Complete add-container-version-sync-check Mikado card

All verification items pass: mismatch detection confirmed, ntfy nix
version resolved. All three prereqs (pin-container-versions,
add-dagger-nix-build, fix-ntfy-nix-version) are complete.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Erich Blume 2026-02-20 22:22:07 -08:00
commit 747e99f466

View file

@ -1,7 +1,6 @@
---
title: Add Container Version Sync Check
modified: 2026-02-20
status: active
requires:
- pin-container-versions
- add-dagger-nix-build
@ -54,9 +53,9 @@ Container-to-service name mapping: `quartz` → `docs`, `kiwix-serve` → `kiwix
Filled in `current-version` for all hybrid services: navidrome (v0.60.3), miniflux (2.2.17), teslamate (v2.2.0), transmission (4.0.6-r4), kiwix (3.8.1), forgejo-runner (0.19.11). Added authentik (2025.10.1) as a new hybrid entry.
### ntfy nix version skew (fix forward)
### ntfy nix version skew (resolved)
The check discovered that ntfy's Dockerfile pins v2.17.0 but nixpkgs has ntfy-sh 2.15.0. Rather than reverting, ntfy is excluded from `NIX_PACKAGE_MAP` and a new dependency card [[fix-ntfy-nix-version]] was created to build the nix derivation from the forge mirror at v2.17.0.
The check discovered that ntfy's Dockerfile pins v2.17.0 but nixpkgs has ntfy-sh 2.15.0. This was resolved in [[fix-ntfy-nix-version]] by building a custom nix derivation from the forge mirror. The version check now extracts the version from local nix files via regex, falling back to Dagger for unmodified nixpkgs packages.
## Key Files
@ -69,10 +68,10 @@ The check discovered that ntfy's Dockerfile pins v2.17.0 but nixpkgs has ntfy-sh
## Verification
- [x] `mise run container-version-check --all-files` passes with no errors
- [ ] Intentionally changing a Dockerfile ARG without updating `service-versions.yaml` fails the check
- [x] Intentionally changing a Dockerfile ARG without updating `service-versions.yaml` fails the check
- [x] `service-versions.yaml` has `current-version` populated for all hybrid services
- [x] Nix-only container versions (authentik) checked via Dagger
- [ ] ntfy nix version check deferred to [[fix-ntfy-nix-version]]
- [x] ntfy nix version resolved via [[fix-ntfy-nix-version]]
## Related