Dependency update check - Dockerfile version update validation failed

[github-actions]

Dependency Update Check Failed

Reason: Dockerfile version update validation failed
Test result: failure
Scan result: failure
New critical findings vs baseline: 0
Dockerfile changes needed: true

Pinned Version Updates

[{"name":"OPENCHAMBER_VERSION","current":"1.14.1","latest":"1.15.0","source":"@openchamber/web","status":"changed"},{"name":"LEANCTX_VERSION","current":"3.9.4","latest":"3.9.7","source":"yvgude/lean-ctx","status":"changed"}]

New Critical Findings

None recorded

Latest Package Updates

[{"name":"OH_MY_OPENAGENT_VERSION","current":"4.17.0","source":"npm","status":"changed","previous":"4.16.2"},{"name":"CODEGRAPH_VERSION","current":"1.4.1","source":"npm","status":"changed","previous":"1.3.1"},{"name":"OPENSPEC_VERSION","current":"1.6.0","source":"npm","status":"changed","previous":"1.5.0"}]

APT Updates

All packages are up to date

Test Output (last 3000 chars)

x can list builders
  �[0;32mPASS�[0m marksman CLI works
  �[0;32mPASS�[0m marksman server mode initializes before EOF
  �[0;32mPASS�[0m Homebrew works
  �[0;32mPASS�[0m comment-checker CLI works
  �[0;32mPASS�[0m comment-checker handles empty stdin gracefully

--- CodeGraph (Knowledge Graph) ---
  �[0;32mPASS�[0m codegraph command available at /home/devuser/.bun/bin/codegraph
  �[0;32mPASS�[0m codegraph --help works
  �[0;32mPASS�[0m codegraph MCP server configured in opencode.json (.mcp.codegraph)
  �[0;32mPASS�[0m playwright MCP server configured in opencode.json
  �[0;32mPASS�[0m playwright MCP command resolves via pw-mcp wrapper on PATH

--- LeanCTX (Context Runtime) ---
  �[0;32mPASS�[0m lean-ctx config.toml exists
  �[0;32mPASS�[0m lean-ctx env.sh exists
  �[0;32mPASS�[0m lean-ctx shell hook exists
  �[0;32mPASS�[0m ~/.bashenv exists
  �[0;32mPASS�[0m lean-ctx config enables permission inheritance
  �[0;32mPASS�[0m lean-ctx config sets standard compression
  �[0;32mPASS�[0m lean-ctx config caps graph index
  �[0;32mPASS�[0m ~/.bashrc contains lean-ctx shell hook
  �[0;32mPASS�[0m ~/.bashrc contains lean-ctx agent aliases
  �[0;32mPASS�[0m ~/.bashenv contains lean-ctx shell hook
  �[0;32mPASS�[0m ~/.bashenv defines _lc hook
  �[0;32mPASS�[0m BASH_ENV points to lean-ctx env.sh
  �[0;32mPASS�[0m CLAUDE_ENV_FILE points to lean-ctx env.sh
  �[0;32mPASS�[0m non-interactive bash inherits BASH_ENV
  �[0;32mPASS�[0m non-interactive bash can resolve env.sh from BASH_ENV
  �[0;32mPASS�[0m lean-ctx MCP configured in opencode.json
  �[0;32mPASS�[0m opencode mcp list includes lean-ctx
  �[0;32mPASS�[0m opencode mcp list shows lean-ctx connected
  �[0;32mPASS�[0m lean-ctx config validate passes
  �[0;32mPASS�[0m lean-ctx doctor sees config.toml
  �[0;32mPASS�[0m lean-ctx doctor reports permission inheritance on
  �[0;32mPASS�[0m lean-ctx doctor reports shell aliases
  �[0;32mPASS�[0m lean-ctx doctor reports BASH_ENV set
  �[0;32mPASS�[0m lean-ctx doctor reports CLAUDE_ENV_FILE set

--- Superpowers (Agentic Skills Framework) ---
  �[0;32mPASS�[0m superpowers plugin configured in opencode.json
  �[0;32mPASS�[0m superpowers plugin entry exists
  �[0;32mPASS�[0m superpowers skills discoverable in global skills path

--- Node/Bun Compatibility ---
  �[0;32mPASS�[0m node command available at /home/devuser/.bun/bin/node

--- Playwright / Chromium ---
  �[0;32mPASS�[0m playwright 1.61.1 CLI works
  �[0;32mPASS�[0m @playwright/mcp 0.0.78 CLI works
  �[0;32mPASS�[0m chromium binary exists at /ms-playwright/chromium-1228/chrome-linux64/chrome
  �[0;32mPASS�[0m chromium launches headless successfully
  �[0;32mPASS�[0m pw-mcp wrapper is installed and executable
  �[0;32mPASS�[0m opencode.json mcp.playwright uses pw-mcp wrapper
  �[0;32mPASS�[0m pw-mcp wrapper pins @playwright/mcp@0.0.78

============================================
 Results: \033[0;32m93 passed\033[0m, \033[0;31m0 failed\033[0m, \033[1;33m0 skipped\033[0m
============================================

---

Generated by Dependency Update workflow

[tryweb]

✅ 已解決

根因分析：
LEANCTX_SHA256 的 version comparison 使用 sort -V 無法正確處理 hex SHA256 字串，導致 workflow 誤判 SHA 為「is current」→ 未將新 SHA 傳入 build → SHA mismatch → build 失敗。

處理方式：

1. 移除 LEANCTX_SHA256（Dockerfile + workflow 中所有相關邏輯）
2. 原因：其他 GitHub Release 下載（docker/compose, docker/buildx, cli/cli, artempyanykh/marksman）均無 SHA 驗證，僅 lean-ctx 有，不一致；HTTPS + GitHub Release 不變性已提供足夠保護
3. 重跑 dependency-update workflow → ✅ 成功
4. PR chore: update Dockerfile pinned versions #49 建立並自動合併（OpenChamber 1.14.1→1.15.0, lean-ctx 3.9.4→3.9.7 等更新）