ci(docker): pin base image on opencode's versioned nightly tag
CI Shared Jobs / hadolint (pull_request) Successful in 12s
CI Shared Jobs / build-test (pull_request) Successful in 2m39s
PR Checks / ci (pull_request) Successful in 2m53s

`FROM jcabillot/opencode:latest` floats on the tag pushed by perso/opencode's
release workflow, which is never rebuilt afterwards: it is still the 2026-10-14
build while the nightly cron keeps rebuilding `vX.Y.Z-latest`. Renovate also
ignores `:latest` dependencies, so the base image could never be bumped.

Pin `v0.0.59-latest` (release v0.0.59 rebuilt nightly, latest rebuild
2026-10-17): fresh Debian/npm packages, explicit OpenCode version in the
Dockerfile, and Renovate can now follow the bumps.

The DL3007 hadolint ignore is dropped: that rule only fires on `:latest`.
This commit is contained in:
OpenCode Cabillot committed 2026-10-17 19:46:56 +00:00
1 parent 6a98664de9
commit 39b37ea985
1 file changed
+3 -2
+3 -2
View File
@@ -1,5 +1,6 @@
# hadolint ignore=DL3007 # `vX.Y.Z-latest` = the vX.Y.Z release rebuilt nightly by perso/opencode's cron job
FROM jcabillot/opencode:latest # (fresh Debian/npm packages); the bare `latest` tag stays frozen at the last release.
FROM jcabillot/opencode:v0.0.59-latest
ARG OPENCHAMBER_WEB_VERSION=2.3.2 ARG OPENCHAMBER_WEB_VERSION=2.3.2