🐛 fix(docker): update Alpine tzdata pin on main

[scttbnsn]

Summary

• update the Alpine 3.21 tzdata pin from 2026b-r0 to the currently available 2026c-r0
• add a regression that rejects the disappeared revision

Why

PR #532 exposed a deterministic fresh-build failure before Cucumber could start: Alpine now serves tzdata-2026c-r0, so the main Dockerfile pin to 2026b-r0 can no longer resolve. The retry failed identically.

This is the main forward-port of the already accepted v1.6 fix from #523. It intentionally does not import unrelated v1.6 Trivy or Alpine changes.

Verification

• TDD red: Dockerfile defaults regression failed on 2026b-r0
• targeted regression passes after the pin update
• fresh local image build from exact main succeeds and installs tzdata 2026c-r0
• independent audit confirms this two-file transplant is the minimal main-safe port; cherry-picking the dev commit wholesale would conflict with main-specific tests

After this merges, #532 will be rebased on the repaired main SHA and rerun.

Changelog

• 🔧 Changed Alpine 3.21 tzdata pin in the main Dockerfile from 2026b-r0 to 2026c-r0.
• ✨ Added a Docker regression test that parses the root Dockerfile base stage apk add line(s) to assert tzdata=2026c-r0 (including the exact trailing line continuation formatting) and to ensure tzdata=2026b-r0 is absent.
• 🐛 Fixed deterministic fresh-build failures caused by the discontinued/unavailable tzdata package revision.

Concerns

• Ensure the regression test continues to match the base stage apk add formatting exactly (including trailing line continuation).
• Confirm CI passes with the updated Dockerfile parsing/assertion logic in app/configuration/dockerfile-defaults.test.ts.
• Validate that fresh no-cache Linux/amd64 builds and runtime inspection both show tzdata-2026c-r0 installed.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
drydock-website	Ready	Preview, Comment	Jul 14, 2026 8:46am

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 6ebd8527-63f4-427d-a27a-da0655237e4e

📥 Commits

Reviewing files that changed from the base of the PR and between bcf089e and 7a67c21.

📒 Files selected for processing (1)

• app/configuration/dockerfile-defaults.test.ts

🚧 Files skipped from review as they are similar to previous changes (1)

• app/configuration/dockerfile-defaults.test.ts

---

📝 Walkthrough

Walkthrough

The Dockerfile updates the Alpine tzdata package pin from 2026b-r0 to 2026c-r0. A Jest test verifies that the new pin is present in the base stage and the previous pin is absent.

Possibly related PRs

• CodesWhat/drydock#523: Makes the same Dockerfile tzdata pin update and adds corresponding Jest validation.

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/main-tzdata-2026c

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@app/configuration/dockerfile-defaults.test.ts`:
- Around line 10-14: Update the test covering the release image in the
base-stage assertion to extract or otherwise scope the Dockerfile content to the
base stage, then verify the exact apk package-install line pins tzdata to
2026c-r0. Keep the regression check rejecting 2026b-r0 within that scoped
install content rather than using document-wide toContain checks.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 7a6c7eea-cc25-4043-b1e1-e3776c01b6f7

📥 Commits

Reviewing files that changed from the base of the PR and between bdcb8d8 and 46cc75b.

📒 Files selected for processing (2)

• Dockerfile
• app/configuration/dockerfile-defaults.test.ts

[scttbnsn]

Additional exact-head verification:

• independent audit confirmed the two-file main transplant is minimal and safer than cherry-picking the dev commit
• fresh no-cache linux/amd64 build with pull succeeds
• runtime package inspection reports tzdata-2026c-r0
• built image retains DD_VERSION=main-tzdata-forward-port

Hosted exact-head Cucumber remains the authoritative reproduction of the original failure.

[vercel]

Deployment failed with the following error:

Resource is limited - try again in 24 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/codeswhat?upgradeToPro=build-rate-limit

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@app/configuration/dockerfile-defaults.test.ts`:
- Line 16: Update the package-line assertion in the baseStage test to use `[
\t]+` instead of `\s+`, ensuring the regex matches only horizontal whitespace
around `tzdata=2026c-r0` and validates the exact continued package line.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 88a7392b-913c-4a6b-98cb-38e66118b703

📥 Commits

Reviewing files that changed from the base of the PR and between 46cc75b and bcf089e.

📒 Files selected for processing (2)

• Dockerfile
• app/configuration/dockerfile-defaults.test.ts

🚧 Files skipped from review as they are similar to previous changes (1)

• Dockerfile