Skip to content

Release v1.1.3#8

Merged
CoderLuii merged 1 commit into
mainfrom
release/v1.1.3
Jul 21, 2026
Merged

Release v1.1.3#8
CoderLuii merged 1 commit into
mainfrom
release/v1.1.3

Conversation

@CoderLuii

@CoderLuii CoderLuii commented Jul 21, 2026

Copy link
Copy Markdown
Owner

What changed

Released v1.1.3 with dependency and security updates for the HolyCode image.

  • Updated OpenCode, Claude Code, s6-overlay, fzf, pnpm, Vite, Prettier, Wrangler, Prisma, Lighthouse, the default OpenCode plugin, and Python packages.
  • Removed Hermes, Vercel CLI, sharp-cli, concurrently, and LHCI from the bundled image because their current dependency trees still contained fixable security findings.
  • Kept Paperclip at 2026.707.0 until its newer migration path receives separate persistence testing.
  • Enabled the Chromium sandbox and run Chromium as opencode.
  • Limited npm lifecycle scripts to the reviewed packages.
  • Updated the README, Docker Hub description, deployment guides, changelog, security notes, dependency audit, and translations.

The published AMD64 and ARM64 images passed the release checks before v1.1.3 was tagged.

chatgpt-codex-connector[bot]

This comment was marked as outdated.

Context: Security and dependency refresh from the immutable v1.1.2 baseline.

What changed: Refresh compatible runtime pins, remove vulnerable bundled tools and Hermes, enforce reviewed npm lifecycle scripts, enable the Chromium sandbox, and update release documentation.

Verification: Local AMD64 build, fixable vulnerability gates, upgrade and rollback tests, plugin modes, Claude authentication persistence, workflow checks, and release contract tests passed. Protected validation runs the native AMD64 and ARM64 gates on this exact commit before release.

Release: Git tag and GitHub release title must be v1.1.3; Docker tags are 1.1.3 and latest.
@CoderLuii
CoderLuii merged commit 3e83f96 into main Jul 21, 2026
5 checks passed
@CoderLuii CoderLuii changed the title v1.1.3 Release v1.1.3 Jul 21, 2026
Repository owner deleted a comment from chatgpt-codex-connector Bot Jul 21, 2026
@CoderLuii
CoderLuii deleted the release/v1.1.3 branch July 21, 2026 21:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant