diff --git a/CHANGELOG.md b/CHANGELOG.md index bb79196..65a08a3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -12,6 +12,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), +- 2026-10-20 — mise 2026.10.13 → 2026.10.15; uv 0.13.1 → 0.13.3; Context7 CLI (transient) 0.8.0 → 0.8.1. + - 2026-10-18 — mise 2026.10.12 → 2026.10.13. - 2026-10-17 — Codex CLI 0.162.1 → 0.163.0; mise 2026.10.8 → 2026.10.12; Node.js 24.21.0 → 24.22.0; npm 12.2.0 → 12.2.1; uv 0.13.0 → 0.13.1; Context7 CLI (transient) 0.6.0 → 0.8.0. diff --git a/images/base/Dockerfile b/images/base/Dockerfile index 6367362..4123eb7 100644 --- a/images/base/Dockerfile +++ b/images/base/Dockerfile @@ -14,14 +14,14 @@ ARG GH_ARM64_SHA256=7862c86c72f43df3a2d93ddde6f473285b4e2af61b494849846827e513ef ARG TTYD_VERSION=1.7.7 ARG TTYD_AMD64_SHA256=8a217c968aba172e0dbf3f34447218dc015bc4d5e59bf51db2f2cd12b7be4f55 ARG TTYD_ARM64_SHA256=b38acadd89d1d396a0f5649aa52c539edbad07f4bc7348b27b4f4b7219dd4165 -ARG MISE_VERSION=2026.10.13 -ARG MISE_AMD64_SHA256=94c45523c7b6760b7da704f16051171ca32e8447a849a02266a439a4455e9a12 -ARG MISE_ARM64_SHA256=983fabf36625566f216400b907b33b4daca99adb5bc3d3cdab123b5e791575b2 +ARG MISE_VERSION=2026.10.15 +ARG MISE_AMD64_SHA256=e3b186d4c70627f27037be615becaf4acfb30e41fb6a1819486717dc94e4e2a9 +ARG MISE_ARM64_SHA256=3abbaac305a465ef038eb4ea07b961c037a8b639108005e43f8e2c00a8f67c11 ARG PYTHON_VERSION=3.14.8 ARG PYTHON_315_VERSION=3.15.0 ARG NODE_VERSION=24.22.0 ARG NPM_VERSION=12.2.1 -ARG UV_VERSION=0.13.1 +ARG UV_VERSION=0.13.3 LABEL org.opencontainers.image.title="Remote Dev Base" \ org.opencontainers.image.description="Community remote development base for browser-hosted coding agents" \ diff --git a/mise.lock b/mise.lock index a139337..728cf36 100644 --- a/mise.lock +++ b/mise.lock @@ -105,20 +105,20 @@ url = "https://github.com/mvdan/sh/releases/download/v3.14.1/shfmt_v3.14.1_linux url_api = "https://api.github.com/repos/mvdan/sh/releases/assets/547320883" [[tools.uv]] -version = "0.13.1" +version = "0.13.3" backend = "aqua:astral-sh/uv" -specifiers = ["0.13.1"] +specifiers = ["0.13.3"] [tools.uv."platforms.linux-arm64"] -checksum = "sha256:9041c73c99fdc5892cf128140beb354eca9231d502068cc36e6cb53a8e59ad14" -url = "https://github.com/astral-sh/uv/releases/download/0.13.1/uv-aarch64-unknown-linux-gnu.tar.gz" -url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/639312990" +checksum = "sha256:611ff684f193a84d2fdad29c5f12505d02ece94984c7c982cdde950eba5c95b9" +url = "https://github.com/astral-sh/uv/releases/download/0.13.3/uv-aarch64-unknown-linux-gnu.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/657907667" provenance = "github-attestations" [tools.uv."platforms.linux-x64"] -checksum = "sha256:eadd9d27c134ab5ac1ffd4473b97a741407f3ea238288f03121fc4deddf90220" -url = "https://github.com/astral-sh/uv/releases/download/0.13.1/uv-x86_64-unknown-linux-gnu.tar.gz" -url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/639313223" +checksum = "sha256:e4f169ec380f1793b898a6f1fcbacd22db25cf7ca0349a6e96ffb85b69998d04" +url = "https://github.com/astral-sh/uv/releases/download/0.13.3/uv-x86_64-unknown-linux-gnu.