neiam /diogramos

diogramos

public · Issues · Pulls · Labels · Forks · Compare · Actions success · Badges · Packages

build: bump OTP to 27.3.4.11 (27.2 breaks mix local.hex TLS to hex.pm)

f0eac3b · gmorell · 2026-06-27 15:41

4 files +8 -4

Files changed

modified .github/workflows/ci.yml

+3 −2

@@ -42,9 +42,10 @@ jobs:

42	42
43	43	- uses: erlef/setup-beam@v1
44	44	with:
45		− # Match the build image in the Dockerfile.
	45	+ # Match the build image in the Dockerfile (OTP >= 27.3.3; 27.2 breaks
	46	+ # `mix local.hex` against hex.pm's current TLS chain).
46	47	elixir-version: "1.17.3"
47		− otp-version: "27.2"
	48	+ otp-version: "27.3.4.11"
48	49
49	50	- uses: actions/cache@v4
50	51	with:

modified Dockerfile

+5 −2

@@ -4,9 +4,12 @@

4	4	# - https://hub.docker.com/r/hexpm/elixir/tags
5	5	# - https://hub.docker.com/_/debian?tab=tags&page=1&name=bookworm
6	6	#
	7	+# NOTE: OTP must be >= 27.3.3. Earlier 27.x releases (incl. 27.2) reject the
	8	+# Let's Encrypt / ISRG "Root YR" cross-signed chain now served by hex.pm with a
	9	+# TLS "key_usage_mismatch" error, breaking `mix local.hex` / `mix deps.get`.
7	10	ARG ELIXIR_VERSION=1.17.3
8		−ARG OTP_VERSION=27.2
9		−ARG DEBIAN_VERSION=bookworm-20241223-slim
	11	+ARG OTP_VERSION=27.3.4.11
	12	+ARG DEBIAN_VERSION=bookworm-20260610-slim
10	13
11	14	ARG BUILDER_IMAGE="hexpm/elixir:${ELIXIR_VERSION}-erlang-${OTP_VERSION}-debian-${DEBIAN_VERSION}"
12	15	ARG RUNNER_IMAGE="debian:${DEBIAN_VERSION}"

Parents: 6ea69de