build: update jade_builder docker image script to latest jade_builder_base
What the developer wrote
Authored by Daniel Newton
build: update jade_builder docker image script to latest jade_builder_base
Co-authored-by: Jon Griffiths <jon_p_griffiths@yahoo.com>
What changed, and why it matters
This is a routine build-system update. It changes the Dockerfile to use a newer internal base image and a newer version of Espressif's ESP-IDF toolchain. There is no indication of a security bug, vulnerability fix, or malicious change in the commit itself.
No security action required. Treat as a normal dependency/toolchain update and verify the new base image and ESP-IDF version through the project's standard build and QA process.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates the Blockstream Jade build container reference (blockstream/jade_builder_base SHA256) and bumps the ESP-IDF branch from v5.4 to v5.5.4 with a corresponding commit hash. It removes a workaround comment about an upstream Espressif Docker image that produced bad firmware for 1.x devices. The diff is limited to the Dockerfile and contains no source-code changes.
Changed components
Dockerfilebuild container image (blockstream/jade_builder_base)ESP-IDF toolchain versionInspect captured patch +3 / −12
diff --git a/Dockerfile b/Dockerfile
index 288d2e4..c04ab7c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,21 +2,12 @@
# $ docker build -t jade_builder .
#
-# FIXME: The idf built 5.4.3 docker images generates bad firmware images for 1.x
-# devices. Building this image ourselves (see gitlab/docker.yml) works,
-# so use our image instead until upstream is fixed.
-#ARG IDF_INSTALL_TARGETS=esp32,esp32s3
-#ARG IDF_CLONE_BRANCH_OR_TAG=v5.4.3
-#ARG IDF_CLONE_SHALLOW=1
-## Use the expressif-provided docker which gives us all the tooling plus qemu.
-#FROM espressif/idf:release-v5.4@sha256:11441b20e4a87dc722ad6d1ef5a920cf8901a62581d8c85a4299a4c0f142e1a3
-
# See gitlab/docker.yml to build this image yourself.
-FROM blockstream/jade_builder_base@sha256:6f64874834696a7af1f77019ab2aee400d351146bc0de8bbfc9f5b30bf8f7cf9
+FROM blockstream/jade_builder_base@sha256:17574abe64b0915026f324d8df40bf81a60406966b7841e55d3792967d596176
# These ARGs are easily parseable (eg by HWI)
-ARG ESP_IDF_BRANCH=v5.4
-ARG ESP_IDF_COMMIT=67c1de1eebe095d554d281952fde63c16ee2dca0
+ARG ESP_IDF_BRANCH=v5.5.4
+ARG ESP_IDF_COMMIT=735507283d5b2f9fb363a1901172dbd9e847945d
COPY requirements.txt /
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.