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/657907872" provenance = "github-attestations" [[tools.yq]] diff --git a/mise.toml b/mise.toml index bfbcf7e..e6c1cb6 100644 --- a/mise.toml +++ b/mise.toml @@ -6,7 +6,7 @@ lockfile_platforms = ["linux-x64", "linux-arm64"] [tools] python = ["3.14.8", "3.15.0"] node = "24.22.0" -uv = "0.13.1" +uv = "0.13.3" "pypi:ruff" = { version = "0.17.1", python = "3.14.8" } "pypi:pytest" = { version = "9.1.1", python = "3.14.8" } "pypi:pre-commit" = { version = "4.7.0", python = "3.14.8" } diff --git a/scripts/remote-dev-context7-device-login.py b/scripts/remote-dev-context7-device-login.py index fa04c20..1b50f76 100644 --- a/scripts/remote-dev-context7-device-login.py +++ b/scripts/remote-dev-context7-device-login.py @@ -28,9 +28,9 @@ CONTEXT7_CLI_NAME = "ctx7" CONTEXT7_KEY_PREFIX = "ctx7sk-" CONTEXT7_CREDENTIALS_RELATIVE = Path("context7") / "credentials.json" -REVIEWED_CONTEXT7_CLI_VERSION = "0.8.0" +REVIEWED_CONTEXT7_CLI_VERSION = "0.8.1" REVIEWED_CONTEXT7_CLI_INTEGRITY = ( - "sha512-iEhY9CS2aujMLbSh6WqFPiZgUTUuU+RRvANoNlX+PYUuwlpup83joVjVoI3Xvok6nlHeESYiqH4AhoDmiYiukA==" + "sha512-Co+cXpXk34FdknwUaCah88xSsjSSC7fy77Uz9mPjvdjFmho5F6qxG2X0TaxgqFDh9qAaSFS9Nn50j30C8rwRGg==" ) EXPECTED_PACKAGE_LICENSE = "MIT" NPM_REGISTRY = "https://registry.npmjs.org/" diff --git a/scripts/test-remote-dev-context7-device-login.py b/scripts/test-remote-dev-context7-device-login.py index d06f0d0..d6d906d 100644 --- a/scripts/test-remote-dev-context7-device-login.py +++ b/scripts/test-remote-dev-context7-device-login.py @@ -101,9 +101,9 @@ def write_mise_config(path: Path, node_version: str = "24.19.0") -> None: def assert_reviewed_version_contract(module) -> None: - if module.REVIEWED_CONTEXT7_CLI_VERSION != "0.8.0": + if module.REVIEWED_CONTEXT7_CLI_VERSION != "0.8.1": raise AssertionError("Context7 reviewed CLI version drifted unexpectedly") - if module.reviewed_cli_version() != "0.8.0": + if module.reviewed_cli_version() != "0.8.1": raise AssertionError("reviewed Context7 CLI version was not resolved") if module.reviewed_cli_integrity() != module.REVIEWED_CONTEXT7_CLI_INTEGRITY: raise AssertionError("reviewed Context7 CLI integrity was not resolved") diff --git a/third_party/antigravity-cli-candidate.json b/third_party/antigravity-cli-candidate.json index d9e8157..809363b 100644 --- a/third_party/antigravity-cli-candidate.json +++ b/third_party/antigravity-cli-candidate.json @@ -1,11 +1,11 @@ { "archive": { "content_type": "application/x-tar", - "final_url": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.2-4835981233356800/linux-x64/cli_linux_x64.tar.gz", + "final_url": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.3-4577820882632704/linux-x64/cli_linux_x64.tar.gz", "member": "antigravity", - "sha512": "4a393afc1369cee94e817c1b430c9128d02b12ebd4d5703ace5cd47b2333e216d673fb0097cbf7195f757b110163ba9850e9eea3fdbbaddd4b25668b82c03f05", - "size": 