-
v2.2.0 — build provenance + CI hardening + SSH/shell fixes + opencode 1.17.8
Publish Docker Image / update-description (push) Successful in 6sPublish Docker Image / promote-base-latest (push) Successful in 9sPublish Docker Image / resolve-versions (push) Successful in 7sPublish Docker Image / base-decide (push) Successful in 9sPublish Docker Image / build-base (push) Successful in 30m33sPublish Docker Image / smoke-base (push) Successful in 3m23sPublish Docker Image / smoke-omos (push) Successful in 13m49sPublish Docker Image / build-variant-base (push) Successful in 14m1sPublish Docker Image / build-variant-omos (push) Successful in 22m56sreleased this
2026-06-19 20:18:41 +02:00 | 26 commits to main since this releasePorts pi-devbox v1.1.4–v1.1.6 hardening to opencode-devbox:
- SSH read-only ~/.ssh ControlPath sidecar rendered on all host OSes
- bash-history export-leak fix
- fail-loud resolve-versions (shell: bash + set -euo pipefail)
- check-base-hash.sh CI guard against base-rebuild staleness
- build provenance: OCI labels + /etc/opencode-devbox/build-manifest.json
- overridable MEMPALACE_TOOLKIT_REPO build-arg
- opencode.jsonc.proposed non-destructive config sidecar
- opencode 1.17.7 -> 1.17.8
Downloads