Skip to content

chore(deps): bump npm CLI pins to current versions #1592

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
thepagent merged 2 commits into from
Oct 31, 2026
Merged

chore(deps): bump npm CLI pins to current versions #1592

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
4c00e10
chore(deps): bump npm CLI pins to current versions
chaodu-agent Oct 31, 2026
2a861f7
ci(docker): update smoke-test pins for codex and copilot bump
chaodu-agent Oct 31, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/docker-smoke-test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -208,8 +208,8 @@ jobs:
assert_line 'ARG KIRO_SHA256_AMD64=3e924de9697717b99891bb5f7d2a4bd9c768b8bfa1c498b35b3d242948512984' Dockerfile Dockerfile.package Dockerfile.unified
assert_line 'ARG KIRO_SHA256_ARM64=cc8a2df90cd354b569b81ed4653db4796c86a69866568b4eb7fa7906afc95309' Dockerfile Dockerfile.package Dockerfile.unified
assert_line 'ARG CODEX_ACP_VERSION=2.0.0' Dockerfile.codex Dockerfile.package Dockerfile.unified
assert_line 'ARG CODEX_VERSION=0.159.0' Dockerfile.codex Dockerfile.package Dockerfile.unified
assert_line 'ARG COPILOT_VERSION=1.0.89' Dockerfile.copilot Dockerfile.package Dockerfile.unified
assert_line 'ARG CODEX_VERSION=0.166.0' Dockerfile.codex Dockerfile.package Dockerfile.unified
assert_line 'ARG COPILOT_VERSION=1.0.105' Dockerfile.copilot Dockerfile.package Dockerfile.unified
assert_line 'ARG DEVIN_VERSION=3000.11.3' Dockerfile.devin Dockerfile.package Dockerfile.unified
assert_line 'ARG DEVIN_SHA256_AMD64=83b3b113c01bf2a3e9e100db08d77e6b086806a7754f091e20831bdfe215157e' Dockerfile.devin Dockerfile.package Dockerfile.unified
assert_line 'ARG DEVIN_SHA256_ARM64=21a2d7a8dea67987067cde7eb3fe7193a48daa8f8c3d50d414c603c4a2b67f15' Dockerfile.devin Dockerfile.package Dockerfile.unified
Expand Down
2 changes: 1 addition & 1 deletion Dockerfile.codex
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates

# Pre-install codex-acp and codex CLI globally
ARG CODEX_ACP_VERSION=2.0.0
ARG CODEX_VERSION=0.159.0
ARG CODEX_VERSION=0.166.0
RUN npm install -g @agentclientprotocol/codex-acp@${CODEX_ACP_VERSION} @openai/codex@${CODEX_VERSION} --fetch-retries=3

# Install gh CLI
Expand Down
2 changes: 1 addition & 1 deletion Dockerfile.copilot
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ FROM node:${NODE22_VERSION}-trixie-slim
RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl procps ripgrep tini unzip && rm -rf /var/lib/apt/lists/*

# Install GitHub Copilot CLI via npm (pinned version)
ARG COPILOT_VERSION=1.0.89
ARG COPILOT_VERSION=1.0.105
RUN npm install -g @github/copilot@${COPILOT_VERSION} --retry 3

# Install gh CLI (for auth and token management)
Expand Down
2 changes: 1 addition & 1 deletion Dockerfile.gemini
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ FROM node:${NODE22_VERSION}-trixie-slim
RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl procps ripgrep tini unzip && rm -rf /var/lib/apt/lists/*

# Install Gemini CLI (native ACP support via --acp)
ARG GEMINI_CLI_VERSION=0.61.0
ARG GEMINI_CLI_VERSION=0.66.0
RUN npm install -g @google/gemini-cli@${GEMINI_CLI_VERSION} --retry 3

# Install gh CLI
Expand Down
2 changes: 1 addition & 1 deletion Dockerfile.kimi
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
ca-certificates curl procps ripgrep tini bubblewrap socat unzip git \
&& rm -rf /var/lib/apt/lists/*

