From 8f150a8919400a8a705a4e1fce88104cb5e15111 Mon Sep 17 00:00:00 2001
From: sebasnallar <sebastiansaidnallar@gmail.com>
Date: Wed, 26 Aug 2026 11:15:10 -0300
Subject: [PATCH] fix(docker): bump tofu to 1.10.10 and retry its download

Picks up the 1.10.x bugfix releases past the pinned 1.10.6, and adds
curl retries so a transient network failure no longer breaks the image
build.
---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 58a2470..4fcb853 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -13,9 +13,9 @@ RUN apk add --no-cache aws-cli gomplate
 # OpenTofu >= 1.10 — the scope inits its S3 backend with use_lockfile=true
 # (lambda/scope/tofu/provider/aws/setup), which needs tofu 1.10+. alpine 3.20
 # only packages 1.7.2, so pull the official static binary for the build arch.
-ARG TOFU_VERSION=1.10.6
+ARG TOFU_VERSION=1.10.10
 ARG TARGETARCH
-RUN curl -fsSL "https://github.com/opentofu/opentofu/releases/download/v${TOFU_VERSION}/tofu_${TOFU_VERSION}_linux_${TARGETARCH}.tar.gz" \
+RUN curl -fsSL --retry 3 --retry-delay 2 "https://github.com/opentofu/opentofu/releases/download/v${TOFU_VERSION}/tofu_${TOFU_VERSION}_linux_${TARGETARCH}.tar.gz" \
       | tar -xz -C /usr/local/bin tofu \
     && tofu version