From 30c04c9cec1e709c5aadae647659720fcdb71c35 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Eric=20Meadows-J=C3=B6nsson?= Date: Sun, 31 May 2026 21:05:14 +0200 Subject: [PATCH] Bump Erlang/OTP to 27.3 OTP 27.2 rejects the new Let's Encrypt "Gen Y" certificate chain served by hex.pm with a TLS key_usage_mismatch error, due to an over-strict extended key usage check on intermediate CA certs. This crashed the docs upload pipeline (Hexpm.get_package/2) on every package release once hex.pm rotated onto the new chain. The fix shipped in OTP 27.2.2 (public_key OTP-19240, GH-9208); 27.3 is the latest multi-arch base image tag carrying it. Bump the Debian base date to match. --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 8fd36bc..d22b139 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ ARG ELIXIR_VERSION=1.18.1 -ARG ERLANG_VERSION=27.2 -ARG DEBIAN_VERSION=bookworm-20241223-slim +ARG ERLANG_VERSION=27.3 +ARG DEBIAN_VERSION=bookworm-20260518-slim FROM hexpm/elixir:${ELIXIR_VERSION}-erlang-${ERLANG_VERSION}-debian-${DEBIAN_VERSION} AS build