chore: review upstream updates

CHANGELOG.md

@@ -12,6 +12,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 <!-- remote-dev-upstream-refreshes -->
 
+- 2026-10-20 — mise 2026.10.13 → 2026.10.15; uv 0.13.1 → 0.13.3; Context7 CLI (transient) 0.8.0 → 0.8.1.
+
 - 2026-10-18 — mise 2026.10.12 → 2026.10.13.
 
 - 2026-10-17 — Codex CLI 0.162.1 → 0.163.0; mise 2026.10.8 → 2026.10.12; Node.js 24.21.0 → 24.22.0; npm 12.2.0 → 12.2.1; uv 0.13.0 → 0.13.1; Context7 CLI (transient) 0.6.0 → 0.8.0.

images/base/Dockerfile

@@ -14,14 +14,14 @@ ARG GH_ARM64_SHA256=7862c86c72f43df3a2d93ddde6f473285b4e2af61b494849846827e513ef
 ARG TTYD_VERSION=1.7.7
 ARG TTYD_AMD64_SHA256=8a217c968aba172e0dbf3f34447218dc015bc4d5e59bf51db2f2cd12b7be4f55
 ARG TTYD_ARM64_SHA256=b38acadd89d1d396a0f5649aa52c539edbad07f4bc7348b27b4f4b7219dd4165
-ARG MISE_VERSION=2026.10.13
-ARG MISE_AMD64_SHA256=94c45523c7b6760b7da704f16051171ca32e8447a849a02266a439a4455e9a12
-ARG MISE_ARM64_SHA256=983fabf36625566f216400b907b33b4daca99adb5bc3d3cdab123b5e791575b2
+ARG MISE_VERSION=2026.10.15
+ARG MISE_AMD64_SHA256=e3b186d4c70627f27037be615becaf4acfb30e41fb6a1819486717dc94e4e2a9
+ARG MISE_ARM64_SHA256=3abbaac305a465ef038eb4ea07b961c037a8b639108005e43f8e2c00a8f67c11
 ARG PYTHON_VERSION=3.14.8
 ARG PYTHON_315_VERSION=3.15.0
 ARG NODE_VERSION=24.22.0
 ARG NPM_VERSION=12.2.1
-ARG UV_VERSION=0.13.1
+ARG UV_VERSION=0.13.3
 
 LABEL org.opencontainers.image.title="Remote Dev Base" \
       org.opencontainers.image.description="Community remote development base for browser-hosted coding agents" \

mise.toml

@@ -6,7 +6,7 @@ lockfile_platforms = ["linux-x64", "linux-arm64"]
 [tools]
 python = ["3.14.8", "3.15.0"]
 node = "24.22.0"
-uv = "0.13.1"
+uv = "0.13.3"
 "pypi:ruff" = { version = "0.17.1", python = "3.14.8" }
 "pypi:pytest" = { version = "9.1.1", python = "3.14.8" }
 "pypi:pre-commit" = { version = "4.7.0", python = "3.14.8" }

scripts/remote-dev-context7-device-login.py

@@ -28,9 +28,9 @@
 CONTEXT7_CLI_NAME = "ctx7"
 CONTEXT7_KEY_PREFIX = "ctx7sk-"
 CONTEXT7_CREDENTIALS_RELATIVE = Path("context7") / "credentials.json"
-REVIEWED_CONTEXT7_CLI_VERSION = "0.8.0"
+REVIEWED_CONTEXT7_CLI_VERSION = "0.8.1"
 REVIEWED_CONTEXT7_CLI_INTEGRITY = (
-    "sha512-iEhY9CS2aujMLbSh6WqFPiZgUTUuU+RRvANoNlX+PYUuwlpup83joVjVoI3Xvok6nlHeESYiqH4AhoDmiYiukA=="
+    "sha512-Co+cXpXk34FdknwUaCah88xSsjSSC7fy77Uz9mPjvdjFmho5F6qxG2X0TaxgqFDh9qAaSFS9Nn50j30C8rwRGg=="
 )
 EXPECTED_PACKAGE_LICENSE = "MIT"
 NPM_REGISTRY = "https://registry.npmjs.org/"

scripts/test-remote-dev-context7-device-login.py

@@ -101,9 +101,9 @@ def write_mise_config(path: Path, node_version: str = "24.19.0") -> None:
 
