werkdock#14 2026-10-20 15:32:47 +02:00
A Dockerfile builds on the target, and two backends for one interface (0.12.0)

Fixed in 8dd301e: one sentence per line.

claude-code commented on pull request mi/werkdock#14 2026-10-20 15:32:46 +02:00
A Dockerfile builds on the target, and two backends for one interface (0.12.0)

Fixed in 8dd301e: the commit creates the final WORKDIR in the tree, as docker does. Test: TestRunCreatesTheWorkdirOfTheFinishedImage, red before.

claude-code commented on pull request mi/werkdock#14 2026-10-20 15:32:46 +02:00
A Dockerfile builds on the target, and two backends for one interface (0.12.0)

Fixed in 8dd301e: resolveSources compares the real path of each match (filepath.EvalSymlinks) with the real context and refuses one outside; a link inside the context still copies its target…

claude-code commented on pull request mi/werkdock#16 2026-10-20 15:26:45 +02:00
A Go toolchain without known vulnerabilities (0.13.1)

Fixed in cf83fd4: the open risks name the manual rollout; until it is done, mih09 runs the previous binary, on 2026-10-20 one of go1.22.2.

claude-code pushed to claude-code/go-toolchain at mi/werkdock 2026-10-20 15:26:45 +02:00
cf83fd4b4d The risk analysis keeps the manual rollout as an open risk; the toolchain is the default, not a minimum
claude-code pushed to claude-code/go-toolchain at mi/werkdock 2026-10-20 15:19:59 +02:00
e813858274 The PR document says which toolchain check-licenses uses, and how it finds it
claude-code commented on pull request mi/werkdock#14 2026-10-20 15:16:48 +02:00
A Dockerfile builds on the target, and two backends for one interface (0.12.0)

Fixed in ce98a65: every line of the paragraph is at most 128 characters.

claude-code commented on pull request mi/werkdock#14 2026-10-20 15:16:48 +02:00
A Dockerfile builds on the target, and two backends for one interface (0.12.0)

Fixed in ce98a65: one sentence per line.

claude-code commented on pull request mi/werkdock#14 2026-10-20 15:16:47 +02:00
A Dockerfile builds on the target, and two backends for one interface (0.12.0)

Fixed in ce98a65: the parser refuses RUN --mount, --network and --security at parse time with the reason, as README, help and CHANGELOG say; cases in TestParseRefusesWithTheReason.

claude-code commented on pull request mi/werkdock#16 2026-10-20 15:13:55 +02:00
A Go toolchain without known vulnerabilities (0.13.1)

Fixed in 69785ca: the PR document says that the go 1.22 line needs Go 1.22 or newer to start the build, and only such a Go switches.

claude-code pushed to claude-code/go-toolchain at mi/werkdock 2026-10-20 15:13:55 +02:00
69785ca8ba go.mod names go1.26.10 as the minimum toolchain, and the texts say so
claude-code commented on pull request mi/werkdock#16 2026-10-20 15:13:54 +02:00
A Go toolchain without known vulnerabilities (0.13.1)

Stays: in this plan [x] means "merged, not yet deployed" (header of docs/werkdock.werkbaum and docs/agentic-workflow.md, "The Plan in Werkbaum"); the node turns [^] after the rollout to mih09,…

claude-code commented on pull request mi/werkdock#16 2026-10-20 15:13:54 +02:00
A Go toolchain without known vulnerabilities (0.13.1)

Fixed in 69785ca as a description: go1.26.10 is the minimum toolchain. A newer Go carries its fixes, and tools/vulncheck checks the Go that actually builds, in each branch and each night; an…

claude-code commented on pull request mi/werkdock#14 2026-10-20 15:11:29 +02:00
A Dockerfile builds on the target, and two backends for one interface (0.12.0)

Fixed in 9e4ba14: the error starts with RUN <args>: and no longer names CMD. Test: TestRunCommandNamesRunInAParseError.

claude-code commented on pull request mi/werkdock#14 2026-10-20 15:11:28 +02:00
A Dockerfile builds on the target, and two backends for one interface (0.12.0)

Fixed in 9e4ba14: the probe touches a file in a directory of its own below the target directory, through the root bind, without a tmpfs, and removes it; with --ro-bind it fails ("Read-only…