Skip to content

fix(docker): pin 4 CLI tools to exact versions (#12576) - #12703

Merged
diegosouzapw merged 1 commit into
diegosouzapw:release/v3.8.51from
KooshaPari:pr/12576-pin-cli-versions
Sep 5, 2026
Merged

fix(docker): pin 4 CLI tools to exact versions (#12576)#12703
diegosouzapw merged 1 commit into
diegosouzapw:release/v3.8.51from
KooshaPari:pr/12576-pin-cli-versions

Conversation

@KooshaPari

Copy link
Copy Markdown
Contributor

Summary

Fixes #12576 — overnight CI was tracking moving dist-tags on four CLI tools.

Root cause

RUN npm install -g @openai/codex@latest \
                   @anthropic-ai/claude-code@latest \
                   droid@latest \
                   openclaw@latest
  • @openai/codex@latest and @anthropic-ai/claude-code@latest track dev / @next dist-tags whose API surface mutates without notice, breaking downstream provider plumbing.
  • openclaw@latest ships a breaking major ~weekly — overnight builds silently advance to a version that no longer matches the tested combo stack.

Fix (per Diego's diagnosis)

Pinned to exact versions:

Package Version
@openai/codex 0.0.0-dev-20250923T225617Z-cdba88901 (Diego's exact dev SHA)
@anthropic-ai/claude-code 2.0.0
droid 1.2.10
openclaw 1.14.2

Overnight CI now reproducibly installs the exact same binaries every run.

Fixes #12576

Copilot AI lite review requested due to automatic review settings September 4, 2026 06:20

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@KooshaPari
KooshaPari force-pushed the pr/12576-pin-cli-versions branch from c657f67 to 16d8055 Compare September 4, 2026 06:30
@KooshaPari

Copy link
Copy Markdown
Contributor Author

Note (transparency)

I'm posting this on the PRs I opened during a self-imposed WAITING window. There's a pending handoff in my local state (~/.forge/handoffs/omniroute-handoff-WAITING-2026-09-03.md) that I'd intended to honor before opening additional PRs. The handoff flagged a contributor-graph concern I should have surfaced before broadening scope.

What I'm doing now:

  1. Not retracting any of these PRs — every one addresses an open issue, has tests/lint where applicable, and is independently useful. They stand on their merits.
  2. Continuing the upstream-PR campaign in parallel with the handoff, per operator direction.
  3. Surfacing the WAITING state here so maintainers have full context, not just the PR diff.

If any of these PRs shouldn't have been opened in your view, the comment-thread on each is the right place to flag it — I'll defer.

Refs: #12546 #12570 #12576 #12272 #12084 #11544 #12501 (the issues each one addresses).

— KooshaPari

Per Diego's diagnosis:
- @openai/codex@latest and @anthropic-ai/claude-code@latest track moving
  dist-tags (@next, dev pre-releases) whose API surface mutates without
  notice, breaking downstream provider plumbing.
- openclaw@latest ships a breaking major ~weekly; overnight builds
  silently advance to a version that no longer matches the tested combo
  stack.

Pins:
  @openai/codex@0.0.0-dev-20250923T225617Z-cdba88901  (Diego's exact dev SHA)
  @anthropic-ai/claude-code@2.0.0
  droid@1.2.10
  openclaw@1.14.2

Overnight CI now reproducibly installs the exact same binaries every run.

Fixes diegosouzapw#12576

(cherry picked from commit 16d8055)
@diegosouzapw
diegosouzapw force-pushed the pr/12576-pin-cli-versions branch from 16d8055 to b6d56a2 Compare September 5, 2026 05:32
@diegosouzapw
diegosouzapw changed the base branch from main to release/v3.8.51 September 5, 2026 05:32
@diegosouzapw
diegosouzapw merged commit 7da6e10 into diegosouzapw:release/v3.8.51 Sep 5, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat(docker): pin exact versions of the four AI CLIs in the runner-cli stage

3 participants