Conversation
WalkthroughThe Dockerfile was updated to change the version of the yellowstone-grpc Solana geyser plugin being downloaded and installed. The version was incremented from Changes
Possibly related PRs
Suggested reviewers
Poem
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
There was a problem hiding this comment.
Actionable comments posted: 0
🧹 Nitpick comments (1)
Dockerfile (1)
12-12: Use robust curl flags and add checksum verification.Enhance reliability and security by:
- Using
curl -fSL --retry 3 --retry-delay 5to fail on HTTP errors, follow redirects silently, and retry transient failures.- Verifying the downloaded tarball against a published SHA256 checksum or GPG signature before extraction.
Example diff:
- curl -L -o /tmp/yellowstone-grpc.tar.bz2 \ + curl -fSL --retry 3 --retry-delay 5 -o /tmp/yellowstone-grpc.tar.bz2 \ "https://github.com/rpcpool/yellowstone-grpc/releases/download/v6.0.0+solana.2.2.12/yellowstone-grpc-geyser-release22-x86_64-unknown-linux-gnu.tar.bz2" && \ + # TODO: echo "$CHECKSUM /tmp/yellowstone-grpc.tar.bz2" | sha256sum -c - && \
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
📒 Files selected for processing (1)
Dockerfile(1 hunks)
⏰ Context from checks skipped due to timeout of 90000ms (1)
- GitHub Check: guardrails/scan
🔇 Additional comments (2)
Dockerfile (2)
11-12: Approve bump tov6.0.0+solana.2.2.12.The Geyser plugin download URL has been correctly updated to the new release version.
12-12:Details
✅ Verification successful
Verify the new release tag upstream.
Please confirm that
v6.0.0+solana.2.2.12is published in therpcpool/yellowstone-grpcGitHub releases:
🏁 Script executed:
curl -s https://api.github.com/repos/rpcpool/yellowstone-grpc/releases | jq '.[].tag_name'Length of output: 777
Confirmed: Release tag
v6.0.0+solana.2.2.12is available upstream
- Verified via GitHub Releases API; the tag appears in the list of published releases.
This change can be merged as-is.
rpcpool/yellowstone-grpc@v6.0.0+solana.2.2.4...v6.0.0+solana.2.2.12
Summary by CodeRabbit