63937290, - "source": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.2-4835981233356800/linux-x64/cli_linux_x64.tar.gz" + "sha512": "9b726b86280a56e8ffa84b3b3a1c00d19972833a1f6c0b21d85c5fc6e408af6492e4c61353cad9b500bee599af264c92cfc2ead1f5048ab9525328e1e4199c40", + "size": 64263791, + "source": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.3-4577820882632704/linux-x64/cli_linux_x64.tar.gz" }, "blocking_findings": [], "installer": { @@ -21,17 +21,17 @@ "manifest": { "content_type": "application/json", "final_url": "https://antigravity-cli-auto-updater-974169037036.us-central1.run.app/manifests/linux_amd64.json", - "payload_sha512": "4a393afc1369cee94e817c1b430c9128d02b12ebd4d5703ace5cd47b2333e216d673fb0097cbf7195f757b110163ba9850e9eea3fdbbaddd4b25668b82c03f05", - "payload_url": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.2-4835981233356800/linux-x64/cli_linux_x64.tar.gz", - "sha256": "7942274fb64e30a5106669af06e09a64e3fa7a1e8bb854d7a9e044a3773b69d2", + "payload_sha512": "9b726b86280a56e8ffa84b3b3a1c00d19972833a1f6c0b21d85c5fc6e408af6492e4c61353cad9b500bee599af264c92cfc2ead1f5048ab9525328e1e4199c40", + "payload_url": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.3-4577820882632704/linux-x64/cli_linux_x64.tar.gz", + "sha256": "1cd98ea974643dba1391bd63f77819eb8d2b680c62ed16a30a863e9570e6fcae", "size": 301, "source": "https://antigravity-cli-auto-updater-974169037036.us-central1.run.app/manifests/linux_amd64.json", - "version": "1.4.2" + "version": "1.4.3" }, "payload": { "path": ".local/bin/agy", - "sha256": "085f43e0d0628a8a8dabe1e547067818fa2c0adc86cfac98a3c4492918f455ef", - "size": 221286656 + "sha256": "d003c9d47e12f689d3448cad0f614289ccde5fb4c58bf8b4b543a9b514c097bc", + "size": 222322944 }, "schema_version": 2 } diff --git a/third_party/inventory.json b/third_party/inventory.json index 5e3c384..45c5a16 100644 --- a/third_party/inventory.json +++ b/third_party/inventory.json @@ -1,7 +1,7 @@ { "schema_version": 1, "reviewed_on": "2026-08-29", - "refreshed_on": "2026-10-18", + "refreshed_on": "2026-10-20", "policy": { "source_of_truth": "versions.env", "maintenance": "Version changes require a reviewed inventory and notice update in the same pull request.", @@ -94,14 +94,14 @@ "name": "mise", "image_scope": "both", "version_key": "MISE_VERSION", - "version": "2026.10.13", + "version": "2026.10.15", "source": "https://github.com/jdx/mise", "license": "MIT", "notices": [ { "path": "components/mise/LICENSE", "source": "repository", - "reviewed_from": "https://raw.githubusercontent.com/jdx/mise/v2026.10.13/LICENSE" + "reviewed_from": "https://raw.githubusercontent.com/jdx/mise/v2026.10.15/LICENSE" } ] }, @@ -180,19 +180,19 @@ "name": "uv", "image_scope": "both", "version_key": "UV_VERSION", - "version": "0.13.1", + "version": "0.13.3", "source": "https://github.com/astral-sh/uv", "license": "Apache-2.0 OR MIT", "notices": [ { "path": "components/uv/LICENSE-APACHE-2.0", "source": "repository", - "reviewed_from": "https://raw.githubusercontent.com/astral-sh/uv/0.13.1/LICENSE-APACHE" + "reviewed_from": "https://raw.githubusercontent.com/astral-sh/uv/0.13.3/LICENSE-APACHE" }, { "path": "components/uv/LICENSE-MIT", "source": "repository", - "reviewed_from": "https://raw.githubusercontent.com/astral-sh/uv/0.13.1/LICENSE-MIT" + "reviewed_from": "https://raw.githubusercontent.com/astral-sh/uv/0.13.3/LICENSE-MIT" } ] }, diff --git a/third_party/standalone-artifact-inspection.json b/third_party/standalone-artifact-inspection.json index 29da0bf..53eab2d 100644 --- a/third_party/standalone-artifact-inspection.json +++ b/third_party/standalone-artifact-inspection.json @@ -144,7 +144,7 @@ }, { "id": "mise", - "version": "2026.10.13", + "version": "2026.10.15", "packaging": "raw-binary", "repository_notices": [ { @@ -156,16 +156,16 @@ "architecture_legal_sets_equal": true, "architectures": { "amd64": { - "asset_url": "https://github.com/jdx/mise/releases/download/v2026.10.13/mise-v2026.10.13-linux-x64", - "asset_sha256": "94c45523c7b6760b7da704f16051171ca32e8447a849a02266a439a4455e9a12", - "asset_size": 167691024, + "asset_url": "https://github.com/jdx/mise/releases/download/v2026.10.15/mise-v2026.10.15-linux-x64", + "asset_sha256": "e3b186d4c70627f27037be615becaf4acfb30e41fb6a1819486717dc94e4e2a9", + "asset_size": 168019312, "archive_member_count": null, "legal_members": [] }, "arm64": { - "asset_url": "https://github.com/jdx/mise/releases/download/v2026.10.13/mise-v2026.10.13-linux-arm64", - "asset_sha256": "983fabf36625566f216400b907b33b4daca99adb5bc3d3cdab123b5e791575b2", - "asset_size": 145861248, + "asset_url": "https://github.com/jdx/mise/releases/download/v2026.10.15/mise-v2026.10.15-linux-arm64", + "asset_sha256": "3abbaac305a465ef038eb4ea07b961c037a8b639108005e43f8e2c00a8f67c11", + "asset_size": 146679224, "archive_member_count": null, "legal_members": [] } @@ -173,7 +173,7 @@ }, { "id": "uv", - "version": "0.13.1", + "version": "0.13.3", "packaging": "tar.gz", "repository_notices": [ { @@ -190,16 +190,16 @@ "architecture_legal_sets_equal": true, "architectures": { "amd64": { - "asset_url": "https://github.com/astral-sh/uv/releases/download/0.13.1/uv-x86_64-unknown-linux-gnu.tar.gz", - "asset_sha256": "eadd9d27c134ab5ac1ffd4473b97a741407f3ea238288f03121fc4deddf90220", - "asset_size": 16738706, + "asset_url": "https://github.com/astral-sh/uv/releases/download/0.13.3/uv-x86_64-unknown-linux-gnu.tar.gz", + "asset_sha256": "e4f169ec380f1793b898a6f1fcbacd22db25cf7ca0349a6e96ffb85b69998d04", + "asset_size": 16767662, "archive_member_count": 3, "legal_members": [] }, "arm64": { - "asset_url": "https://github.com/astral-sh/uv/releases/download/0.13.1/uv-aarch64-unknown-linux-gnu.tar.gz", - "asset_sha256": "9041c73c99fdc5892cf128140beb354eca9231d502068cc36e6cb53a8e59ad14", - "asset_size": 15838367, + "asset_url": "https://github.com/astral-sh/uv/releases/download/0.13.3/uv-aarch64-unknown-linux-gnu.tar.gz", + "asset_sha256": "611ff684f193a84d2fdad29c5f12505d02ece94984c7c982cdde950eba5c95b9", + "asset_size": 