Bump alloy v1.14.0 → v1.16.0 across both build paths:
- containers/alloy/Dockerfile replaced with native container.py
(3-stage Node UI → make alloy Go build → Alpine runtime).
- containers/alloy/default.nix bumped: src hash + npmDepsHash refreshed.
goModules outputHash still TODO — will be updated after a build attempt
on the ringtail nix runner reveals the new hash.
The container.py uses the upstream Makefile via `make alloy` (not plain
`go build`) so version stamping, release flags, and the netgo+embedalloyui
tags match upstream releases. promtail_journal_enabled is omitted as
before — k8s deployments read pod logs from the filesystem, not journald.
Per [[review-services]] for the four stale Alloy entries (alloy-k8s,
alloy-ringtail, alloy-tracing-ringtail, alloy ansible — all reviewed
2026-03-13).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Erich Blume
b8d16c822d