ARG KIMI_CODE_VERSION=2.1.1
ARG KIMI_CODE_VERSION=2.4.1
RUN npm install -g @moonshot-ai/kimi-code@${KIMI_CODE_VERSION} --retry 3

# Install gh CLI for agent shell workflows.
Expand Down
2 changes: 1 addition & 1 deletion Dockerfile.mimocode
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ FROM node:${NODE22_VERSION}-trixie-slim
RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl procps ripgrep tini unzip && rm -rf /var/lib/apt/lists/*

# Install MiMo-Code
ARG MIMOCODE_VERSION=0.1.15
ARG MIMOCODE_VERSION=0.1.16
RUN npm install -g @mimo-ai/cli@${MIMOCODE_VERSION} --retry 3

# Install gh CLI
Expand Down
2 changes: 1 addition & 1 deletion Dockerfile.opencode
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@ FROM node:${NODE22_VERSION}-trixie-slim
RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl procps ripgrep tini unzip && rm -rf /var/lib/apt/lists/*

# Install opencode
ARG OPENCODE_VERSION=1.18.33
ARG OPENCODE_VERSION=1.19.5
RUN npm install -g opencode-ai@${OPENCODE_VERSION} --retry 3

# Install gh CLI (matches Dockerfile.claude / Dockerfile.gemini / Dockerfile.codex)
Expand Down
14 changes: 7 additions & 7 deletions Dockerfile.package
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -121,7 +121,7 @@ CMD ["openab", "run", "-c", "/etc/openab/config.toml"]
# =============================================================================
FROM base-node AS codex
ARG CODEX_ACP_VERSION=2.0.0
ARG CODEX_VERSION=0.159.0
ARG CODEX_VERSION=0.166.0
RUN npm install -g @agentclientprotocol/codex-acp@${CODEX_ACP_VERSION} @openai/codex@${CODEX_VERSION} --fetch-retries=3
ENV HOME=/home/node
WORKDIR /home/node
Expand All @@ -148,7 +148,7 @@ RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
> /etc/apt/sources.list.d/github-cli.list && \
apt-get update && apt-get install -y --no-install-recommends gh && \
rm -rf /var/lib/apt/lists/*
ARG KIMI_CODE_VERSION=2.1.1
ARG KIMI_CODE_VERSION=2.4.1
RUN npm install -g @moonshot-ai/kimi-code@${KIMI_CODE_VERSION} --retry 3
ENV HOME=/home/node
WORKDIR /home/node
Expand All @@ -166,7 +166,7 @@ CMD ["openab", "run", "-c", "/etc/openab/config.toml"]
# Target: copilot
# =============================================================================
FROM base-node AS copilot
ARG COPILOT_VERSION=1.0.89
ARG COPILOT_VERSION=1.0.105
RUN npm install -g @github/copilot@${COPILOT_VERSION} --retry 3
ENV HOME=/home/node
WORKDIR /home/node
Expand Down Expand Up @@ -209,7 +209,7 @@ CMD ["openab", "run", "-c", "/etc/openab/config.toml"]
# Target: gemini
# =============================================================================
FROM base-node AS gemini
ARG GEMINI_CLI_VERSION=0.61.0
ARG GEMINI_CLI_VERSION=0.66.0
RUN npm install -g @google/gemini-cli@${GEMINI_CLI_VERSION} --retry 3
ENV HOME=/home/node
WORKDIR /home/node
Expand Down Expand Up @@ -265,7 +265,7 @@ CMD ["openab", "run", "-c", "/etc/openab/config.toml"]
# Target: mimocode
# =============================================================================
FROM base-node AS mimocode
ARG MIMOCODE_VERSION=0.1.15
ARG MIMOCODE_VERSION=0.1.16
RUN npm install -g @mimo-ai/cli@${MIMOCODE_VERSION} --retry 3
ENV HOME=/home/node
WORKDIR /home/node
Expand All @@ -283,7 +283,7 @@ CMD ["openab", "run", "-c", "/etc/openab/config.toml"]
# Target: opencode
# =============================================================================
FROM base-node AS opencode
ARG OPENCODE_VERSION=1.18.33
ARG OPENCODE_VERSION=1.19.5
RUN npm install -g opencode-ai@${OPENCODE_VERSION} --retry 3
ENV HOME=/home/node
WORKDIR /home/node
Expand Down Expand Up @@ -376,7 +376,7 @@ CMD ["openab", "run", "-c", "/etc/openab/config.toml"]
# Target: pi
# =============================================================================
FROM base-node AS pi
ARG PI_ACP_VERSION=0.0.31
ARG PI_ACP_VERSION=0.0.34
ARG PI_CODING_AGENT_VERSION=0.79.9
RUN npm install -g pi-acp@${PI_ACP_VERSION} @earendil-works/pi-coding-agent@${PI_CODING_AGENT_VERSION} --retry 3
ENV HOME=/home/node
Expand Down
2 changes: 1 addition & 1 deletion Dockerfile.pi
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates

