)]}'
{
  "commit": "ddc4bfe659daf036b16333f68a58dcd889af8a5f",
  "tree": "18a92045d93be918a52d0c01879417612c9b6ae6",
  "parents": [
    "23ae9c606938017d28c1dfb37800dc52b194c4b0"
  ],
  "author": {
    "name": "Salma Samy",
    "email": "16399431+SalmaSamy@users.noreply.github.com",
    "time": "Wed Jul 01 21:11:03 2026 +0200"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Wed Jul 01 21:11:03 2026 +0200"
  },
  "message": "Create the docker group with GID ensure a stable GID across all containers (#2703)\n\nA security update hardened the host VM\u0027s Docker socket to 0660\n(accessible only by the docker group). Because Buildkite runs your build\nsteps inside Docker containers under a custom user ID, Docker\nautomatically dropped the host\u0027s docker group membership from the\ncontainerized processes, blocking them from accessing the socket and\ncausing build failures.\n\nThe Fix\nTo restore socket access inside the build containers without\ncompromising security:\nVM Host Setup (setup-docker.sh): Pre-created the docker group on the GCE\nhost VM with a fixed, stable Group ID (GID 999).\nCI Pipeline Config (bazelci.py): Added \"additional-groups\": [\"999\"] to\nthe Buildkite Docker plugin. This forces Docker to attach GID 999 to the\ncontainer process. Using a GID number instead of the group name \"docker\"\nbypasses GID name-lookup issues inside base compiler images (like\nFedora).\n\nRelease Pipeline (pipelines/docker-update.yml): Applied the same\n\"additional-groups\": [\"999\"] fix to prevent future automated release\npipeline failures.",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "c9945e95e7e4ad0dae43a5743defc6e650dc2393",
      "old_mode": 33261,
      "old_path": "buildkite/bazelci.py",
      "new_id": "315300992a8289b01d40c40a7bf0dc3e261826af",
      "new_mode": 33261,
      "new_path": "buildkite/bazelci.py"
    },
    {
      "type": "modify",
      "old_id": "e367d73c1f1927293b6613e353a71d83f6baa739",
      "old_mode": 33261,
      "old_path": "buildkite/setup-docker.sh",
      "new_id": "0ecd5178ad2884737944786da8979822efa59752",
      "new_mode": 33261,
      "new_path": "buildkite/setup-docker.sh"
    },
    {
      "type": "modify",
      "old_id": "ab59981fc26d0586f1d35f687a7ef6214e25ae77",
      "old_mode": 33188,
      "old_path": "pipelines/docker-update.yml",
      "new_id": "ae3d5d01c2cd809f8cc21963d3385ed2d7ef3789",
      "new_mode": 33188,
      "new_path": "pipelines/docker-update.yml"
    }
  ]
}