fix: use HTTP/1.1 for hermetic downloads #3

Merged
noel merged 1 commit from fix/hermetic-http1-downloads into main 2026-08-12 14:17:53 +00:00
Owner

Two isolated builds reset the Helm transfer at the same ~188-second boundary, while a checksum-verified HTTP/1.1 probe from the same non-root pod completed in two seconds. Force HTTP/1.1 for all four exact artifact downloads. Bounded retries, TLS requirements, URLs, versions, and pinned checksums remain unchanged.

Validated with exactly four HTTP/1.1 fetches, diff checks, the live checksum probe, and a redacted working-tree secret scan.

Two isolated builds reset the Helm transfer at the same ~188-second boundary, while a checksum-verified HTTP/1.1 probe from the same non-root pod completed in two seconds. Force HTTP/1.1 for all four exact artifact downloads. Bounded retries, TLS requirements, URLs, versions, and pinned checksums remain unchanged. Validated with exactly four HTTP/1.1 fetches, diff checks, the live checksum probe, and a redacted working-tree secret scan.
noel merged commit 546b2ad568 into main 2026-08-12 14:17:53 +00:00
noel deleted branch fix/hermetic-http1-downloads 2026-08-12 14:17:53 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
noel/act-node-docker!3
No description provided.