Pin bootc to a git tag

We had a problem in the previous release with having bootc float on a git commit because it ends up meaning "whatever happens to be on the developer's machine" when cutting a release, which is not OK from a reproducibility PoV. Dependabot I think can help us update this.
coreos · Sep 11, 2023 · c70c9cd · c70c9cd
1 parent 5500157
commit c70c9cd
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -45,7 +45,7 @@ rpm = "4"
 anyhow = "1.0.69"
 binread = "2.2.0"
 bitflags = "2.3"
-bootc = { git = "https://github.com/containers/bootc.git", branch = "main", package = "bootc-lib"}
+bootc = { git = "https://github.com/containers/bootc.git", tag = "v0.1", package = "bootc-lib"}
 camino = "1.1.6"
 cap-std-ext = "2.0"
 cap-std = { version = "1.0.3", features = ["fs_utf8"] }