build: update jade_builder_base docker image to esp-idf v5.5.4
What the developer wrote
Authored by Daniel Newton
build: update jade_builder_base docker image to esp-idf v5.5.4
What changed, and why it matters
This commit simply updates the version of Espressif's ESP-IDF development framework used to build Jade's Docker builder image, from v5.4.3 to v5.5.4. There is no indication in the commit of any security issue, vulnerability, or functional code change.
No security action required. Treat as a normal dependency/toolchain update and verify the build still succeeds.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies gitlab/docker.yml to download the ESP-IDF v5.5.4 Dockerfile/entrypoint and set the build argument IDF_CLONE_BRANCH_OR_TAG to v5.5.4 instead of v5.4. This is a routine build-toolchain version bump with no source code or security-relevant changes visible in the commit.
Changed components
gitlab/docker.ymljade_builder_base Docker image build configurationInspect captured patch +3 / −3
diff --git a/gitlab/docker.yml b/gitlab/docker.yml
index 899d77c..e02ecc0 100644
--- a/gitlab/docker.yml
+++ b/gitlab/docker.yml
@@ -18,11 +18,11 @@ build_jade_builder_base:
script:
- mkdir tmp
- cd tmp
- - wget https://github.com/espressif/esp-idf/raw/refs/tags/v5.4.3/tools/docker/Dockerfile
- - wget https://github.com/espressif/esp-idf/raw/refs/tags/v5.4.3/tools/docker/entrypoint.sh
+ - wget https://github.com/espressif/esp-idf/raw/refs/tags/v5.5.4/tools/docker/Dockerfile
+ - wget https://github.com/espressif/esp-idf/raw/refs/tags/v5.5.4/tools/docker/entrypoint.sh
- docker build
--network=host
- --build-arg IDF_CLONE_BRANCH_OR_TAG=v5.4
+ --build-arg IDF_CLONE_BRANCH_OR_TAG=v5.5.4
--build-arg IDF_CLONE_SHALLOW=1
--build-arg IDF_INSTALL_TARGETS=esp32,esp32s3
-t blockstream/jade_builder_base:${CI_COMMIT_SHA}
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.