fix(docker): pin builder to bookworm to avoid glibc runtime mismatch

* fix(docker): pin builder to bookworm for glibc compatibility

* ci: skip rust lint on non-Rust PRs and allow 0BSD

* ci: pin actionlint action to existing release tag

* ci: make docs-only matcher shellcheck-clean

---------

Co-authored-by: chumyin <chumyin@users.noreply.github.com>
This commit is contained in:
Chummy 2026-02-16 04:03:29 +08:00 committed by GitHub
parent 3b7a140aad
commit c80b118963
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 43 additions and 10 deletions

View file

@ -1,7 +1,9 @@
# syntax=docker/dockerfile:1
# ── Stage 1: Build ────────────────────────────────────────────
FROM rust:1.93-slim AS builder
# Keep builder and release on Debian 12 to avoid GLIBC ABI drift
# (`rust:1.93-slim` now tracks Debian 13 and can require newer glibc than distroless Debian 12).
FROM rust:1.93-slim-bookworm AS builder
WORKDIR /app