 
 def assert_reviewed_version_contract(module) -> None:
-    if module.REVIEWED_CONTEXT7_CLI_VERSION != "0.8.0":
+    if module.REVIEWED_CONTEXT7_CLI_VERSION != "0.8.1":
         raise AssertionError("Context7 reviewed CLI version drifted unexpectedly")
-    if module.reviewed_cli_version() != "0.8.0":
+    if module.reviewed_cli_version() != "0.8.1":
         raise AssertionError("reviewed Context7 CLI version was not resolved")
     if module.reviewed_cli_integrity() != module.REVIEWED_CONTEXT7_CLI_INTEGRITY:
         raise AssertionError("reviewed Context7 CLI integrity was not resolved")

third_party/antigravity-cli-candidate.json

@@ -1,11 +1,11 @@
 {
   "archive": {
     "content_type": "application/x-tar",
-    "final_url": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.2-4835981233356800/linux-x64/cli_linux_x64.tar.gz",
+    "final_url": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.3-4577820882632704/linux-x64/cli_linux_x64.tar.gz",
     "member": "antigravity",
-    "sha512": "4a393afc1369cee94e817c1b430c9128d02b12ebd4d5703ace5cd47b2333e216d673fb0097cbf7195f757b110163ba9850e9eea3fdbbaddd4b25668b82c03f05",
-    "size": 63937290,
-    "source": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.2-4835981233356800/linux-x64/cli_linux_x64.tar.gz"
+    "sha512": "9b726b86280a56e8ffa84b3b3a1c00d19972833a1f6c0b21d85c5fc6e408af6492e4c61353cad9b500bee599af264c92cfc2ead1f5048ab9525328e1e4199c40",
+    "size": 64263791,
+    "source": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.3-4577820882632704/linux-x64/cli_linux_x64.tar.gz"
   },
   "blocking_findings": [],
   "installer": {
@@ -21,17 +21,17 @@
   "manifest": {
     "content_type": "application/json",
     "final_url": "https://antigravity-cli-auto-updater-974169037036.us-central1.run.app/manifests/linux_amd64.json",
-    "payload_sha512": "4a393afc1369cee94e817c1b430c9128d02b12ebd4d5703ace5cd47b2333e216d673fb0097cbf7195f757b110163ba9850e9eea3fdbbaddd4b25668b82c03f05",
-    "payload_url": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.2-4835981233356800/linux-x64/cli_linux_x64.tar.gz",
-    "sha256": "7942274fb64e30a5106669af06e09a64e3fa7a1e8bb854d7a9e044a3773b69d2",
+    "payload_sha512": "9b726b86280a56e8ffa84b3b3a1c00d19972833a1f6c0b21d85c5fc6e408af6492e4c61353cad9b500bee599af264c92cfc2ead1f5048ab9525328e1e4199c40",
+    "payload_url": "https://storage.googleapis.com/antigravity-public/antigravity-cli/1.4.3-4577820882632704/linux-x64/cli_linux_x64.tar.gz",
+    "sha256": "1cd98ea974643dba1391bd63f77819eb8d2b680c62ed16a30a863e9570e6fcae",
     "size": 301,
     "source": "https://antigravity-cli-auto-updater-974169037036.us-central1.run.app/manifests/linux_amd64.json",
-    "version": "1.4.2"
+    "version": "1.4.3"
   },
   "payload": {
     "path": ".local/bin/agy",
-    "sha256": "085f43e0d0628a8a8dabe1e547067818fa2c0adc86cfac98a3c4492918f455ef",
-    "size": 221286656
+    "sha256": "d003c9d47e12f689d3448cad0f614289ccde5fb4c58bf8b4b543a9b514c097bc",
+    "size": 222322944
   },
   "schema_version": 2
 }

