Michael Kriese

we currently don't do any upgrade to suppress too may dupicated files, as docker would save all those new files the a new layer. so worst case it you fully...

yes, we install latest version which is available at the day, when renovate updates the base image or we change some of our base files.

We need to add that value as `fix` commit to the repo so semantic release will do a release and we can use that file as cache buster.

what about weekly lockfile maintenance as fix release? 😏

that would not help, as most vulnerabilities are not solved, so no upgrade at all.

Problematic tools - `nix` #799 - `poetry` renovatebot/github-action#736

this can also happen on other tools, so i updated the title.

will start fixing on Monday

should be fixed in [`v10.16.0`](https://github.com/containerbase/base/releases/tag/10.16.0)

at least `apt` needs a special handling on install, which we support via `APT_HTTP_PROXY` env. thats already tested well. also ci tests are using the apt proxy