ci: remove authup version

[brucetony]

Summary by CodeRabbit

• Chores
  • Updated Docker Compose configuration for the authup service image reference.

[coderabbitai]

📝 Walkthrough

Walkthrough

Updated the authup Docker service image reference in the hub docker-compose configuration from a specific tagged version (authup/authup:next) to the latest untagged version (authup/authup), affecting the Docker Compose setup for system tests.

Changes

Cohort / File(s)	Summary
Docker Compose Configuration system-tests/environment/hub/hub-docker-compose.yml	Updated authup service image from authup/authup:next to authup/authup, removing the version tag to use the latest image.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 A docker tag takes flight,
From :next to plain sight,
Latest image now in place,
The hub runs at quickened pace! 🚀

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'ci: remove authup version' directly and specifically describes the main change: removing the version tag from the authup service image in the docker-compose configuration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch fix-ci

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@system-tests/environment/hub/hub-docker-compose.yml`:
- Line 62: Replace the floating image reference "image: authup/authup" with a
deterministic, pinned image reference: either hard-pin to a specific digest
(e.g., authup/authup@sha256:...) or make it configurable via an environment
variable (e.g., use AUTHUP_IMAGE and fall back to a pinned default) so CI runs
use an immutable Authup image; update the docker-compose service definition that
currently contains "image: authup/authup" to use the chosen pinned or
env-substituted value.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 1131ea0b-9028-433c-a8da-fc7bc358128e

📥 Commits

Reviewing files that changed from the base of the PR and between 1ccce90 and aaaeecd.

📒 Files selected for processing (1)

• system-tests/environment/hub/hub-docker-compose.yml

[coderabbitai]

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Verify the changed compose line
echo "=== Checking hub-docker-compose.yml lines 58-66 ==="
fd hub-docker-compose.yml --exec sed -n '58,66p' {}

echo ""
echo "=== Searching for authup/authup references in the repository ==="
rg -n -C2 'authup/authup(:|@|$)' 2>/dev/null || echo "No matches found or pattern error"

echo ""
echo "=== File structure check ==="
fd hub-docker-compose.yml --exec wc -l {}

Repository: PrivateAIM/node-message-broker

Length of output: 771

---

🌐 Web query:

authup Docker Hub image latest tag digest registry

💡 Result:

• Registry / image name (Docker Hub): docker.io/authup/authup (hub.docker.com)
• Latest tag: latest (last pushed “6 days” ago on Docker Hub at time of lookup) (hub.docker.com)
• Digests for authup/authup:latest (per platform shown on Docker Hub):
  • linux/amd64: sha256:db1f4f9d6aeb49674705f7a18573a94e9c5acddf084f74653c2194feda224a56 (hub.docker.com)
  • linux/arm64: sha256:cac3286458351aa483bca59bdf33e2372d021afb9534aab4b9fb32e8b41f68f0 (hub.docker.com)

To pin by digest, use the @sha256:... form (e.g., authup/authup@sha256:...). (docs.docker.com)

Citations:

• 1: https://hub.docker.com/r/authup/authup/tags
• 2: https://hub.docker.com/r/authup/authup/tags
• 3: https://hub.docker.com/r/authup/authup/tags
• 4: https://hub.docker.com/r/authup/authup/tags
• 5: https://docs.docker.com/dhi/core-concepts/digests/?utm_source=openai

---

Use an immutable Authup image reference for deterministic CI.

Line 62 uses an unqualified image reference (authup/authup) which resolves to the floating latest tag, causing non-deterministic system-test behavior across runs. Pin to a digest or inject a pinned value via CI environment variable.

Suggested change

-    image: authup/authup
+    image: ${AUTHUP_IMAGE:-authup/authup@sha256:db1f4f9d6aeb49674705f7a18573a94e9c5acddf084f74653c2194feda224a56}

📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

	image: authup/authup
	image: ${AUTHUP_IMAGE:-authup/authup@sha256:db1f4f9d6aeb49674705f7a18573a94e9c5acddf084f74653c2194feda224a56}

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@system-tests/environment/hub/hub-docker-compose.yml` at line 62, Replace the
floating image reference "image: authup/authup" with a deterministic, pinned
image reference: either hard-pin to a specific digest (e.g.,
authup/authup@sha256:...) or make it configurable via an environment variable
(e.g., use AUTHUP_IMAGE and fall back to a pinned default) so CI runs use an
immutable Authup image; update the docker-compose service definition that
currently contains "image: authup/authup" to use the chosen pinned or
env-substituted value.