third_party/inventory.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "reviewed_on": "2026-08-29",
-  "refreshed_on": "2026-10-18",
+  "refreshed_on": "2026-10-20",
   "policy": {
     "source_of_truth": "versions.env",
     "maintenance": "Version changes require a reviewed inventory and notice update in the same pull request.",
@@ -94,14 +94,14 @@
       "name": "mise",
       "image_scope": "both",
       "version_key": "MISE_VERSION",
-      "version": "2026.10.13",
+      "version": "2026.10.15",
       "source": "https://github.com/jdx/mise",
       "license": "MIT",
       "notices": [
         {
           "path": "components/mise/LICENSE",
           "source": "repository",
-          "reviewed_from": "https://raw.githubusercontent.com/jdx/mise/v2026.10.13/LICENSE"
+          "reviewed_from": "https://raw.githubusercontent.com/jdx/mise/v2026.10.15/LICENSE"
         }
       ]
     },
@@ -180,19 +180,19 @@
       "name": "uv",
       "image_scope": "both",
       "version_key": "UV_VERSION",
-      "version": "0.13.1",
+      "version": "0.13.3",
       "source": "https://github.com/astral-sh/uv",
       "license": "Apache-2.0 OR MIT",
       "notices": [
         {
           "path": "components/uv/LICENSE-APACHE-2.0",
           "source": "repository",
-          "reviewed_from": "https://raw.githubusercontent.com/astral-sh/uv/0.13.1/LICENSE-APACHE"
+          "reviewed_from": "https://raw.githubusercontent.com/astral-sh/uv/0.13.3/LICENSE-APACHE"
         },
         {
           "path": "components/uv/LICENSE-MIT",
           "source": "repository",
-          "reviewed_from": "https://raw.githubusercontent.com/astral-sh/uv/0.13.1/LICENSE-MIT"
+          "reviewed_from": "https://raw.githubusercontent.com/astral-sh/uv/0.13.3/LICENSE-MIT"
         }
       ]
     },

third_party/standalone-artifact-inspection.json

@@ -144,7 +144,7 @@
     },
     {
       "id": "mise",
-      "version": "2026.10.13",
+      "version": "2026.10.15",
       "packaging": "raw-binary",
       "repository_notices": [
         {
@@ -156,24 +156,24 @@
       "architecture_legal_sets_equal": true,
       "architectures": {
         "amd64": {
-          "asset_url": "https://github.com/jdx/mise/releases/download/v2026.10.13/mise-v2026.10.13-linux-x64",
-          "asset_sha256": "94c45523c7b6760b7da704f16051171ca32e8447a849a02266a439a4455e9a12",
-          "asset_size": 167691024,
+          "asset_url": "https://github.com/jdx/mise/releases/download/v2026.10.15/mise-v2026.10.15-linux-x64",
+          "asset_sha256": "e3b186d4c70627f27037be615becaf4acfb30e41fb6a1819486717dc94e4e2a9",
+          "asset_size": 168019312,
           "archive_member_count": null,
           "legal_members": []
         },
         "arm64": {
-          "asset_url": "https://github.com/jdx/mise/releases/download/v2026.10.13/mise-v2026.10.13-linux-arm64",
-          "asset_sha256": "983fabf36625566f216400b907b33b4daca99adb5bc3d3cdab123b5e791575b2",
-          "asset_size": 145861248,
+          "asset_url": "https://github.com/jdx/mise/releases/download/v2026.10.15/mise-v2026.10.15-linux-arm64",
+          "asset_sha256": "3abbaac305a465ef038eb4ea07b961c037a8b639108005e43f8e2c00a8f67c11",
+          "asset_size": 146679224,
           "archive_member_count": null,
           "legal_members": []
         }
       }
     },
     {
       "id": "uv",
-      "version": "0.13.1",
+      "version": "0.13.3",
       "packaging": "tar.gz",
       "repository_notices": [
         {
@@ -190,16 +190,16 @@
       "architecture_legal_sets_equal": true,
       "architectures": {
         "amd64": {
-          "asset_url": "https://github.com/astral-sh/uv/releases/download/0.13.1/uv-x86_64-unknown-linux-gnu.tar.gz",
-          "asset_sha256": "eadd9d27c134ab5ac1ffd4473b97a741407f3ea238288f03121fc4deddf90220",
-          "asset_size": 16738706,
+          "asset_url": "https://github.com/astral-sh/uv/releases/download/0.13.3/uv-x86_64-unknown-linux-gnu.tar.gz",
+          "asset_sha256": "e4f169ec380f1793b898a6f1fcbacd22db25cf7ca0349a6e96ffb85b69998d04",
+          "asset_size": 16767662,
           "archive_member_count": 3,
           "legal_members": []
         },
         "arm64": {
-          "asset_url": "https://github.com/astral-sh/uv/releases/download/0.13.1/uv-aarch64-unknown-linux-gnu.tar.gz",
-          "asset_sha256": "9041c73c99fdc5892cf128140beb354eca9231d502068cc36e6cb53a8e59ad14",
-          "asset_size": 15838367,
+          "asset_url": "https://github.com/astral-sh/uv/releases/download/0.13.3/uv-aarch64-unknown-linux-gnu.tar.gz",
+          "asset_sha256": "611ff684f193a84d2fdad29c5f12505d02ece94984c7c982cdde950eba5c95b9",
+          "asset_size": 15857962,
           "archive_member_count": 3,
           "legal_members": []
         }

third_party/standalone-artifact-inspection.md

@@ -8,8 +8,8 @@ This is a bounded inspection of the exact AMD64 and ARM64 release assets pinned
 | codex-cli | `rust-v0.163.0` | tar.gz | None | LICENSE, NOTICE |
 | codex-code-mode-host | `rust-v0.163.0` | tar.gz | None | LICENSE, NOTICE |
 | ttyd | `1.7.7` | raw-binary | None | LICENSE |
-| mise | `2026.10.13` | raw-binary | None | LICENSE |
-| uv | `0.13.1` | tar.gz | None | LICENSE-APACHE-2.0, LICENSE-MIT |
+| mise | `2026.10.15` | raw-binary | None | LICENSE |
+| uv | `0.13.3` | tar.gz | None | LICENSE-APACHE-2.0, LICENSE-MIT |
 | yq | `4.54.1` | raw-binary | None | LICENSE |
 | shfmt | `3.14.1` | raw-binary | None | LICENSE |
 | actionlint | `1.7.12` | tar.gz | LICENSE.txt | LICENSE.txt |

versions.env

@@ -11,25 +11,25 @@ CODEX_ARM64_SHA256=a7261e65f4a96d8f4ca65a069c6cf2dc2c33defc341e48078acefda9461ff
 CODEX_CODE_MODE_HOST_AMD64_SHA256=314263128ba6592e7e807c265deeaf928a692b72dcbfeb5e0b20c9423b703529
 CODEX_CODE_MODE_HOST_ARM64_SHA256=284356aefb197f00b76b912efdfdbae8ccf3ea1f89b976dde064b7ccb43214ef
 # Reviewed metadata for transient online authentication only; not distributed in the image.
-CONTEXT7_CLI_VERSION=0.8.0
-CONTEXT7_CLI_SRI_SHA512=sha512-iEhY9CS2aujMLbSh6WqFPiZgUTUuU+RRvANoNlX+PYUuwlpup83joVjVoI3Xvok6nlHeESYiqH4AhoDmiYiukA==
+CONTEXT7_CLI_VERSION=0.8.1
+CONTEXT7_CLI_SRI_SHA512=sha512-Co+cXpXk34FdknwUaCah88xSsjSSC7fy77Uz9mPjvdjFmho5F6qxG2X0TaxgqFDh9qAaSFS9Nn50j30C8rwRGg==
 GH_VERSION=2.102.0
 GH_AMD64_SHA256=bb766f710eef8ede859c18578c72c327597cd4c8a85b06001b1f3843c6019386
 GH_ARM64_SHA256=7862c86c72f43df3a2d93ddde6f473285b4e2af61b494849846827e513ef6484
 TTYD_VERSION=1.7.7
 TTYD_AMD64_SHA256=8a217c968aba172e0dbf3f34447218dc015bc4d5e59bf51db2f2cd12b7be4f55
 TTYD_ARM64_SHA256=b38acadd89d1d396a0f5649aa52c539edbad07f4bc7348b27b4f4b7219dd4165
-MISE_VERSION=2026.10.13
-MISE_AMD64_SHA256=94c45523c7b6760b7da704f16051171ca32e8447a849a02266a439a4455e9a12
-MISE_ARM64_SHA256=983fabf36625566f216400b907b33b4daca99adb5bc3d3cdab123b5e791575b2
+MISE_VERSION=2026.10.15
+MISE_AMD64_SHA256=e3b186d4c70627f27037be615becaf4acfb30e41fb6a1819486717dc94e4e2a9
+MISE_ARM64_SHA256=3abbaac305a465ef038eb4ea07b961c037a8b639108005e43f8e2c00a8f67c11
 PYTHON_VERSION=3.14.8
 # Bundled in parallel; explicitly selected by compatible projects, never the default.
 PYTHON_315_VERSION=3.15.0
 # Keep the latest stable maintenance release in the selected Node 24 LTS line.
 NODE_VERSION=24.22.0
 # Updated together with the other runtime pins by check-upstream.yml.
 NPM_VERSION=12.2.1
-UV_VERSION=0.13.1
+UV_VERSION=0.13.3
 RUFF_VERSION=0.17.1
 PYTEST_VERSION=9.1.1
 PRE_COMMIT_VERSION=4.7.0