v1.1.0

07/12/2026

Added

• Added native AMD64 and ARM64 release checks for upgrades, rollback, CLIProxyAPI authentication, Docker Scout, and Trivy.
• Published SPDX SBOM and SLSA provenance attestations with Docker image tags latest and 1.1.0.
• Added Renovate coverage and one-digit release version validation.

Changed

• Updated the base to Node.js 24.18.0 LTS with npm 11.16.0, OpenCode 1.17.18, Claude Code 2.1.207, Paperclip 2026.707.0, Hermes v2026.7.7.2, and CLIProxyAPI v7.2.71.
• Pinned container bases, release downloads, GitHub Actions, Docker Scout, Claude Code, and automatic OpenCode plugin updates to reviewed versions, digests, checksums, or commit SHAs.
• Corrected the release sequence at v1.1.0 while preserving v1.0.10 through v1.0.13 as published history.

Fixed

• Run Hermes with /home/opencode and matching XDG paths.
• Keep OpenCode plugin behavior deterministic in manual, automatic, disabled, and legacy unversioned configurations.
• Removed Drizzle Kit's unused legacy loader and old nested esbuild binaries.
• Removed root npm download caches from the image layers, reducing build residue and eliminating placeholder-token secret findings.

v1.0.13

07/07/2026

Changed

• Refresh the Docker runtime to Node.js 22.23.1 LTS while keeping npm 10.9.8.
• Refresh the pinned OpenCode, Paperclip, npm CLI, PyPI utility, GitHub-release, git-tag, and GitHub Actions versions used by the Docker image and workflows.
• Move Paperclip to its published Skills catalog package path and remove HolyCode's temporary catalog compatibility shim.
• Update the README, Docker Hub description, Podman guide, translations, and third-party notice text for the current Paperclip catalog packaging.

Fixed

• Keep pull-request validation pointed at Paperclip's current Skills catalog manifest path.

v1.0.12

06/21/2026

Changed

• Include Paperclip's published Skills catalog package in the Docker image until stable Paperclip carries the upstream package-layout fix.
• Document the Paperclip Skills catalog compatibility shim in the README, Docker Hub description, Podman guide, translations, and third-party notices.

Fixed

• Stop Paperclip's Skills page from failing on GET /api/skills/catalog by providing the catalog manifest at the path stable Paperclip expects.
• Add pull-request validation that checks the Paperclip Skills catalog manifest and verifies a non-empty catalog can load from the built image.

v1.0.11

06/20/2026

Changed

• Refresh Paperclip to 2026.618.0.
• Document Paperclip's OpenCode home/config paths and the supported Docker update path across the README, Docker Hub description, Podman guide, examples, security notes, and translations.

Fixed

• Start Paperclip with the same /home/opencode HOME and XDG paths used by OpenCode so the OpenCode adapter no longer falls back to /root/.config/opencode.
• Add pull-request validation that starts Paperclip and checks its runtime HOME/XDG environment.

v1.0.10

06/18/2026

Changed

• Refreshed the Docker runtime to Node.js 22.23.0 LTS with npm 10.9.8.
• Refreshed pinned npm, PyPI, GitHub-release, and git-tag tools in the image.
• Updated GitHub Actions checkout/QEMU pins, read-only workflow permissions, and Docker Hub secret documentation.
• Migrated Renovate custom managers to managerFilePatterns.
• Updated README, Docker Hub description, Podman guide, changelog, security notes, third-party notices, and translated runtime tables.
• Documented the supported update path: docker compose pull && docker compose up -d.
• Documented that some current bundled third-party CLIs still report transitive npm advisories at their latest stable versions.

Fixed

• Removed the critical npm audit findings from the previous Dockerfile npm pin set.
• Kept shell and s6 service files on LF endings so Docker images built from Windows checkouts start correctly.
• Started Hermes in foreground mode under HolyCode's s6 supervision and documented the required API_SERVER_KEY.
• Started Paperclip with a Docker-reachable bind preset and pre-created embedded Postgres compatibility symlinks.

v1.0.9

05/27/2026

Added

• Add a dedicated Podman guide covering env-file setup, SELinux bind mounts, rootless permissions, updates, and minimal web UI usage

v1.0.8

05/27/2026

Fixed

• Allow Paperclip remote LAN/private hostnames to be configured with PAPERCLIP_ALLOWED_HOSTNAMES

v1.0.7

05/27/2026

Added

• Add optional CLIProxyAPI sidecar support in the full Docker Compose reference
• Add runtime OpenCode cliproxyapi provider wiring behind CLIPROXYAPI_ENABLED

Changed

• Document CLIProxyAPI setup, environment variables, and isolated local-cache state paths in English docs

Fixed

• Keep CLIProxyAPI configuration isolated from ENABLE_CLAUDE_AUTH, opencode-claude-auth, and Claude credential paths

v1.0.6

05/27/2026

Added

• Add Renovate-only dependency automation for GitHub Actions, Dockerfile pins, Docker ARGs, npm packages, and PyPI packages with automerge disabled

Changed

• Pin Docker and runtime dependency versions for repeatable builds
• Refresh workflow action versions to current stable tags

Fixed

• Preserve user-owned oh-my-openagent-setup skill folders while cleaning up HolyCode-managed copies when the plugin is disabled
• Document local local-cache/ guidance for quick-start setups
• Repair translated README contributing links so they resolve to the source repo contribution guide

v1.0.5

[1.0.5] - 04/10/2026

Added

• Add Hermes Agent as an optional bundled service with ENABLE_HERMES, persistent ~/.hermes state, and an API surface on port 8642
• Add Paperclip as an optional bundled service with ENABLE_PAPERCLIP, persistent ~/.paperclip state, and a local dashboard on port 3100
• Install Claude Code CLI in the image so the Claude Auth flow has the binary it expects
• Expand the shipped toolset with TypeScript, pnpm, Prisma, Lighthouse, database CLIs, media tools, and Python utility packages
• Add a pull-request validation workflow that builds the image and smoke-checks the OpenCode binary

Changed

• Refresh the docs, translations, Docker Hub description, and landing page to reflect the new bundled services and the larger 50+ toolset
• Extend the default compose and env examples with Hermes and Paperclip toggles

Fixed

• Resolve the python-dotenv and dotenv-cli binary collision so the image builds cleanly
• Switch Hermes to its foreground gateway runner and bootstrap Paperclip in a Docker-safe authenticated mode so both bundled services start correctly under s6-overlay
• Remove shell-expanded Python config edits from entrypoint.sh by passing data into Python safely
• Repair broken asset and LICENSE paths in the affected translated READMEs
• Remove stale Slim-variant references from the package request issue template