ci(docker): pin base image on opencode's versioned nightly tag

`FROM jcabillot/opencode:latest` floats on the tag pushed by perso/opencode's release workflow, which is never rebuilt afterwards: it is still the 2026-10-14 build while the nightly cron keeps rebuilding `vX.Y.Z-latest`. Renovate also ignores `:latest` dependencies, so the base image could never be bumped. Pin `v0.0.60-latest` (released from perso/opencode main, rebuilt nightly by cron.yaml): fresh Debian/npm packages, explicit OpenCode version in the Dockerfile, and Renovate can now follow the bumps. The DL3007 hadolint ignore is dropped: that rule only fires on `:latest`.
2026-10-17 19:52:27 +00:00
1 changed files with 1 additions and 1 deletions
@@ -1,6 +1,6 @@
 # `vX.Y.Z-latest` = the vX.Y.Z release rebuilt nightly by perso/opencode's cron job
 # (fresh Debian/npm packages); the bare `latest` tag stays frozen at the last release.
-FROM jcabillot/opencode:v0.0.59-latest
+FROM jcabillot/opencode:v0.0.60-latest

 ARG OPENCHAMBER_WEB_VERSION=2.3.2