Hacker News Reader

I'm not sure of the details, but it has something to do with the modern way of CI/CD pulling in random 3rd party docker containers.

Sounds like your docker was pulling latest instead of a versioned tag. I'd update that and be happy this only cost you a few hours.