feat: emit node platform build info event (#21606)

* feat: emit node platform build info event

* fix: update node-platform dependency versions across modules

* feat: emit docker image tag in node platform build info

* fix: update node-platform dependency versions across all modules

* test: update health response fixtures for node platform build info

* test: update health testscripts for node platform build info

* refactor: read node platform docker tag from runtime env

* refactor: tighten node platform build info service wiring

* fix: resolve node platform CSA key at service start

* refactor: consume auto-injected docker tag from shared github workflows

* chore: align github workflow refs with upstream shared actions

Author: gheorghestrimtu

.github/workflows/build-publish.yml

@@ -96,7 +96,7 @@ jobs:
     permissions:
       contents: read
       id-token: write
-    uses: smartcontractkit/.github/.github/workflows/reusable-docker-build-publish.yml@a89ebdd9d9cabda77c5f7ea7523af5707afb7786 # 2025-08-25
+    uses: smartcontractkit/.github/.github/workflows/reusable-docker-build-publish.yml@f4ff50d0f4713ed7b247dbd8a58316484907f958 # 2026-01-13
     with:
       aws-ecr-name: chainlink
       aws-region-ecr: us-east-1
@@ -131,7 +131,7 @@ jobs:
     permissions:
       contents: read
       id-token: write
-    uses: smartcontractkit/.github/.github/workflows/reusable-docker-build-publish.yml@a89ebdd9d9cabda77c5f7ea7523af5707afb7786 # 2025-08-25
+    uses: smartcontractkit/.github/.github/workflows/reusable-docker-build-publish.yml@f4ff50d0f4713ed7b247dbd8a58316484907f958 # 2026-01-13
     with:
       aws-ecr-name: ccip
       aws-region-ecr: us-east-1

.github/workflows/client-compatibility-tests.yml

@@ -349,7 +349,7 @@ jobs:
           persist-credentials: false
           ref: ${{ needs.select-versions.outputs.chainlink_version }}
       - name: Build Chainlink Image
-        uses: smartcontractkit/.github/actions/ctf-build-image@b7be49d6f54ce0990354931ee1e4c8624f3f406e # v1.4.0 (not released yet)
+        uses: smartcontractkit/.github/actions/ctf-build-image@ctf-build-image/v1
         with:
           image-tag: ${{ inputs.chainlinkVersion || needs.select-versions.outputs.chainlink_image_version || github.sha }}
           dockerfile: core/chainlink.Dockerfile

.github/workflows/docker-build.yml

@@ -34,6 +34,7 @@ jobs:
         }}
       runner-arm64: ${{ steps.runner-labels.outputs.runner-arm64 }}
       runner-amd64: ${{ steps.runner-labels.outputs.runner-amd64 }}
+      checked-out-sha: ${{ steps.checkout-sha.outputs.checked-out-sha }}
       version-tag: ${{ steps.version-info.outputs.version-tag }}
     steps:
       - name: Get PR Labels
@@ -65,6 +66,12 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          ref: ${{ inputs.git-ref || github.sha }}
+
+      - name: Resolve checked out SHA
+        id: checkout-sha
+        shell: bash
+        run: echo "checked-out-sha=$(git rev-parse HEAD)" | tee -a "$GITHUB_OUTPUT"
 
