Why Lychee checked 336 links in CI and 6,633 locally
An unquoted recursive glob made Lychee scan seven shallow HTML files in GitHub Actions while the quoted local command reached the full generated Astro site.
Development#lychee#ci#github-actions
_EXPERIMENTAL_DAGGER_CACHE_CONFIG is inert in Dagger 0.21
A source trace explains why Dagger's BuildKit cache bridge works on 0.20.1, disappears in 0.21, and leaves type=gha with no effect.
Development#dagger#caching#buildkitPractical cache strategies for ephemeral Dagger CI
A decision guide to persistent engines, host-side cache bridges, registry proxies, and cold execution after Dagger 0.21 removed BuildKit remote export.
Development#dagger#caching#ciHardcoded tool versions in a GitHub Actions step drift from mise.lock under Renovate
Renovate bumps mise.lock but a version pinned inside a workflow run step stays stale, and MISE_LOCKED=1 then aborts. Install tools by name and let the lockfile decide.
Today I Learned#mise#github-actions#renovateAdding Dagger CI to a Polyglot Monorepo
Porting my Dagger module to a repo with a uv Python service and pnpm frontends broke the lockfile-first cache trick, because uv builds the project at install time and pnpm does not.
Development#dagger#ci#pythonAdding Dagger CI to an Astro Blog
One container, ten checks, local/CI parity, and three bugs that taught me how Dagger works.
Development#dagger#ci#astroFixing zizmor findings without suppressions
Three fix patterns for common zizmor findings: creating environments via gh api, hardening git auth with remote set-url, and replacing third-party actions with native commands.
Development#zizmor#security#supply-chainzizmor's auditor persona surfaces findings the default persona hides
Running zizmor --persona=auditor surfaced six findings across two repos that the default persona and --pedantic flag both missed.
Today I Learned#zizmor#security#supply-chain