# Install pi-acp adapter and Pi coding agent CLI.
# The Pi coding agent npm package was renamed from @mariozechner/pi-coding-agent to @earendil-works/pi-coding-agent.
ARG PI_ACP_VERSION=0.0.31
ARG PI_ACP_VERSION=0.0.34
ARG PI_CODING_AGENT_VERSION=0.79.9
RUN npm install -g pi-acp@${PI_ACP_VERSION} @earendil-works/pi-coding-agent@${PI_CODING_AGENT_VERSION} --retry 3

Expand Down
14 changes: 7 additions & 7 deletions Dockerfile.unified
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -127,7 +127,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="kiro-cli acp --trust-all-tools"
ENV OPENAB_AGENT_AUTH_COMMAND="kiro-cli login --use-device-flow"

Check warning on line 130 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (kiro, kiro-cli)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand All @@ -147,7 +147,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="claude-agent-acp"
ENV OPENAB_AGENT_AUTH_COMMAND="claude auth login"

Check warning on line 150 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (claude, claude-agent-acp)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand All @@ -156,7 +156,7 @@
# =============================================================================
FROM base-node AS codex
ARG CODEX_ACP_VERSION=2.0.0
ARG CODEX_VERSION=0.159.0
ARG CODEX_VERSION=0.166.0
RUN npm install -g @agentclientprotocol/codex-acp@${CODEX_ACP_VERSION} @openai/codex@${CODEX_VERSION} --fetch-retries=3
ENV HOME=/home/node
WORKDIR /home/node
Expand All @@ -166,7 +166,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="codex-acp"
ENV OPENAB_AGENT_AUTH_COMMAND="codex login --device-auth"

Check warning on line 169 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (codex, codex-acp)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand All @@ -183,7 +183,7 @@
> /etc/apt/sources.list.d/github-cli.list && \
apt-get update && apt-get install -y --no-install-recommends gh && \
rm -rf /var/lib/apt/lists/*
ARG KIMI_CODE_VERSION=2.1.1
ARG KIMI_CODE_VERSION=2.4.1
RUN npm install -g @moonshot-ai/kimi-code@${KIMI_CODE_VERSION} --retry 3
ENV HOME=/home/node
WORKDIR /home/node
Expand All @@ -193,7 +193,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="kimi acp"
ENV OPENAB_AGENT_AUTH_COMMAND="kimi"

Check warning on line 196 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (kimi, kimi)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand All @@ -201,7 +201,7 @@
# Target: copilot
# =============================================================================
FROM base-node AS copilot
ARG COPILOT_VERSION=1.0.89
ARG COPILOT_VERSION=1.0.105
RUN npm install -g @github/copilot@${COPILOT_VERSION} --retry 3
ENV HOME=/home/node
WORKDIR /home/node
Expand All @@ -211,7 +211,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="copilot --acp --stdio"
ENV OPENAB_AGENT_AUTH_COMMAND="copilot login"

