Freegle / Iznik / 7212

70%

push

circleci

docs: document Docker 27.5.1 pin on self-hosted runner

Docker 28+ introduced per-container DROP rules in raw PREROUTING that
break container-to-container networking on bridge networks, causing
Playwright renderer freezes and test timeouts. The self-hosted runner
is pinned to 27.5.1 via apt-mark hold.

Document this in CLAUDE.md and in the orb executor definition so future
maintainers know not to upgrade Docker on the runner without testing.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

13502 of 20446 branches covered (66.04%)

Branch coverage included in aggregate %.

97012 of 133122 relevant lines covered (72.87%)

21.92 hits per line