15857962, "archive_member_count": 3, "legal_members": [] } diff --git a/third_party/standalone-artifact-inspection.md b/third_party/standalone-artifact-inspection.md index 4973851..d6ab3dd 100644 --- a/third_party/standalone-artifact-inspection.md +++ b/third_party/standalone-artifact-inspection.md @@ -8,8 +8,8 @@ This is a bounded inspection of the exact AMD64 and ARM64 release assets pinned | codex-cli | `rust-v0.163.0` | tar.gz | None | LICENSE, NOTICE | | codex-code-mode-host | `rust-v0.163.0` | tar.gz | None | LICENSE, NOTICE | | ttyd | `1.7.7` | raw-binary | None | LICENSE | -| mise | `2026.10.13` | raw-binary | None | LICENSE | -| uv | `0.13.1` | tar.gz | None | LICENSE-APACHE-2.0, LICENSE-MIT | +| mise | `2026.10.15` | raw-binary | None | LICENSE | +| uv | `0.13.3` | tar.gz | None | LICENSE-APACHE-2.0, LICENSE-MIT | | yq | `4.54.1` | raw-binary | None | LICENSE | | shfmt | `3.14.1` | raw-binary | None | LICENSE | | actionlint | `1.7.12` | tar.gz | LICENSE.txt | LICENSE.txt | diff --git a/versions.env b/versions.env index 79c4374..2a22ff6 100644 --- a/versions.env +++ b/versions.env @@ -11,17 +11,17 @@ CODEX_ARM64_SHA256=a7261e65f4a96d8f4ca65a069c6cf2dc2c33defc341e48078acefda9461ff CODEX_CODE_MODE_HOST_AMD64_SHA256=314263128ba6592e7e807c265deeaf928a692b72dcbfeb5e0b20c9423b703529 CODEX_CODE_MODE_HOST_ARM64_SHA256=284356aefb197f00b76b912efdfdbae8ccf3ea1f89b976dde064b7ccb43214ef # Reviewed metadata for transient online authentication only; not distributed in the image. -CONTEXT7_CLI_VERSION=0.8.0 -CONTEXT7_CLI_SRI_SHA512=sha512-iEhY9CS2aujMLbSh6WqFPiZgUTUuU+RRvANoNlX+PYUuwlpup83joVjVoI3Xvok6nlHeESYiqH4AhoDmiYiukA== +CONTEXT7_CLI_VERSION=0.8.1 +CONTEXT7_CLI_SRI_SHA512=sha512-Co+cXpXk34FdknwUaCah88xSsjSSC7fy77Uz9mPjvdjFmho5F6qxG2X0TaxgqFDh9qAaSFS9Nn50j30C8rwRGg== GH_VERSION=2.102.0 GH_AMD64_SHA256=bb766f710eef8ede859c18578c72c327597cd4c8a85b06001b1f3843c6019386 GH_ARM64_SHA256=7862c86c72f43df3a2d93ddde6f473285b4e2af61b494849846827e513ef6484 TTYD_VERSION=1.7.7 TTYD_AMD64_SHA256=8a217c968aba172e0dbf3f34447218dc015bc4d5e59bf51db2f2cd12b7be4f55 TTYD_ARM64_SHA256=b38acadd89d1d396a0f5649aa52c539edbad07f4bc7348b27b4f4b7219dd4165 -MISE_VERSION=2026.10.13 -MISE_AMD64_SHA256=94c45523c7b6760b7da704f16051171ca32e8447a849a02266a439a4455e9a12 -MISE_ARM64_SHA256=983fabf36625566f216400b907b33b4daca99adb5bc3d3cdab123b5e791575b2 +MISE_VERSION=2026.10.15 +MISE_AMD64_SHA256=e3b186d4c70627f27037be615becaf4acfb30e41fb6a1819486717dc94e4e2a9 +MISE_ARM64_SHA256=3abbaac305a465ef038eb4ea07b961c037a8b639108005e43f8e2c00a8f67c11 PYTHON_VERSION=3.14.8 # Bundled in parallel; explicitly selected by compatible projects, never the default. PYTHON_315_VERSION=3.15.0 @@ -29,7 +29,7 @@ PYTHON_315_VERSION=3.15.0 NODE_VERSION=24.22.0 # Updated together with the other runtime pins by check-upstream.yml. NPM_VERSION=12.2.1 -UV_VERSION=0.13.1 +UV_VERSION=0.13.3 RUFF_VERSION=0.17.1 PYTEST_VERSION=9.1.1 PRE_COMMIT_VERSION=4.7.0