       - name: Version Info
         id: version-info
@@ -88,10 +95,10 @@ jobs:
       docker-build-context: .
       docker-build-args: |
         CHAINLINK_USER=chainlink
-        COMMIT_SHA=${{ github.sha }}
+        COMMIT_SHA=${{ needs.init.outputs.checked-out-sha }}
         VERSION_TAG=${{ needs.init.outputs.version-tag }}
       docker-manifest-sign: true
-      git-sha: ${{ inputs.git-ref || github.sha }}
+      git-sha: ${{ needs.init.outputs.checked-out-sha }}
       github-event-name: ${{ github.event_name }}
       github-ref-name: ${{ github.ref_name }}
       github-ref-type: ${{ github.ref_type}}
@@ -120,12 +127,12 @@ jobs:
       docker-build-context: .
       docker-build-args: |
         CHAINLINK_USER=chainlink
-        COMMIT_SHA=${{ github.sha }}
+        COMMIT_SHA=${{ needs.init.outputs.checked-out-sha }}
         VERSION_TAG=${{ needs.init.outputs.version-tag }}
         CL_INSTALL_PRIVATE_PLUGINS=true
       docker-manifest-sign: true
       docker-tag-custom-suffix: "-plugins"
-      git-sha: ${{ inputs.git-ref || github.sha }}
+      git-sha: ${{ needs.init.outputs.checked-out-sha }}
       github-event-name: ${{ github.event_name }}
       github-ref-name: ${{ github.ref_name }}
       github-ref-type: ${{ github.ref_type}}
@@ -154,13 +161,13 @@ jobs:
       docker-build-context: .
       docker-build-args: |
         CHAINLINK_USER=chainlink
-        COMMIT_SHA=${{ github.sha }}
+        COMMIT_SHA=${{ needs.init.outputs.checked-out-sha }}
         VERSION_TAG=${{ needs.init.outputs.version-tag }}
         CL_INSTALL_PRIVATE_PLUGINS=true
         CL_INSTALL_TESTING_PLUGINS=true
       docker-manifest-sign: true
       docker-tag-custom-suffix: "-plugins-testing"
-      git-sha: ${{ inputs.git-ref || github.sha }}
+      git-sha: ${{ needs.init.outputs.checked-out-sha }}
       github-event-name: ${{ github.event_name }}
       github-ref-name: ${{ github.ref_name }}
       github-ref-type: ${{ github.ref_type}}
@@ -189,13 +196,13 @@ jobs:
       docker-build-context: .
       docker-build-args: |
         CHAINLINK_USER=chainlink
-        COMMIT_SHA=${{ github.sha }}
+        COMMIT_SHA=${{ needs.init.outputs.checked-out-sha }}
         VERSION_TAG=${{ needs.init.outputs.version-tag }}
         CL_INSTALL_PRIVATE_PLUGINS=true
         CL_CHAIN_DEFAULTS=/ccip-config
         CL_SOLANA_CMD=
       docker-manifest-sign: true
-      git-sha: ${{ inputs.git-ref || github.sha }}
+      git-sha: ${{ needs.init.outputs.checked-out-sha }}
       github-event-name: ${{ github.event_name }}
       github-ref-name: ${{ github.ref_name }}
       github-ref-type: ${{ github.ref_type}}
@@ -224,13 +231,13 @@ jobs:
       docker-build-context: .
       docker-build-args: |
         CHAINLINK_USER=chainlink
-        COMMIT_SHA=${{ github.sha }}
+        COMMIT_SHA=${{ needs.init.outputs.checked-out-sha }}
         VERSION_TAG=${{ needs.init.outputs.version-tag }}
         CL_INSTALL_PRIVATE_PLUGINS=true
         CL_CHAIN_DEFAULTS=/ccip-config
       docker-manifest-sign: true
       docker-tag-custom-suffix: "-plugins"
-      git-sha: ${{ inputs.git-ref || github.sha }}
+      git-sha: ${{ needs.init.outputs.checked-out-sha }}
       github-event-name: ${{ github.event_name }}
       github-ref-name: ${{ github.ref_name }}
       github-ref-type: ${{ github.ref_type}}

GNUmakefile

@@ -115,6 +115,7 @@ install-plugins-local: ## Build & install local plugins
 install-plugins: install-plugins-local install-plugins-public ## Build and install local and public plugins via loopinstall
 
