Skip to content

build: bump debian from 60eac75 to 7b140f3 in /sandbox/.devcontainer in the docker group across 1 directory #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

build: bump debian from 60eac75 to 7b140f3 in /sandbox/.devcontainer in the docker group across 1 directory #6

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion sandbox/.devcontainer/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
# git push token / ssh signing socket is forwarded. Commit & push via the
# dedicated `git-agent` sandbox; this box is for editing and running code.

FROM debian:bookworm-slim@sha256:60eac759739651111db372c07be67863818726f754804b8707c90979bda511df
FROM debian:bookworm-slim@sha256:7b140f374b289a7c2befc338f42ebe6441b7ea838a042bbd5acbfca6ec875818

ARG TZ=UTC
ENV TZ="$TZ"
Expand All @@ -42,7 +42,7 @@
&& echo "C.UTF-8 UTF-8" > /etc/locale.gen && locale-gen

# GitHub CLI from the official cli.github.com apt repo.
RUN install -d -m 0755 /etc/apt/keyrings \

Check failure on line 45 in sandbox/.devcontainer/Dockerfile

View workflow job for this annotation

GitHub Actions / dockerfile lint 

DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
&& curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
| tee /etc/apt/keyrings/githubcli-archive-keyring.gpg >/dev/null \
&& chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg \
Expand All @@ -53,7 +53,7 @@

# --- Node.js — official static build (matches the other sandboxes) -----------
ARG NODE_VERSION=24.15.0
RUN set -eux; \

Check failure on line 56 in sandbox/.devcontainer/Dockerfile

View workflow job for this annotation

GitHub Actions / dockerfile lint 

DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
case "$(dpkg --print-architecture)" in amd64) na=x64 ;; arm64) na=arm64 ;; *) exit 1 ;; esac; \
curl -fsSLo /tmp/node.tar.xz "https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-${na}.tar.xz"; \
curl -fsSLo /tmp/node-SHASUMS256.txt "https://nodejs.org/dist/v${NODE_VERSION}/SHASUMS256.txt"; \
Expand All @@ -71,7 +71,7 @@
# pip + venv + ssl, no compile. Bump by editing PY_RELEASE/PY_VERSION.
ARG PY_RELEASE=20260510
ARG PY_VERSION=3.12.13
RUN set -eux; \

Check failure on line 74 in sandbox/.devcontainer/Dockerfile

View workflow job for this annotation

GitHub Actions / dockerfile lint 

DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
case "$(dpkg --print-architecture)" in arm64) pa=aarch64 ;; amd64) pa=x86_64 ;; *) exit 1 ;; esac; \
url="https://github.com/astral-sh/python-build-standalone/releases/download/${PY_RELEASE}/cpython-${PY_VERSION}+${PY_RELEASE}-${pa}-unknown-linux-gnu-install_only.tar.gz"; \
echo "python-build-standalone: $url"; \
Expand Down Expand Up @@ -103,7 +103,7 @@
ENV NPM_CONFIG_PREFIX=/usr/local/share/npm-global
ENV PATH=/usr/local/share/npm-global/bin:/opt/python/bin:/usr/local/bin:$PATH:/home/dev/.npm-global/bin
# Login shells reset PATH via /etc/profile; re-add the tool dirs for them too.
RUN printf 'export PATH="/usr/local/share/npm-global/bin:/opt/python/bin:/usr/local/bin:$PATH:/home/dev/.npm-global/bin"\n' \

Check failure on line 106 in sandbox/.devcontainer/Dockerfile

View workflow job for this annotation

GitHub Actions / dockerfile lint 

SC2016 info: Expressions don't expand in single quotes, use double quotes for that.
> /etc/profile.d/00-sandbox-path.sh

# --- Claude Code CLI ----------------------------------------------------------
Expand All @@ -118,7 +118,7 @@
ARG CLAUDE_CODE_VERSION=2.1.207
ARG CLAUDE_CODE_SHA256_ARM64=8bc14a284065383460f37981d724b8f7aa7ca93c9849d2fe367e08f03383f454
ARG CLAUDE_CODE_SHA256_AMD64=85e7e988a392d859f90802ca21fb26e89d3c9ab527f5ed0b08df3955e34d5c83
RUN set -eux; \

Check failure on line 121 in sandbox/.devcontainer/Dockerfile

View workflow job for this annotation

GitHub Actions / dockerfile lint 

DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check

Check failure on line 121 in sandbox/.devcontainer/Dockerfile

View workflow job for this annotation

GitHub Actions / dockerfile lint 

DL3003 warning: Use WORKDIR to switch to a directory
npm install -g --no-fund --no-audit "@anthropic-ai/claude-code@${CLAUDE_CODE_VERSION}"; \
case "$(dpkg --print-architecture)" in arm64) na=linux-arm64; want="${CLAUDE_CODE_SHA256_ARM64}" ;; amd64) na=linux-x64; want="${CLAUDE_CODE_SHA256_AMD64}" ;; *) exit 1 ;; esac; \
root="$(npm root -g)/@anthropic-ai/claude-code"; \
Expand Down Expand Up @@ -183,7 +183,7 @@
# the tools installed above (none of the COPY'd files), so it too sits BEFORE the
# frequently-edited COPY block, and BEFORE the setuid strip (which changes only mode
# bits, not the hashed content).
RUN set -eux; \

Check failure on line 186 in sandbox/.devcontainer/Dockerfile

View workflow job for this annotation

GitHub Actions / dockerfile lint 

DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
pinfile=/usr/local/share/dev-sandbox/binary-pins.txt; \
mkdir -p /usr/local/share/dev-sandbox; \
: > "$pinfile"; \
Expand Down
Loading