94243ad3f6
📦 Preview packages (pkg.pr.new) / Build and publish previews (push) Has been cancelled
Assert the base image codename matches the pinned suite with an error naming the escape hatch, scope archive trust to the Debian keyring with signed-by, retry apt fetches, allow user pins of default packages to downgrade past the already-installed version, repair dpkg state after instructions when no user packages install, and bump the snapshot so images carry the latest ca-certificates security update. A test now fails when the pinned snapshot is over 90 days old, and the aptGet docs note that packages resolve against the pinned snapshot.