 .PHONY: docker ## Build the chainlink docker image
+docker: DOCKER_TAG=develop
 docker:
 	@if ([ "$(CL_INSTALL_PRIVATE_PLUGINS)" = "true" ] || [ "$(CL_INSTALL_TESTING_PLUGINS)" = "true" ]) && [ -z "$(GITHUB_TOKEN)" ]; then \
 		echo "Error: GITHUB_TOKEN environment variable is required when CL_INSTALL_PRIVATE_PLUGINS=true or CL_INSTALL_TESTING_PLUGINS=true"; \
@@ -124,19 +125,22 @@ docker:
 	docker buildx build \
 	--build-arg COMMIT_SHA=$(COMMIT_SHA) \
 	--build-arg VERSION_TAG=$(VERSION_TAG) \
+	--build-arg CL_AUTO_DOCKER_TAG=$(DOCKER_TAG) \
 	--build-arg CL_INSTALL_PRIVATE_PLUGINS=$(CL_INSTALL_PRIVATE_PLUGINS) \
 	--build-arg CL_IS_PROD_BUILD=$(CL_IS_PROD_BUILD) \
 	$(PRIVATE_PLUGIN_ARGS) \
 	-f core/chainlink.Dockerfile . \
-	-t chainlink:develop \
+	-t chainlink:$(DOCKER_TAG) \
 	--load
 
 .PHONY: docker-ccip ## Build the chainlink docker image
+docker-ccip: DOCKER_TAG=latest
 docker-ccip:
 	docker buildx build \
 	--build-arg COMMIT_SHA=$(COMMIT_SHA) \
 	--build-arg VERSION_TAG=$(VERSION_TAG) \
-	-f core/chainlink.Dockerfile . -t chainlink-ccip:latest
+	--build-arg CL_AUTO_DOCKER_TAG=$(DOCKER_TAG) \
+	-f core/chainlink.Dockerfile . -t chainlink-ccip:$(DOCKER_TAG)
 
 	docker buildx build \
 	--build-arg COMMIT_SHA=$(COMMIT_SHA) \
@@ -146,6 +150,7 @@ docker-ccip:
 # Define a comma variable for use in $(eval) (needed for the PRIVATE_PLUGIN_ARGS)
 comma := ,
 .PHONY: docker-plugins ## Build the EXPERIMENTAL chainlink-plugins docker image
+docker-plugins: DOCKER_TAG=latest
 docker-plugins:
 	@if ([ "$(CL_INSTALL_PRIVATE_PLUGINS)" = "true" ] || [ "$(CL_INSTALL_TESTING_PLUGINS)" = "true" ]) && [ -z "$(GITHUB_TOKEN)" ]; then \
 		echo "Error: GITHUB_TOKEN environment variable is required when CL_INSTALL_PRIVATE_PLUGINS=true or CL_INSTALL_TESTING_PLUGINS=true"; \
@@ -155,11 +160,12 @@ docker-plugins:
 	docker buildx build \
 	--build-arg COMMIT_SHA=$(COMMIT_SHA) \
 	--build-arg VERSION_TAG=$(VERSION_TAG) \
+	--build-arg CL_AUTO_DOCKER_TAG=$(DOCKER_TAG) \
 	--build-arg CL_INSTALL_TESTING_PLUGINS=$(CL_INSTALL_TESTING_PLUGINS) \
 	--build-arg CL_INSTALL_PRIVATE_PLUGINS=$(CL_INSTALL_PRIVATE_PLUGINS) \
 	$(PRIVATE_PLUGIN_ARGS) \
 	-f plugins/chainlink.Dockerfile . \
-	-t chainlink-plugins:latest
+	-t chainlink-plugins:$(DOCKER_TAG)
 
 .PHONY: operator-ui
 operator-ui: ## Fetch the frontend

core/chainlink.Dockerfile

@@ -81,6 +81,10 @@ RUN curl https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - \
 RUN if [ ${CHAINLINK_USER} != root ]; then useradd --uid 14933 --create-home ${CHAINLINK_USER}; fi
 USER ${CHAINLINK_USER}
 
