Document dispatch filters and fix pr workflow exit code

- Update image-version input descriptions to note the automatic v
  prefix strip.
- Fix swallowed exit code in bakery-build-pr.yml (same echo+subshell
  pattern as the build workflows).
- Add image-version and dev-stream to both input tables in CI.md.
- Add "Dispatched version doesn't match bakery" to CLAUDE.md CI
  failure modes.

Author: bschwedler

.github/workflows/bakery-build-native.yml

@@ -28,7 +28,7 @@ on:
         required: false
         type: string
       image-version:
-        description: "Filter to a specific image version (e.g. product version from upstream dispatch)"
+        description: "Filter to a specific image version. A leading 'v' is stripped automatically."
         default: ""
         required: false
         type: string

.github/workflows/bakery-build-pr.yml

@@ -113,7 +113,8 @@ jobs:
           MATRIX_VERSIONS: ${{ inputs.matrix-versions }}
           BAKERY_CONTEXT: ${{ inputs.context }}
         run: |
-          echo "versions_matrix=$(bakery ci matrix --quiet --dev-versions "$DEV_VERSIONS" --matrix-versions "$MATRIX_VERSIONS" --exclude platform --context "$BAKERY_CONTEXT" | jq --compact-output .)" >> "$GITHUB_OUTPUT"
+          result=$(bakery ci matrix --quiet --dev-versions "$DEV_VERSIONS" --matrix-versions "$MATRIX_VERSIONS" --exclude platform --context "$BAKERY_CONTEXT")
+          echo "versions_matrix=$(echo "$result" | jq --compact-output .)" >> "$GITHUB_OUTPUT"
 
   build-test:
     name: "Build/Test ${{ matrix.img.image }}:${{ matrix.img.version }} (${{ matrix.img.platform }})"

.github/workflows/bakery-build.yml

@@ -29,7 +29,7 @@ on:
         required: false
         type: string
       image-version:
-        description: "Filter to a specific image version (e.g. product version from upstream dispatch)"
+        description: "Filter to a specific image version. A leading 'v' is stripped automatically."
         default: ""
         required: false
         type: string

CI.md

@@ -113,13 +113,15 @@ jobs:
       push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' || github.event.schedule == '0 4 * * *' }}
 ```
 #### Inputs
-| Input          | Required | Default         | Description                                                                                                    |
-|----------------|----------|-----------------|----------------------------------------------------------------------------------------------------------------|
-| `version`      | No       | `main`          | The version of Posit Bakery to use. Can be a specific version (e.g., `0.1.0`) or a branch name (e.g., `main`). |
-| `context`      | No       | `.`             | The path to the Bakery project root.                                                                           |
-| `dev-versions` | No       | `include`       | Whether to include development versions in the build. Options are `include`, `exclude`, and `only`.            |
-| `push`         | No       | `false`         | Whether to push built images to the registry.                                                                  |
-| `runs-on`      | No       | `ubuntu-latest` | The type of runner to use for the build jobs.                                                                  |
+| Input            | Required | Default         | Description                                                                                                    |
+|------------------|----------|-----------------|----------------------------------------------------------------------------------------------------------------|
+| `version`        | No       | `main`          | The version of Posit Bakery to use. Can be a specific version (e.g., `0.1.0`) or a branch name (e.g., `main`). |
+| `context`        | No       | `.`             | The path to the Bakery project root.                                                                           |
+| `dev-versions`   | No       | `include`       | Whether to include development versions in the build. Options are `include`, `exclude`, and `only`.            |
+| `image-version`  | No       | (empty)         | Filter to a specific image version. A leading `v` is stripped automatically. When set and no version matches, the matrix step fails. |
+| `dev-stream`     | No       | (empty)         | Filter dev versions to a specific release stream (e.g. `daily`, `preview`).                                    |
+| `push`           | No       | `false`         | Whether to push built images to the registry.                                                                  |
+| `runs-on`        | No       | `ubuntu-latest` | The type of runner to use for the build jobs.                                                                  |
 
 #### Workflow Steps
 
@@ -240,6 +242,8 @@ jobs:
 | `version`       | No       | `main`                      | The version of Posit Bakery to use. Can be a specific version (e.g., `0.1.0`) or a branch name (e.g., `main`). |
 | `context`       | No       | `.`                         | The path to the Bakery project root.                                                                           |
 | `dev-versions`  | No       | `include`                   | Whether to include development versions in the build. Options are `include`, `exclude`, and `only`.            |
+| `image-version` | No       | (empty)                     | Filter to a specific image version. A leading `v` is stripped automatically. When set and no version matches, the matrix step fails. |
+| `dev-stream`    | No       | (empty)                     | Filter dev versions to a specific release stream (e.g. `daily`, `preview`).                                    |
 | `push`          | No       | `false`                     | Whether to push built images to the registry.                                                                  |
 | `runs-on`       | No       | `ubuntu-latest`             | The type of runner to use for non-build jobs.                                                                  |
 | `amd64-builder` | No       | `ubuntu-latest-4x`          | The type of runner to use for amd64 build jobs.                                                                |

CLAUDE.md

@@ -220,3 +220,4 @@ gh run view <run-id> -R posit-dev/images-connect --log-failed
 - **Stale UV base image cache** — The Python build stage uses `ghcr.io/astral-sh/uv:debian-slim` as its base image. Docker layer caching may preserve an older UV version that doesn't know about newer Python releases. Even if UV upstream supports a Python version, a cached builder layer may not. Fix: the `clean.yml` workflow removes caches older than 14 days, but you can force a fresh build by clearing the cache registry (`bakery clean cache-registry ghcr.io/posit-dev`).
 - **Registry auth failures** — Docker Hub requires `DOCKER_HUB_ACCESS_TOKEN` secret; ECR requires AWS OIDC (`id-token: write` permission + `AWS_ROLE` secret).
 - **ARM64 runner unavailable** — Native builds use `ubuntu-24.04-arm64-4-core` runners which may have capacity limits.
+- **Dispatched version doesn't match bakery** — Product repos dispatch with raw git-describe versions (e.g. `v2026.03.0-473-g072bb6fd1f`). Bakery normalizes these to semver-with-metadata (e.g. `2026.04.0-dev+473-g072bb6fd1f`). The shared workflows strip a leading `v` automatically, but other format differences (edition, `-dev` qualifier, `+` separator) mean `--image-version` requires the version string bakery knows, not the raw product version. If the matrix is empty after filtering, `bakery ci matrix` exits non-zero.