Freegle / Iznik / 7212 / 7212

70%

master: 70%

push

circleci

docs: document Docker 27.5.1 pin on self-hosted runner

Docker 28+ introduced per-container DROP rules in raw PREROUTING that
break container-to-container networking on bridge networks, causing
Playwright renderer freezes and test timeouts. The self-hosted runner
is pinned to 27.5.1 via apt-mark hold.

Document this in CLAUDE.md and in the orb executor definition so future
maintainers know not to upgrade Docker on the runner without testing.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

8986 of 10365 branches covered (86.7%)

Branch coverage included in aggregate %.

61738 of 98492 relevant lines covered (62.68%)

10.46 hits per line