From 39b37ea985b3289534206f86eb5b5bede5070ef3 Mon Sep 17 00:00:00 2001 From: OpenCode Cabillot Date: Sat, 17 Oct 2026 19:46:56 +0000 Subject: [PATCH] ci(docker): pin base image on opencode's versioned nightly tag `FROM jcabillot/opencode:latest` floats on the tag pushed by perso/opencode's release workflow, which is never rebuilt afterwards: it is still the 2026-10-14 build while the nightly cron keeps rebuilding `vX.Y.Z-latest`. Renovate also ignores `:latest` dependencies, so the base image could never be bumped. Pin `v0.0.59-latest` (release v0.0.59 rebuilt nightly, latest rebuild 2026-10-17): fresh Debian/npm packages, explicit OpenCode version in the Dockerfile, and Renovate can now follow the bumps. The DL3007 hadolint ignore is dropped: that rule only fires on `:latest`. --- Dockerfile | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 9cfcbbb..e507160 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,6 @@ -# hadolint ignore=DL3007 -FROM jcabillot/opencode:latest +# `vX.Y.Z-latest` = the vX.Y.Z release rebuilt nightly by perso/opencode's cron job +# (fresh Debian/npm packages); the bare `latest` tag stays frozen at the last release. +FROM jcabillot/opencode:v0.0.59-latest ARG OPENCHAMBER_WEB_VERSION=2.3.2