osrf / docker_images

A repository to hold definitions of docker images maintained by OSRF
Apache License 2.0
527 stars 168 forks source link

Timestamping tags for dependabot usecases #753

Open ruffsl opened 4 weeks ago

ruffsl commented 4 weeks ago

It'd be neat to add/rotate the same datetime pattern to the official ROS image tags as Ubuntu for dependabot:

Then folks could automate the version bump and rebuild of their child docker images whenever a new release is detected. Although, perhaps this can be achieved by pinning the tag via the image digest, so maybe not worth it.

- FROM ros:jazzy-20240605 
+ FROM ros:jazzy@sha256:1c445ce6bd87d8bc884fcd40e8a9d8f7efd939e2e4d321c2c9453d1c3e3ad541
mikaelarguedas commented 4 weeks ago

:+1:

I was considering two things regarding timestamping (that could also ensure cache bursting and image rebuild on new ROS syncs) .

WDYT ?