v1.11.2

Expands the CI container-testing guidance on baking build metadata into images.

• Shows the ARG/ENV mechanism for baking APP_BUILD_REF into an image.
• Covers the on-demand image-tag race and how baking an explicit version at build time avoids it.

Full Changelog: v1.11.1...v1.11.2

v1.11.1

What's Changed

• docs(gpg-verification): a signature proves the signer, not the version by @CybotTM in #43
• docs: cache code-independent Docker tooling off the code-copy lineage by @CybotTM in #44
• chore(release): v1.11.1 by @CybotTM in #45

Full Changelog: v1.11.0...v1.11.1

v1.11.0

What's Changed

• docs(references): GPG verification in image builds by @CybotTM in #38
• docs(docker-development): trim generic CI scaffolding, bump stale pins by @CybotTM in #39
• docs(gpg-verification): gpgv is a separate package on debian by @CybotTM in #40
• feat(evals): add missing docker-via-wsl eval by @CybotTM in #41
• chore(release): v1.11.0 by @CybotTM in #42

Full Changelog: v1.10.0...v1.11.0

v1.10.0

What's Changed

• feat: add docker-via-wsl skill for Windows hosts using WSL2 backend by @CybotTM in #36
• chore(release): v1.10.0 by @CybotTM in #37

Full Changelog: v1.9.1...v1.10.0

v1.9.1

What's Changed

• Document local container-test disk hygiene by @CybotTM in #33
• Note docker-bake targets must inherit docker-metadata-action by @CybotTM in #34
• chore(release): v1.9.1 by @CybotTM in #35

Full Changelog: v1.9.0...v1.9.1

v1.9.0

Highlights

New reference material on container CI gotchas: cleaning up root-owned bind-mount artifacts, worker healthcheck patterns for images reused across services, and local boot-test pitfalls.

---

What's Changed

• docs(ci-testing): add worker healthcheck patterns for reused app images by @CybotTM in #29
• feat: document root-owned bind-mount artifacts and their cleanup by @CybotTM in #28
• docs(docker-development): add local boot-test pitfalls by @CybotTM in #30
• chore(release): v1.9.0 by @CybotTM in #31

Full Changelog: v1.8.1...v1.9.0

v1.8.1

Highlights

This patch release extends the CI testing reference with three GitLab CI runner gotchas that bite container images which work fine locally but fail the moment they hit a pipeline. The new patterns cover why a non-shell ENTRYPOINT breaks GitLab's sh -c script execution, how to bundle external assets at build time for runners without internet egress, and why the built image — not the editable dev install — is what your smoke tests need to exercise. The release also drops the stale version field from composer.json, since the git tag is the source of truth for composer packages.

Documentation

• Pattern 8: GitLab CI image entrypoint must be a shell or be overridden with entrypoint: [""] (#26)
• Pattern 9: Restricted runner egress — fetch external assets in a build stage instead of at runtime (#26)
• Pattern 10: Smoke-test the built image; ship data files as package data, not __file__-relative paths (#26)

Maintenance

• Drop stale version field from composer.json; enforced by the new version-parity pre-commit hook (#27)

Full Changelog: v1.8.0...v1.8.1

v1.8.0

What's Changed

• feat: add .pre-commit-config.yaml mirroring CI checks by @CybotTM in #24
• chore(release): v1.8.0 by @CybotTM in #25

Full Changelog: v1.7.1...v1.8.0

v1.7.1

Highlights

A maintenance release that brings docker-development onto the hardened release pipeline shared with the rest of the Netresearch skill estate, plus a SKILL.md trim so the file fits the 500-word cap that the validation workflow enforces.

The skill content now cites the dind-testing-patterns reference from the main SKILL.md so agents discovering docker-development via Claude Code's skill picker see the testing-patterns reference at trigger time rather than having to know to look in references/ (#22).

Release pipeline maintenance

• Dropped the deprecated with: bump: block and the workflow_dispatch.bump input from the release caller — releases now happen exclusively by pushing a locally-signed annotated tag, matching the skill-repo-skill hardened pipeline (#21).
• Granted id-token: write and attestations: write on the release caller so SLSA build-provenance and cosign signatures can be emitted (#20).

The SHA256SUMS.txt shipped with this release is keyless-signed via cosign, and every archive carries a SLSA build-provenance attestation verifiable with gh attestation verify against netresearch/docker-development-skill.

Documentation

• SKILL.md trimmed to fit the 500-word cap that skill-repo-skill's validation workflow enforces, without losing the trigger surface (041ed86).
• dind-testing-patterns reference description broadened so it surfaces for both DinD CI debugging and integration-test scaffolding queries (2326410).

Verification

gh attestation verify docker-development-skill-v1.7.1.zip --repo netresearch/docker-development-skill

cosign verify-blob \
  --bundle SHA256SUMS.txt.bundle \
  --certificate-identity-regexp '^https://github\.com/netresearch/skill-repo-skill/\.github/workflows/release\.yml@' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  SHA256SUMS.txt
sha256sum --check SHA256SUMS.txt

Install

/plugin install docker-development@netresearch
composer require netresearch/docker-development-skill

Full changelog: v1.7.0...v1.7.1

v1.7.0

Highlights

Docker checkpoints now gate themselves on the presence of Docker artefacts, so projects without Dockerfiles or Compose files no longer trip the skill's checks.

New

• Precondition gating on Docker artefact presence — checkpoints short-circuit cleanly when a repo has no Docker context to evaluate, instead of failing as if Docker were missing.
• POSIX-compatible || chains in the precondition logic so the check works across shells.

CI / tooling

• Release workflow now forwards the bump input from workflow_dispatch to the reusable release workflow.

Full diff: v1.6.0...v1.7.0