From 187d13d24ff02dcf02cf5ee364b1ced2dcd3a392 Mon Sep 17 00:00:00 2001 From: NorD Date: Sat, 31 Oct 2026 22:50:50 +0300 Subject: [PATCH 1/2] fix(docker): bump Bun base image to 1.4.4 (omp requires >= 1.4.4) --- Dockerfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index 8005dea..aa62a49 100644 --- a/Dockerfile +++ b/Dockerfile @@ -10,9 +10,9 @@ # . # Both stages must pin the SAME oven/bun tag BY DIGEST; a tag alone is not a production pin. -# Digest resolved from docker.io for oven/bun:1.4.2 (multi-arch OCI index); same pin as -# upstream lidge-jun/opencodex 8d30945 (#6713, runtime Bun 1.4.2). -ARG BUN_IMAGE=oven/bun:1.4.2@sha256:9114c058aeae42162ee16dd5084b95fe9473970bb6bcb5b232ab1630f0546895 +# Digest resolved from docker.io for oven/bun:1.4.4 (multi-arch OCI index); same pin as +# upstream lidge-jun/opencodex v2.95.0 (runtime Bun 1.4.4). Bundled omp requires Bun >= 1.4.4. +ARG BUN_IMAGE=oven/bun:1.4.4@sha256:1d22548f177f4ff38e0c15baa3c2c46c6c2060ba2d1bc573bb4720b407548f1d FROM ${BUN_IMAGE} AS build RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates && rm -rf /var/lib/apt/lists/* From dbed50fd2d22268df2b654ed7f108d97fa5a137d Mon Sep 17 00:00:00 2001 From: NorD Date: Sun, 1 Nov 2026 00:20:20 +0300 Subject: [PATCH 2/2] ci(pr): test-build current upstream 2.95.0 instead of stale 2.79.0 --- .github/workflows/pull-request.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml index 04eb10c..af4fb17 100644 --- a/.github/workflows/pull-request.yml +++ b/.github/workflows/pull-request.yml @@ -23,7 +23,7 @@ jobs: id-token: write attestations: write with: - version: '2.79.0' - commit: 'beba8b7e5e479f3d8b4d404e3e47cf4aaef4d936' + version: '2.95.0' + commit: '9df4f6a56483ffe62526e29c7d9c6eeed3e742f4' publish: false secrets: inherit