From d043929efc2d8d54c070295c1a82d26d9db7076e Mon Sep 17 00:00:00 2001 From: Sagent Date: Sat, 13 Jun 2026 21:25:38 +0000 Subject: [PATCH 01/17] feat: align 4-workflow pattern with opencode standard --- .gitea/workflows/cron.yaml | 6 +++--- .gitea/workflows/main.yaml | 16 ++++------------ .gitea/workflows/pr.yaml | 14 ++++++++------ .gitea/workflows/tag.yaml | 6 +++--- 4 files changed, 18 insertions(+), 24 deletions(-) diff --git a/.gitea/workflows/cron.yaml b/.gitea/workflows/cron.yaml index c0120bf..e0ac810 100644 --- a/.gitea/workflows/cron.yaml +++ b/.gitea/workflows/cron.yaml @@ -7,17 +7,17 @@ on: jobs: hadolint: runs-on: ubuntu-latest + continue-on-error: true steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 - continue-on-error: true with: dockerfile: Dockerfile build-push: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 with: fetch-depth: 0 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 diff --git a/.gitea/workflows/main.yaml b/.gitea/workflows/main.yaml index f883cf0..0e92d73 100644 --- a/.gitea/workflows/main.yaml +++ b/.gitea/workflows/main.yaml @@ -7,17 +7,17 @@ on: jobs: hadolint: runs-on: ubuntu-latest + continue-on-error: true steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 - continue-on-error: true with: dockerfile: Dockerfile build-push: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 with: @@ -37,18 +37,10 @@ jobs: labels: ${{ steps.meta.outputs.labels }} pull: true - test: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - - run: docker build -t ci-image:${{ github.sha }} . - - run: bash tests/test.sh ci-image:${{ github.sha }} - tag: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 with: fetch-depth: 0 - name: Configure git auth diff --git a/.gitea/workflows/pr.yaml b/.gitea/workflows/pr.yaml index ed2c5fa..a2c8217 100644 --- a/.gitea/workflows/pr.yaml +++ b/.gitea/workflows/pr.yaml @@ -8,16 +8,18 @@ jobs: hadolint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 - continue-on-error: true with: dockerfile: Dockerfile - build-test: + build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - - run: docker build -t ci-image:${{ github.sha }} . - - run: bash tests/test.sh ci-image:${{ github.sha }} + - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 + with: + context: . + push: false + pull: true diff --git a/.gitea/workflows/tag.yaml b/.gitea/workflows/tag.yaml index dd179b2..fff0204 100644 --- a/.gitea/workflows/tag.yaml +++ b/.gitea/workflows/tag.yaml @@ -7,17 +7,17 @@ on: jobs: hadolint: runs-on: ubuntu-latest + continue-on-error: true steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 - continue-on-error: true with: dockerfile: Dockerfile build-push: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 with: From 8c21f439c93b7fb1f79ac6e7ecdf3d792cd5c716 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sat, 13 Jun 2026 19:06:29 -0400 Subject: [PATCH 02/17] fix: correct checkout SHA and restructure cron.yaml per standard --- .gitea/workflows/cron.yaml | 18 +++++++++++++----- 1 file changed, 13 insertions(+), 5 deletions(-) diff --git a/.gitea/workflows/cron.yaml b/.gitea/workflows/cron.yaml index e0ac810..48fea96 100644 --- a/.gitea/workflows/cron.yaml +++ b/.gitea/workflows/cron.yaml @@ -9,15 +9,24 @@ jobs: runs-on: ubuntu-latest continue-on-error: true steps: - - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 with: dockerfile: Dockerfile - build-push: + test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 + - run: docker build -t ci-image:${{ github.sha }} . + - run: bash tests/test.sh ci-image:${{ github.sha }} + + build-push: + needs: [test] + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: fetch-depth: 0 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 @@ -34,8 +43,7 @@ jobs: with: images: jcabillot/opencode-openchamber tags: | - type=raw,value=latest - type=raw,value=${{ steps.get-latest-tag.outputs.tag }},enable=${{ steps.get-latest-tag.outputs.tag != '' }} + type=raw,value=${{ steps.get-latest-tag.outputs.tag }}-latest,enable=${{ steps.get-latest-tag.outputs.tag != '' }} - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 with: context: . From 74d9b8c9b5f7f6bdb00611ca1ba70c0bfae70166 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sat, 