chore(deps): update docker/login-action digest to 06fb636

Merge pull request 'chore(deps): update registry.k8s.io/kubectl docker tag to v1.36.3' (#28 ) from renovate/registry.k8s.io-kubectl-1.x into main
Reviewed-on: #28
2026-07-23 16:11:33 +00:00 · 2026-07-23 07:54:45 -04:00 · 2026-07-22 23:08:40 +00:00 · 2026-07-22 11:49:17 -04:00 · 2026-07-22 12:09:47 +00:00 · 2026-07-22 08:05:14 -04:00
5 changed files with 21 additions and 17 deletions
@@ -9,7 +9,7 @@ jobs:
    runs-on: ubuntu-latest
    continue-on-error: true
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
        with:
          dockerfile: Dockerfile
@@ -17,7 +17,7 @@ jobs:
  test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
      - run: docker build -t ci-image:${{ github.sha }} .

@@ -25,11 +25,11 @@ jobs:
    needs: [test]
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
          fetch-depth: 0
      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
-      - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
+      - uses: docker/login-action@06fb636fac595d6fb4b28a5dfcb21a6f5091859c # v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -7,28 +7,28 @@ jobs:
    runs-on: ubuntu-latest
    continue-on-error: true
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
        with:
          dockerfile: Dockerfile
  test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
      - run: docker build -t ci-image:${{ github.sha }} .
  build:
    needs: [test]
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
      - run: docker build -t jcabillot/opencode:${{ github.sha }} .
  tag:
    needs: [build]
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
          fetch-depth: 0
      - name: Configure git auth
@@ -8,7 +8,7 @@ jobs:
  hadolint:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
        with:
          dockerfile: Dockerfile
@@ -16,6 +16,6 @@ jobs:
  build-test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
      - run: docker build -t ci-image:${{ github.sha }} .
@@ -9,7 +9,7 @@ jobs:
    runs-on: ubuntu-latest
    continue-on-error: true
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
        with:
          dockerfile: Dockerfile
@@ -17,7 +17,7 @@ jobs:
  test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
      - run: docker build -t ci-image:${{ github.sha }} .

@@ -25,9 +25,9 @@ jobs:
    needs: [test]
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
-      - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
+      - uses: docker/login-action@06fb636fac595d6fb4b28a5dfcb21a6f5091859c # v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -1,9 +1,10 @@
-FROM node:24-trixie
+FROM node:26-trixie

 ENV NPM_CONFIG_UPDATE_NOTIFIER=false \
  NPM_CONFIG_LOGLEVEL=warn \
  NODE_ENV=production

+
 RUN apt-get update && \
    apt-get upgrade -y --no-install-recommends ca-certificates && \
    rm -rf /var/lib/apt/lists/* && \
@@ -12,12 +13,15 @@ RUN apt-get update && \
    groupadd -g 1000 opencode; \
    useradd -m -u 1000 -g 1000 -s /usr/bin/bash opencode; \
    npm update -g --no-fund --no-audit && \
-    npm install -g --no-fund --no-audit --allow-scripts=opencode-ai,better-sqlite3 opencode-ai@1.17.18 n2-soul@9.0.9 && \
+    npm install -g --no-fund --no-audit --ignore-scripts n2-soul@9.0.9 && \
+    npm install -g --no-fund --no-audit --allow-scripts=better-sqlite3 better-sqlite3@12.11.1 && \
+    rm -rf /usr/local/lib/node_modules/n2-soul/node_modules/better-sqlite3 && \
+    npm install -g --no-fund --no-audit --allow-scripts=opencode-ai opencode-ai@1.18.3 && \
    npm cache clean --force && \
    chown -R 1000:1000 /usr/local/lib/node_modules/n2-soul/

 COPY --chmod=755 opencode-attach /usr/local/bin/opencode-attach
-COPY --from=registry.k8s.io/kubectl:v1.36.2 /bin/kubectl /usr/local/bin/kubectl
+COPY --from=registry.k8s.io/kubectl:v1.36.3 /bin/kubectl /usr/local/bin/kubectl

