Skip to content

🌱 images: bump claude 2.1.310 -> 2.1.311 #14523

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hivecommons-hive merged 1 commit into from
Oct 27, 2026
+2 −2
Merged

🌱 images: bump claude 2.1.310 -> 2.1.311 #14523

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion src/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -319,7 +319,7 @@ RUN npm install -g --ignore-scripts --no-fund --no-audit @openai/codex@${CODEX_V
echo "WARN: OpenAI Codex CLI install failed — skipping"

# --- Layer 7: Claude Code (most frequent updates) ---
ARG CLAUDE_CODE_VERSION=2.1.310
ARG CLAUDE_CODE_VERSION=2.1.311
# --ignore-scripts (kept, deliberately: no arbitrary postinstall runs during the
# build) skips claude-code's install.cjs, which is what LINKS the platform
# native binary into the package's bin/. The binary itself ships in the
Expand Down
2 changes: 1 addition & 1 deletion src/Dockerfile.contributor
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -217,7 +217,7 @@
# NODESOURCE_KEY_SHA256 is the digest of the raw ASCII-armored key as
# published at the URL below; re-verify against NodeSource's documented
# fingerprint (6F71F5252828 41EEDAF851B4 2F59B5F99B1B E0B4) before bumping.
ARG NODESOURCE_KEY_SHA256=b42e0321dabdc24e892115da705cf061167eac12a317f23d329862d0aa0a271d

Check warning on line 220 in src/Dockerfile.contributor

View workflow job for this annotation

GitHub Actions / build-contributor (linux/arm64, true, true, 75)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NODESOURCE_KEY_SHA256")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/

Check warning on line 220 in src/Dockerfile.contributor

View workflow job for this annotation

GitHub Actions / build-contributor (linux/amd64, true, false, 60)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NODESOURCE_KEY_SHA256")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
RUN mkdir -p /etc/apt/keyrings \
&& curl -fsSL -o /tmp/nodesource.key https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key \
&& echo "${NODESOURCE_KEY_SHA256} /tmp/nodesource.key" | sha256sum -c - \
Expand All @@ -237,7 +237,7 @@
# npm cache is cleaned in the same layer it's populated (issue #2613,
# Observation 2 "also minor") so the cache doesn't linger in this layer's
# diff, mirroring the cleanup already done for the bobshell install below.
ARG CLAUDE_CODE_VERSION=2.1.310
ARG CLAUDE_CODE_VERSION=2.1.311
ARG COPILOT_VERSION=1.0.88
# --ignore-scripts (kept, deliberately: no arbitrary postinstall runs during
# the build) skips claude-code's install.cjs, which is what LINKS the platform
Expand Down
Loading