From a1c56d3d09b0199ccb88074548f7a1892a18010d Mon Sep 17 00:00:00 2001
From: Hendrik Brombeer <20863417+hbrombeer@users.noreply.github.com>
Date: Sat, 17 Oct 2026 11:42:42 +0200
Subject: [PATCH] fix(build): resolve dependencies through the runner mirror in
 Docker builds

Mount the runners' Maven mirror init script, which the shared Docker
workflow passes as the BuildKit secret gradle_init, into the Gradle RUN.
Image builds then resolve through the mirror instead of Maven Central,
which has been failing release builds with 429s. Without the secret the
mount is skipped and Gradle resolves from upstream as before.
---
 Dockerfile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Dockerfile b/Dockerfile
index 6c5ddbcb..b7b392fc 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,6 +15,7 @@ COPY buildsystem-grounds ./buildsystem-grounds
 
 RUN --mount=type=cache,target=/root/.gradle \
     --mount=type=secret,id=github_token,required=true \
+    --mount=type=secret,id=gradle_init,target=/root/.gradle/init.d/grounds-maven-mirror.init.gradle.kts,required=false \
     GITHUB_ACTOR="$GITHUB_USER" GITHUB_TOKEN="$(cat /run/secrets/github_token)" \
     ./gradlew --no-daemon clean :buildsystem-core:shadowJar :buildsystem-grounds:shadowJar && \
     test "$(find build/libs -maxdepth 1 -type f -name 'BuildSystem-*.jar' | wc -l)" -eq 1 && \