+# Expose image metadata to the running node.
+ARG CL_AUTO_DOCKER_TAG=unset
+ENV CL_DOCKER_TAG=${CL_AUTO_DOCKER_TAG}
+
 # Set plugin environment variable configuration.
 ENV CL_SOLANA_CMD=chainlink-solana
 

core/cmd/shell.go

@@ -246,6 +246,12 @@ func (n ChainlinkAppFactory) NewApplication(ctx context.Context, cfg chainlink.G
 			return nil, fmt.Errorf("failed to create workflow fetcher: %w", err)
 		}
 	}
+
+	dockerTag := static.Unset
+	if envTag, ok := env.DockerTag.Lookup(); ok && envTag != "" {
+		dockerTag = envTag
+	}
+
 	return chainlink.NewApplication(ctx, chainlink.ApplicationOpts{
 		Opts:                     creOpts,
 		Config:                   cfg,
@@ -257,6 +263,7 @@ func (n ChainlinkAppFactory) NewApplication(ctx context.Context, cfg chainlink.G
 		ExternalInitiatorManager: webhook.NewExternalInitiatorManager(ds, unrestrictedClient),
 		Version:                  static.Version,
 		VersionTag:               static.VersionTag,
+		DockerTag:                dockerTag,
 		RestrictedHTTPClient:     clhttp.NewRestrictedClient(cfg.Database(), appLggr),
 		UnrestrictedHTTPClient:   unrestrictedClient,
 		SecretGenerator:          chainlink.FilePersistedSecretGenerator{},

core/config/env/env.go

@@ -10,6 +10,7 @@ import (
 
 var (
 	Config                       = Var("CL_CONFIG")
+	DockerTag                    = Var("CL_DOCKER_TAG")
 	DatabaseAllowSimplePasswords = Var("CL_DATABASE_ALLOW_SIMPLE_PASSWORDS")
 	IgnorePrereleaseVersionCheck = Var("CL_IGNORE_PRE_RELEASE_VERSION_CHECK")
 	SkipAppVersionCheck          = Var("CL_SKIP_APP_VERSION_CHECK")

core/scripts/chaincli/README.md

@@ -22,7 +22,7 @@ to your wallet ahead of executing the next steps
 Build a local copy of the chainlink docker image by running this command in the root directory of the chainlink repo:
 
 ```bash
-docker build -t chainlink:local -f ./core/chainlink.Dockerfile .
+docker build -t chainlink:local -f ./core/chainlink.Dockerfile --build-arg CL_AUTO_DOCKER_TAG=local .
 ```
 
 Next, from the root directory again, `cd` into the chaincli directory:
@@ -123,4 +123,4 @@ You can use the `grep` and `grepv` flags to filter log lines, e.g. to only show
 ./chaincli keeper logs --grep keepers-plugin
 ```
 
----
+---

core/scripts/go.mod

@@ -505,7 +505,7 @@ require (
 	github.com/smartcontractkit/chainlink-protos/chainlink-ccv/message-discovery v0.0.0-20251211142334-5c3421fe2c8d // indirect
 	github.com/smartcontractkit/chainlink-protos/chainlink-ccv/verifier v0.0.0-20251211142334-5c3421fe2c8d // indirect
 	github.com/smartcontractkit/chainlink-protos/linking-service/go v0.0.0-20251002192024-d2ad9222409b // indirect
-	github.com/smartcontractkit/chainlink-protos/node-platform v0.0.0-20260211172625-dff40e83b3c9 // indirect
+	github.com/smartcontractkit/chainlink-protos/node-platform v0.0.0-20260319180422-b5808c964785 // indirect
 	github.com/smartcontractkit/chainlink-protos/orchestrator v0.10.0 // indirect
 	github.com/smartcontractkit/chainlink-protos/ring/go v0.0.0-20260128151123-605e9540b706 // indirect
 	github.com/smartcontractkit/chainlink-protos/rmn/v1.6/go v0.0.0-20250131130834-15e0d4cde2a6 // indirect