Which clearly requires user interaction, why not take that out of users' hands and just have
image: tensorchord/pgvecto-rs:latest-stable
Which is effectively what they're using anyway? I can understand freezing on a version when the upstream removes a feature, but that's not happened and even so, why do they need the SHA verification? Sorry if it seems stupid and straight forward, this is the only container I host that does this and so I'm trying to understand it rather than just feel aggrieved by it.