From c9ac83b2ba2f719b6e90561de307858ad8dc0cb5 Mon Sep 17 00:00:00 2001
From: Marcel <marcel@familienarchiv>
Date: Mon, 11 May 2026 11:58:34 +0200
Subject: [PATCH] fix(infra): pin axllent/mailpit tag

Removes `:latest` from the mailpit service; pins to v1.29.7 so staging
deploys are reproducible. Renovate keeps the tag current.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 docker-compose.prod.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index 25c7856b..539e9f84 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -100,7 +100,8 @@ services:
   # Dev-only mail catcher; gated behind the staging profile so production
   # never starts it. Staging workflow runs with `--profile staging`.
   mailpit:
-    image: axllent/mailpit:latest
+    # Pinned for reproducibility; Renovate bumps the tag.
+    image: axllent/mailpit:v1.29.7
     restart: unless-stopped
     profiles: ["staging"]
     networks: