glitchtip: pin image to 6.1.6 for reproducibility; HANDOFF observability complete

deploy/glitchtip/README.md

@@ -43,7 +43,8 @@ Supabase's Kong gateway on 8000; no public surface). Reach it either by:
 
 - Resources: the capped stack needs roughly 1.5-2 GB RAM. On a small host add
   swap first.
-- Reproducibility: pin the `glitchtip/glitchtip` image to a release tag in
-  `docker-compose.yml` for production (it ships as `latest` so a fresh clone
-  runs without edits).
-- Updates: `docker compose pull && docker compose up -d` (re-runs `migrate`).
+- Reproducibility: the `glitchtip/glitchtip` image is pinned to a release tag
+  in `docker-compose.yml` (currently `6.1.6`). Bump it deliberately rather than
+  tracking `latest`.
+- Updates: edit the pinned tag, then `docker compose pull && docker compose up -d`
+  (re-runs `migrate`).

deploy/glitchtip/docker-compose.yml

@@ -11,9 +11,9 @@
 # Then register the first user (open http://localhost:GLITCHTIP_PORT), create an
 # organization + project, copy its DSN into the app's SENTRY_DSN, restart the app.
 #
-# Reproducibility: pin `glitchtip/glitchtip` to a release tag for production
-# (see https://gitlab.com/glitchtip/glitchtip for versions); `latest` is used
-# here so a fresh clone runs without edits.
+# Reproducibility: the `glitchtip/glitchtip` image is pinned to a release tag
+# (bump it deliberately, then `docker compose pull && up -d`). See
+# https://gitlab.com/glitchtip/glitchtip for versions.
 name: glitchtip
 
 services:
@@ -39,7 +39,7 @@ services:
     mem_limit: 128m
 
   migrate:
-    image: glitchtip/glitchtip:latest
+    image: glitchtip/glitchtip:6.1.6
     command: ./manage.py migrate
     restart: 'no'
     env_file: [.env]
@@ -51,7 +51,7 @@ services:
         condition: service_healthy
 
   web:
-    image: glitchtip/glitchtip:latest
+    image: glitchtip/glitchtip:6.1.6
     restart: unless-stopped
     mem_limit: 768m
     env_file: [.env]
@@ -72,7 +72,7 @@ services:
         condition: service_completed_successfully
 
   worker:
-    image: glitchtip/glitchtip:latest
+    image: glitchtip/glitchtip:6.1.6
     command: ./bin/run-celery-with-beat.sh
     restart: unless-stopped
     mem_limit: 640m