• v2.2.0 992cb6702f

    v2.2.0 — build provenance + CI hardening + SSH/shell fixes + opencode 1.17.8
    Publish Docker Image / update-description (push) Successful in 6s
    Publish Docker Image / promote-base-latest (push) Successful in 9s
    Publish Docker Image / resolve-versions (push) Successful in 7s
    Publish Docker Image / base-decide (push) Successful in 9s
    Publish Docker Image / build-base (push) Successful in 30m33s
    Publish Docker Image / smoke-base (push) Successful in 3m23s
    Publish Docker Image / smoke-omos (push) Successful in 13m49s
    Publish Docker Image / build-variant-base (push) Successful in 14m1s
    Publish Docker Image / build-variant-omos (push) Successful in 22m56s

    joakimp released this 2026-06-19 20:18:41 +02:00 | 26 commits to main since this release

    Ports pi-devbox v1.1.4–v1.1.6 hardening to opencode-devbox:

    • SSH read-only ~/.ssh ControlPath sidecar rendered on all host OSes
    • bash-history export-leak fix
    • fail-loud resolve-versions (shell: bash + set -euo pipefail)
    • check-base-hash.sh CI guard against base-rebuild staleness
    • build provenance: OCI labels + /etc/opencode-devbox/build-manifest.json
    • overridable MEMPALACE_TOOLKIT_REPO build-arg
    • opencode.jsonc.proposed non-destructive config sidecar
    • opencode 1.17.7 -> 1.17.8
    Downloads