Check warning on line 214 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (copilot, copilot)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand All @@ -236,7 +236,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="cursor-agent acp"
ENV OPENAB_AGENT_AUTH_COMMAND="cursor-agent login"

Check warning on line 239 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (cursor, cursor-agent)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand All @@ -244,7 +244,7 @@
# Target: gemini
# =============================================================================
FROM base-node AS gemini
ARG GEMINI_CLI_VERSION=0.61.0
ARG GEMINI_CLI_VERSION=0.66.0
RUN npm install -g @google/gemini-cli@${GEMINI_CLI_VERSION} --retry 3
ENV HOME=/home/node
WORKDIR /home/node
Expand All @@ -254,7 +254,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="gemini --acp"
ENV OPENAB_AGENT_AUTH_COMMAND="gemini auth"

Check warning on line 257 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (gemini, gemini)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand Down Expand Up @@ -285,7 +285,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="grok agent stdio"
ENV OPENAB_AGENT_AUTH_COMMAND="grok login --device-auth"

Check warning on line 288 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (grok, grok)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand All @@ -293,7 +293,7 @@
# Target: mimocode
# =============================================================================
FROM base-node AS mimocode
ARG MIMOCODE_VERSION=0.1.15
ARG MIMOCODE_VERSION=0.1.16
RUN npm install -g @mimo-ai/cli@${MIMOCODE_VERSION} --retry 3
ENV HOME=/home/node
WORKDIR /home/node
Expand All @@ -303,7 +303,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="mimo acp"
ENV OPENAB_AGENT_AUTH_COMMAND="mimo auth login --provider mimo --method \"MiMo Auto (free)\""

Check warning on line 306 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (mimocode, mimo)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand All @@ -311,7 +311,7 @@
# Target: opencode
# =============================================================================
FROM base-node AS opencode
ARG OPENCODE_VERSION=1.18.33
ARG OPENCODE_VERSION=1.19.5
RUN npm install -g opencode-ai@${OPENCODE_VERSION} --retry 3
ENV HOME=/home/node
WORKDIR /home/node
Expand All @@ -321,7 +321,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="opencode acp"
ENV OPENAB_AGENT_AUTH_COMMAND="opencode auth login"

Check warning on line 324 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (opencode, opencode)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand Down Expand Up @@ -353,7 +353,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="devin acp"
ENV OPENAB_AGENT_AUTH_COMMAND="devin auth login --force-manual-token-flow"

Check warning on line 356 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (devin, devin)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand Down Expand Up @@ -386,7 +386,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="agy-acp"
ENV OPENAB_AGENT_AUTH_COMMAND="agy auth"

Check warning on line 389 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (antigravity, agy-acp)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand All @@ -394,7 +394,7 @@
# Target: pi
# =============================================================================
FROM base-node AS pi
ARG PI_ACP_VERSION=0.0.31
ARG PI_ACP_VERSION=0.0.34
ARG PI_CODING_AGENT_VERSION=0.79.9
RUN npm install -g pi-acp@${PI_ACP_VERSION} @earendil-works/pi-coding-agent@${PI_CODING_AGENT_VERSION} --retry 3
ENV HOME=/home/node
Expand All @@ -405,7 +405,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="openab-agent"
ENV OPENAB_AGENT_AUTH_COMMAND="pi /login"

Check warning on line 408 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (pi, pi-acp)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand All @@ -422,7 +422,7 @@
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
CMD pgrep -x openab || exit 1
ENV OPENAB_AGENT_COMMAND="openab-agent"
ENV OPENAB_AGENT_AUTH_COMMAND="openab-agent auth codex-oauth --no-browser"

Check warning on line 425 in Dockerfile.unified

View workflow job for this annotation

GitHub Actions / smoke-test-unified (native, openab-agent)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "OPENAB_AGENT_AUTH_COMMAND")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENTRYPOINT ["tini", "--"]
CMD ["openab", "run", "-c", "/etc/openab/config.toml"]

Expand Down
Loading