Merge pull request 'ci(docker): pin base image on opencode's versioned nightly tag (v0.0.60-latest)' (#60 ) from ci/opencode-base-tag into main

Reviewed-on: #60
ci(docker): pin base image on opencode's versioned nightly tag
2026-10-17 15:59:13 -04:00 · 2026-10-17 19:52:27 +00:00
1 changed files with 3 additions and 2 deletions
@@ -1,5 +1,6 @@
-# hadolint ignore=DL3007
+# `vX.Y.Z-latest` = the vX.Y.Z release rebuilt nightly by perso/opencode's cron job
-FROM jcabillot/opencode:latest
+# (fresh Debian/npm packages); the bare `latest` tag stays frozen at the last release.
 FROM jcabillot/opencode:v0.0.60-latest
 ARG OPENCHAMBER_WEB_VERSION=2.3.2
Author	SHA1	Message	Date
jcabillot	3c8b4ed122	Merge pull request 'ci(docker): pin base image on opencode's versioned nightly tag (v0.0.60-latest)' (#60 ) from ci/opencode-base-tag into main CI Shared Jobs / hadolint (push) Successful in 10s Details CI Shared Jobs / build-test (push) Successful in 3m0s Details Main Release / ci (push) Successful in 3m13s Details Main Release / build (push) Successful in 1m10s Details Main Release / tag (push) Successful in 57s Details CI Shared Jobs / hadolint (push) Successful in 9s Details CI Shared Jobs / build-test (push) Successful in 3m51s Details Tag Release / ci (push) Successful in 4m1s Details Renovate / renovate (push) Successful in 1m19s Details Tag Release / build-push (push) Successful in 3m13s Details Reviewed-on: #60	2026-10-17 15:59:13 -04:00
OpenCode Cabillot	32c3855d07	ci(docker): pin base image on opencode's versioned nightly tag CI Shared Jobs / hadolint (pull_request) Successful in 14s Details CI Shared Jobs / build-test (pull_request) Successful in 3m32s Details PR Checks / ci (pull_request) Successful in 3m35s Details `FROM jcabillot/opencode:latest` floats on the tag pushed by perso/opencode's release workflow, which is never rebuilt afterwards: it is still the 2026-10-14 build while the nightly cron keeps rebuilding `vX.Y.Z-latest`. Renovate also ignores `:latest` dependencies, so the base image could never be bumped. Pin `v0.0.60-latest` (released from perso/opencode main, rebuilt nightly by cron.yaml): fresh Debian/npm packages, explicit OpenCode version in the Dockerfile, and Renovate can now follow the bumps. The DL3007 hadolint ignore is dropped: that rule only fires on `:latest`.	2026-10-17 19:52:27 +00:00