[joanagmaia]

Summary

Builds of the snowflake connectors worker image are failing on main. The runner stage's apt-get install -y ca-certificates gets a 404 for the openssl and ca-certificates packages from bullseye-security.

The image is based on node:24-bullseye-slim (Debian 11). Bullseye's long-term support ended on 2026-08-31 and its security repository is being archived: the package index still lists the updates, but the files behind them are gone. This PR moves the image to node:24-bookworm-slim (Debian 12), which most other Debian-based workers already use.

Changes

• Dockerfile.snowflake_connectors_worker: the builder and runner stages now use node:24-bookworm-slim.
• Dockerfile.pcc_sync_worker: the same change. It is the only other image still on bullseye, so it would fail the same way on its next build.
• The apt-get lines are unchanged and work on bookworm. Native modules are still compiled in the builder stage, on the same OS the runner uses.

Both images build locally, and the snowflake runner image starts on Debian 12.15 with CA certificates and Node 24.

Type of change

• Bug fix
• New feature
• Refactor / cleanup
• Performance improvement
• Chore / dependency update
• Documentation

Related issue

None: hotfix for a broken main build.

[cursor]

PR Summary

Low Risk
Infrastructure-only base image bump with no application code changes; aligns with existing worker images already on bookworm.

Overview
Fixes broken main builds for the snowflake connectors and PCC sync worker images by switching both Dockerfiles from node:24-bullseye-slim to node:24-bookworm-slim in the builder and runner stages.

Bullseye’s archived security repo was causing apt-get install ca-certificates to 404 during the runner stage; bookworm matches the rest of the Debian-based service workers. Build steps (apt-get, pnpm, native compile in builder) are unchanged—only the base image tag moves to Debian 12.

^{Reviewed by Cursor Bugbot for commit 5394a0e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[Copilot]

🟢 Approval recommended

The four base-image changes preserve builder/runtime alignment, with no blocking issues identified.

No open issues 🎉

What changed in this PR

Moves the Snowflake connectors and PCC sync worker images from Debian Bullseye to Bookworm to address package-install build failures.

Changes:

• Updates both builder and runner stages to node:24-bookworm-slim.
• Preserves Node 24, package installation commands, and matching build/runtime operating systems.

File	Description
scripts/​services/​docker/​Dockerfile.snowflake_connectors_worker	Moves both stages to Bookworm.
scripts/​services/​docker/​Dockerfile.pcc_sync_worker	Applies the same base-image update.

_{Review effort: Balanced}

[greptile-apps]

Confidence Score: 5/5

[Low impact] The PR appears safe to merge; no actionable issues were found.

Summary

Moves the PCC sync and Snowflake connectors worker images from Debian Bullseye to Bookworm.

• The Snowflake and PCC sync worker images now use Bookworm.

_{Reviews (1) · Last reviewed commit: "fix: move snowflake and pcc sync worker ..." · Reviewed by Greptile}