release-factory/opencode-workstation-builder/image/opencode-runtime/package.json at f9140454e2349be08e194da2cd2778475d93097b - release-factory - Gitea: Git with a cup of tea

starred/release-factory

mirror of https://github.com/okxlin/release-factory.git synced 2026-09-22 16:02:15 +00:00

Files

T

okxlin e058ba3f73 fix(images): harden runtimes and publish verified artifacts (#85 )

Reject unsafe workstation credentials, fix native ARM64 Java, and remove duplicate extensions, caches and temporary tool layers.

Pin OpenCode's baseline and Gemini's source/runtime inputs; refresh maintained browser and OS packages; fix Nginx and vendored ZIP vulnerabilities. Verify real login, default plugins, browser/CDP persistence and isolated OpenClaw sandbox operations.

Build each platform once and bind release publication to the tested config and manifest digests. Keep service-specific vulnerability gates and refresh DSH APT stages during PR verification.

Validation: all 13 PR verification jobs passed, including native amd64/arm64 workstations and DSH variants, plus both browser variants and OpenClaw on amd64. Publication jobs were skipped for PR verification.

2026-09-13 01:52:07 +08:00

13 lines

279 B

JSON

Raw Blame History

 {
   "name": "release-factory-opencode-runtime",
   "version": "1.18.30",
   "private": true,
   "config": {
     "dcpPackage": "@tarquinen/opencode-dcp@3.1.15"
   },
   "optionalDependencies": {
     "opencode-linux-x64-baseline": "1.18.30",
     "opencode-linux-arm64": "1.18.30"
   }
 }