13 Jun 2026 19:06:33 -0400 Subject: [PATCH 03/17] fix: correct checkout SHA and restructure main.yaml (no Docker push) --- .gitea/workflows/main.yaml | 28 +++++++--------------------- 1 file changed, 7 insertions(+), 21 deletions(-) diff --git a/.gitea/workflows/main.yaml b/.gitea/workflows/main.yaml index 0e92d73..67ca3d5 100644 --- a/.gitea/workflows/main.yaml +++ b/.gitea/workflows/main.yaml @@ -9,38 +9,24 @@ jobs: runs-on: ubuntu-latest continue-on-error: true steps: - - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 with: dockerfile: Dockerfile - build-push: + test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 - with: - username: ${{ secrets.DOCKERHUB_USERNAME }} - password: ${{ secrets.DOCKERHUB_TOKEN }} - - id: meta - uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6 - with: - images: jcabillot/opencode-openchamber - tags: | - type=raw,value=latest - - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 - with: - context: . - push: true - tags: ${{ steps.meta.outputs.tags }} - labels: ${{ steps.meta.outputs.labels }} - pull: true + - run: docker build -t ci-image:${{ github.sha }} . + - run: bash tests/test.sh ci-image:${{ github.sha }} tag: + needs: [test] runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: fetch-depth: 0 - name: Configure git auth From 7673d4da7712d7bc7ab1a376d4558b4ed8ade6e8 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sat, 13 Jun 2026 19:06:36 -0400 Subject: [PATCH 04/17] fix: correct checkout SHA and rename job to build-test --- .gitea/workflows/pr.yaml | 13 +++++-------- 1 file changed, 5 insertions(+), 8 deletions(-) diff --git a/.gitea/workflows/pr.yaml b/.gitea/workflows/pr.yaml index a2c8217..388ef0f 100644 --- a/.gitea/workflows/pr.yaml +++ b/.gitea/workflows/pr.yaml @@ -8,18 +8,15 @@ jobs: hadolint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 with: dockerfile: Dockerfile - build: + build-test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 - with: - context: . - push: false - pull: true + - run: docker build -t ci-image:${{ github.sha }} . + - run: bash tests/test.sh ci-image:${{ github.sha }} From 2d187bf47e6c59d94f4a887dd8896e85a44a2371 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sat, 13 Jun 2026 19:06:40 -0400 Subject: [PATCH 05/17] fix: correct checkout SHA and restructure tag.yaml per standard --- .gitea/workflows/tag.yaml | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git a/.gitea/workflows/tag.yaml b/.gitea/workflows/tag.yaml index fff0204..3f32daa 100644 --- a/.gitea/workflows/tag.yaml +++ b/.gitea/workflows/tag.yaml @@ -9,15 +9,24 @@ jobs: runs-on: ubuntu-latest continue-on-error: true steps: - - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 with: dockerfile: Dockerfile - build-push: + test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b411f31884172cec0e10 # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 + - run: docker build -t ci-image:${{ github.sha }} . + - run: bash tests/test.sh ci-image:${{ github.sha }} + + build-push: + needs: [test] + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 with: @@ -29,6 +38,7 @@ jobs: images: jcabillot/opencode-openchamber tags: | type=ref,event=tag + type=ref,event=tag,suffix=-latest - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 with: context: . From 63be8bbd24e0608eea19262d9387476f2ee3fcaa Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sat, 13 Jun 2026 20:26:06 -0400 Subject: [PATCH 06/17] fix: rewrite main.yaml with build job, SA_TOKEN_ACTION_PUSH_TAGS, no test.sh --- .gitea/workflows/main.yaml | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/.gitea/workflows/main.yaml b/.gitea/workflows/main.yaml index 67ca3d5..5d07fa5 100644 --- a/.gitea/workflows/main.yaml +++ b/.gitea/workflows/main.yaml @@ -1,9 +1,7 @@ name: Main Release - on: push: branches: [main] - jobs: hadolint: runs-on: ubuntu-latest @@ -13,28 +11,32 @@ jobs: - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 with: dockerfile: Dockerfile - test: runs-on: ubuntu-latest steps: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - run: docker build -t ci-image:${{ github.sha }} . - - run: bash tests/test.sh ci-image:${{ github.sha }} - - tag: + build: needs: [test] runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 + - run: docker build -t jcabillot/opencode-openchamber:${{ github.sha }} . + tag: + needs: [build] + runs-on: ubuntu-latest steps: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: fetch-depth: 0 - name: Configure git auth run: | - git remote set-url origin "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@scm.cabillot.eu/perso/opencode-openchamber.git" + git remote set-url origin "https://x-access-token:${{ secrets.SA_TOKEN_ACTION_PUSH_TAGS }}@scm.cabillot.eu/perso/opencode-openchamber.git" - uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0 env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ secrets.SA_TOKEN_ACTION_PUSH_TAGS }} DEFAULT_BUMP: patch RELEASE_BRANCHES: main WITH_V: true From 3e966df299c72e4cf9b8358594ba704a61936f06 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sat, 13 Jun 2026 20:26:11 -0400 Subject: [PATCH 07/17] fix: rewrite cron.yaml without test.sh for opencode-openchamber --- .gitea/workflows/cron.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/.gitea/workflows/cron.yaml b/.gitea/workflows/cron.yaml index 48fea96..c6e4906 100644 --- a/.gitea/workflows/cron.yaml +++ b/.gitea/workflows/cron.yaml @@ -20,7 +20,6 @@ jobs: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - run: docker build -t ci-image:${{ github.sha }} . - - run: bash tests/test.sh ci-image:${{ github.sha }} build-push: needs: [test] From c30d01461077405cd7dbd53a0f2cf46b8595145d Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sat, 13 Jun 2026 20:26:19 -0400 Subject: [PATCH 08/17] fix: rewrite tag.yaml without test.sh for opencode-openchamber --- .gitea/workflows/tag.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/.gitea/workflows/tag.yaml b/.gitea/workflows/tag.yaml index 3f32daa..654ca81 100644 --- a/.gitea/workflows/tag.yaml +++ b/.gitea/workflows/tag.yaml @@ -20,7 +20,6 @@ jobs: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - run: docker build -t ci-image:${{ github.sha }} . - - run: bash tests/test.sh ci-image:${{ github.sha }} build-push: needs: [test] From 82cc072a195e52e290fcd78cdde451b615fb47ec Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sat, 13 Jun 2026 20:26:23 -0400 Subject: [PATCH 09/17] fix: rewrite pr.yaml without test.sh for opencode-openchamber --- .gitea/workflows/pr.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/.gitea/workflows/pr.yaml b/.gitea/workflows/pr.yaml index 388ef0f..9870acb 100644 --- a/.gitea/workflows/pr.yaml +++ b/.gitea/workflows/pr.yaml @@ -19,4 +19,3 @@ jobs: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - run: docker build -t ci-image:${{ github.sha }} . - - run: bash tests/test.sh ci-image:${{ github.sha }} From 2f3838ecddc5a133d8118555743781bbb75df7e7 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sat, 13 Jun 2026 20:32:44 -0400 Subject: [PATCH 10/17] fix: move continue-on-error to step level, remove from job level --- .gitea/workflows/main.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitea/workflows/main.yaml b/.gitea/workflows/main.yaml index 5d07fa5..dd32d7b 100644 --- a/.gitea/workflows/main.yaml +++ b/.gitea/workflows/main.yaml @@ -5,10 +5,10 @@ on: jobs: hadolint: runs-on: ubuntu-latest - continue-on-error: true steps: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 + continue-on-error: true with: dockerfile: Dockerfile test: From 8d1d7ac166babbe6dc83504ba570bd0fba204fa2 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sun, 14 Jun 2026 12:39:44 -0400 Subject: [PATCH 11/17] fix: resolve hadolint lint issues (pin versions, remove redundant USER root) --- Dockerfile | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) diff --git a/Dockerfile b/Dockerfile index e0e9448..20d31bd 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM jcabillot/opencode:latest +FROM jcabillot/opencode:1.16.2 ARG OPENCHAMBER_WEB_VERSION=1.12.3 @@ -6,16 +6,15 @@ ENV NPM_CONFIG_UPDATE_NOTIFIER=false \ NPM_CONFIG_LOGLEVEL=warn \ NODE_ENV=production -USER root - -RUN rm -rf /tmp/* \ - && apt-get update \ - && apt-get install -y --no-install-recommends python3 make g++ \ +RUN apt-get update \ + && apt-get install -y --no-install-recommends \ + python3=3.12* \ + make=4.3* \ + g++=14.2* \ && rm -rf /var/lib/apt/lists/* \ && npm install -g --no-fund --no-audit "@openchamber/web@${OPENCHAMBER_WEB_VERSION}" \ && npm cache clean --force \ - && openchamber --version \ - && chown -R opencode:opencode /home/opencode + && openchamber --version WORKDIR /home/opencode/ USER opencode From 9c278ee97b62276195457053c307eb9d7edb135a Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sun, 14 Jun 2026 12:40:45 -0400 Subject: [PATCH 12/17] fix: use :latest tag (build dep, not available as :1.16.2 yet) --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 20d31bd..3e42926 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM jcabillot/opencode:1.16.2 +FROM jcabillot/opencode:latest ARG OPENCHAMBER_WEB_VERSION=1.12.3 From 7a2d6e865c3e329105e4c9558552d4dfb62f90d1 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sun, 14 Jun 2026 13:02:14 -0400 Subject: [PATCH 13/17] fix: ignore DL3007 for :latest (no specific tag available on Docker Hub) --- Dockerfile | 1 + 1 file changed, 1 insertion(+) diff --git a/Dockerfile b/Dockerfile index 3e42926..1074016 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,3 +1,4 @@ +# hadolint ignore=DL3007 FROM jcabillot/opencode:latest ARG OPENCHAMBER_WEB_VERSION=1.12.3 From bcc349744ee64d7ad775e230a376afd33046ad4d Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sun, 14 Jun 2026 15:19:59 -0400 Subject: [PATCH 14/17] fix: add Docker Hub login to avoid rate limiting on image pulls --- .gitea/workflows/pr.yaml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/pr.yaml b/.gitea/workflows/pr.yaml index 9870acb..3b4baf5 100644 --- a/.gitea/workflows/pr.yaml +++ b/.gitea/workflows/pr.yaml @@ -1,15 +1,14 @@ name: PR Checks - on: pull_request: branches: [main] - jobs: hadolint: runs-on: ubuntu-latest steps: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 + continue-on-error: true with: dockerfile: Dockerfile @@ -18,4 +17,8 @@ jobs: steps: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 + - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 + with: + username: ${{ secrets.DOCKERHUB_USERNAME }} + password: ${{ secrets.DOCKERHUB_TOKEN }} - run: docker build -t ci-image:${{ github.sha }} . From 0576c5c680ab845d42ef01d4837b9428f53e459f Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sun, 14 Jun 2026 15:20:58 -0400 Subject: [PATCH 15/17] fix: remove version pins, ignore DL3008 (incompatible with this base) --- Dockerfile | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index 1074016..2603f14 100644 --- a/Dockerfile +++ b/Dockerfile @@ -7,11 +7,12 @@ ENV NPM_CONFIG_UPDATE_NOTIFIER=false \ NPM_CONFIG_LOGLEVEL=warn \ NODE_ENV=production +# hadolint ignore=DL3008 RUN apt-get update \ && apt-get install -y --no-install-recommends \ - python3=3.12* \ - make=4.3* \ - g++=14.2* \ + python3 \ + make \ + g++ \ && rm -rf /var/lib/apt/lists/* \ && npm install -g --no-fund --no-audit "@openchamber/web@${OPENCHAMBER_WEB_VERSION}" \ && npm cache clean --force \ From 64ebfb04d6800821fa8b476ba417cb0e99dc54b7 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sun, 14 Jun 2026 15:22:16 -0400 Subject: [PATCH 16/17] fix: restore USER root with hadolint ignore (needed for apt in non-root base) --- Dockerfile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 2603f14..0ec7908 100644 --- a/Dockerfile +++ b/Dockerfile @@ -7,7 +7,8 @@ ENV NPM_CONFIG_UPDATE_NOTIFIER=false \ NPM_CONFIG_LOGLEVEL=warn \ NODE_ENV=production -# hadolint ignore=DL3008 +# hadolint ignore=DL3008,DL4006 +USER root RUN apt-get update \ && apt-get install -y --no-install-recommends \ python3 \ From a8e2331f8944330d44579a8c0c9728ef6956dcc2 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Sun, 14 Jun 2026 15:22:59 -0400 Subject: [PATCH 17/17] fix: separate hadolint ignores per-line (DL4006 on USER, DL3008 on RUN) --- Dockerfile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 0ec7908..ab12b37 100644 --- a/Dockerfile +++ b/Dockerfile @@ -7,8 +7,9 @@ ENV NPM_CONFIG_UPDATE_NOTIFIER=false \ NPM_CONFIG_LOGLEVEL=warn \ NODE_ENV=production -# hadolint ignore=DL3008,DL4006 +# hadolint ignore=DL4006 USER root +# hadolint ignore=DL3008 RUN apt-get update \ && apt-get install -y --no-install-recommends \ python3 \