From 1b3fa2c54063cd11746a905d710522f7dfa13aae Mon Sep 17 00:00:00 2001 From: Julien Calixte Date: Tue, 2 Jun 2026 22:31:29 +0200 Subject: [PATCH] fix(signup): copy manifest.toml so Docker builds use the lockfile MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Commit 40011e2 added manifest.toml to pin transitive deps, but the Dockerfile only copies gleam.toml — so every Docker build still re-resolves from scratch and can pick up incompatible versions within the allowed ranges, defeating the lockfile's purpose. --- signup/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/signup/Dockerfile b/signup/Dockerfile index a483812..5244edb 100644 --- a/signup/Dockerfile +++ b/signup/Dockerfile @@ -1,6 +1,6 @@ FROM ghcr.io/gleam-lang/gleam:v1.16.0-erlang-alpine AS builder WORKDIR /build -COPY gleam.toml ./ +COPY gleam.toml manifest.toml ./ RUN gleam deps download COPY src ./src RUN gleam export erlang-shipment