 USER opencode
 WORKDIR /home/opencode
Author	SHA1	Message	Date
renovate	8ab79117b0	chore(deps): update docker/login-action digest to 06fb636 PR Checks / hadolint (pull_request) Waiting to run Details PR Checks / build-test (pull_request) Waiting to run Details renovate/stability-days Updates have met minimum release age requirement Details	2026-07-23 16:11:33 +00:00
jcabillot	a236c6253f	Merge pull request 'chore(deps): update registry.k8s.io/kubectl docker tag to v1.36.3' (#28 ) from renovate/registry.k8s.io-kubectl-1.x into main Main Release / hadolint (push) Successful in 14s Details Main Release / test (push) Successful in 28s Details Main Release / build (push) Successful in 41s Details Main Release / tag (push) Waiting to run Details Reviewed-on: #28	2026-07-23 07:54:45 -04:00
renovate	4d2dfbd6b1	chore(deps): update registry.k8s.io/kubectl docker tag to v1.36.3 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 13s Details PR Checks / build-test (pull_request) Successful in 15m7s Details	2026-07-22 23:08:40 +00:00
jcabillot	94a296f98f	Merge pull request 'chore(deps): update dependency opencode-ai to v1.18.3' (#26 ) from renovate/opencode-ai-1.x into main Main Release / hadolint (push) Successful in 25s Details Main Release / test (push) Successful in 7m26s Details Main Release / build (push) Successful in 3m58s Details Main Release / tag (push) Successful in 15s Details Tag Release / hadolint (push) Successful in 16s Details Tag Release / test (push) Successful in 8m52s Details Tag Release / build-push (push) Successful in 12m35s Details Reviewed-on: #26	2026-07-22 11:49:17 -04:00
renovate	0112a87b3c	chore(deps): update dependency opencode-ai to v1.18.3 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 14s Details PR Checks / build-test (pull_request) Successful in 7m10s Details	2026-07-22 12:09:47 +00:00
jcabillot	c56c99ae39	Merge pull request 'chore(deps): update actions/checkout digest to 3d3c42e' (#27 ) from renovate/actions-checkout-digest into main Main Release / test (push) Successful in 1m37s Details Main Release / hadolint (push) Successful in 8s Details Main Release / build (push) Successful in 11m15s Details Main Release / tag (push) Successful in 14s Details Tag Release / hadolint (push) Successful in 11s Details Tag Release / test (push) Successful in 4m55s Details Tag Release / build-push (push) Successful in 10m43s Details Reviewed-on: #27	2026-07-22 08:05:14 -04:00
renovate	ab41e31352	chore(deps): update actions/checkout digest to 3d3c42e renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 11s Details PR Checks / build-test (pull_request) Successful in 17s Details	2026-07-20 16:11:52 +00:00
jcabillot	f827375e0d	Merge pull request 'chore(deps): update dependency opencode-ai to v1.17.19' (#25 ) from renovate/opencode-ai-1.x into main Main Release / hadolint (push) Successful in 7s Details Main Release / test (push) Successful in 1m43s Details Main Release / build (push) Successful in 1m50s Details Main Release / tag (push) Successful in 12s Details Tag Release / hadolint (push) Successful in 8s Details Tag Release / test (push) Successful in 16s Details Tag Release / build-push (push) Successful in 2m18s Details Reviewed-on: #25	2026-07-16 13:12:20 -04:00
renovate	6e7eef1eef	chore(deps): update dependency opencode-ai to v1.17.19 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 8s Details PR Checks / build-test (pull_request) Successful in 1m54s Details	2026-07-16 17:07:48 +00:00
jcabillot	5a4ad2f76e	Merge pull request 'chore(deps): update node docker tag to v26' (#2 ) from renovate/node-26.x into main Main Release / hadolint (push) Successful in 6s Details Main Release / test (push) Successful in 1m35s Details Main Release / build (push) Successful in 11s Details Main Release / tag (push) Successful in 9s Details Tag Release / hadolint (push) Successful in 6s Details Tag Release / test (push) Successful in 10s Details Tag Release / build-push (push) Successful in 2m46s Details Reviewed-on: #2	2026-07-13 19:31:26 -04:00
Hermes Agent	9cf881a8fd	fix: install better-sqlite3 globally, remove local copy in n2-soul PR Checks / hadolint (pull_request) Successful in 6s Details PR Checks / build-test (pull_request) Successful in 1m32s Details npm 10+ rejects --allow-scripts in project-scoped (non-global) installs. Install better-sqlite3@12.11.1 globally with --allow-scripts, then remove the incompatible v11.10.0 from n2-soul's node_modules so Node.js resolves the global v12.11.1 instead.	2026-07-13 23:28:16 +00:00
Hermes Agent	988bf26667	fix: install n2-soul with --ignore-scripts, then upgrade better-sqlite3 PR Checks / hadolint (pull_request) Successful in 6s Details PR Checks / build-test (pull_request) Failing after 39s Details n2-soul's npm install fails on Node 26 because its dependency better-sqlite3@11.10.0 cannot compile (V8 API removed GetPrototype). The subsequent upgrade to v12 never runs due to set -eux. Fix: install n2-soul without scripts, then replace better-sqlite3 with v12.11.1 which has prebuilt binaries for Node 26. open-code-ai is installed separately with scripts allowed.	2026-07-13 23:26:20 +00:00
Hermes Agent	523c39808f	fix: suppress hadolint DL3003 for subshell cd pattern PR Checks / hadolint (pull_request) Successful in 7s Details PR Checks / build-test (pull_request) Failing after 2m26s Details	2026-07-13 23:21:19 +00:00
Hermes Agent	25ce5423ed	fix: use subshell to avoid hadolint DL3003 warning PR Checks / hadolint (pull_request) Failing after 6s Details PR Checks / build-test (pull_request) Failing after 2m39s Details	2026-07-13 23:19:18 +00:00
Hermes Agent	6ccd634cd9	fix: upgrade better-sqlite3 to v12 for Node 26 compatibility PR Checks / hadolint (pull_request) Failing after 6s Details PR Checks / build-test (pull_request) Failing after 2m39s Details n2-soul@9.0.9 depends on better-sqlite3@^11.10.0 which does not support Node.js 26. The V8 API changed (GetPrototype removed in favor of GetPrototypeV2), causing native compilation to fail. Upgrade to better-sqlite3@12.11.1 which supports Node 26 and has prebuilt binaries.	2026-07-13 23:18:25 +00:00
renovateandjcabillot	cc86526f47	chore(deps): update node docker tag to v26 PR Checks / hadolint (pull_request) Successful in 7s Details PR Checks / build-test (pull_request) Failing after 2m21s Details	2026-07-13 19:09:26 -04:00