The CI jobs run in the runner image (#120, step 2): lithosananke-runner:72b6cf370db1, built and published by runner-image.yml (run 170), with everything make ARCH=amd64,aarch64,riscv64 init INIT_DOCS=0 installs, Isabelle and syft, and Maven already in it. The install steps are gone from acceptance.yml, build.yml and nightly.yml; nightly-docs.yml and release.yml still install the documents' packages, but no longer Maven. The registry refuses anonymous pulls, so each job pulls with the PACKAGES_TOKEN secret.
## What and why
The CI jobs run in the runner image (#120, step 2): `lithosananke-runner:72b6cf370db1`, built and published by `runner-image.yml` (run 170), with everything `make ARCH=amd64,aarch64,riscv64 init INIT_DOCS=0` installs, Isabelle and syft, and Maven already in it. The install steps are gone from `acceptance.yml`, `build.yml` and `nightly.yml`; `nightly-docs.yml` and `release.yml` still install the documents' packages, but no longer Maven. The registry refuses anonymous pulls, so each job pulls with the `PACKAGES_TOKEN` secret.
Part of #120
## Acceptance
The **Acceptance** check on this pull request is itself the proof: it is the first run in the new image.
- [ ] Logs from runs made by hand are committed in `logs/`, if any -- none
- [ ] Hardware this was tried on, if any: none (CI only)
## The record
- [ ] `docs/fabric/FABRIC-3.md` has the ruling and what was built, if this is design work -- not design work
- [x] `CHANGELOG.md`, if it is a milestone -- 2026-11-07 entry
- [x] Nothing in this PR is a fix nobody asked for (`.claude/CLAUDE.md`, Hard Rules) -- asked for 2026-11-07
🤖 Generated with [Claude Code](https://claude.com/claude-code)
https://claude.ai/code/session_01GE3SDvQn5EoxdGufk84zz2
The workflows' containers are now lithosananke-runner:72b6cf370db1, built
and published by runner-image.yml, with everything init installs and Maven
already in it; the install steps are gone, except the documents' packages in
nightly-docs.yml and release.yml. The registry refuses anonymous pulls, so
each job pulls with PACKAGES_TOKEN.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GE3SDvQn5EoxdGufk84zz2
rajames
merged commit d936420dfa into master2026-11-07 01:30:34 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
What and why
The CI jobs run in the runner image (#120, step 2):
lithosananke-runner:72b6cf370db1, built and published byrunner-image.yml(run 170), with everythingmake ARCH=amd64,aarch64,riscv64 init INIT_DOCS=0installs, Isabelle and syft, and Maven already in it. The install steps are gone fromacceptance.yml,build.ymlandnightly.yml;nightly-docs.ymlandrelease.ymlstill install the documents' packages, but no longer Maven. The registry refuses anonymous pulls, so each job pulls with thePACKAGES_TOKENsecret.Part of #120
Acceptance
The Acceptance check on this pull request is itself the proof: it is the first run in the new image.
logs/, if any -- noneThe record
docs/fabric/FABRIC-3.mdhas the ruling and what was built, if this is design work -- not design workCHANGELOG.md, if it is a milestone -- 2026-11-07 entry.claude/CLAUDE.md, Hard Rules) -- asked for 2026-11-07🤖 Generated with Claude Code
https://claude.ai/code/session_01GE3SDvQn5EoxdGufk84zz2