Skip to content

🌱 images: bump codex 0.167.0 -> 0.168.0 #18062

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hivecommons-hive merged 2 commits into from
Nov 13, 2026
+2 −2
Merged

🌱 images: bump codex 0.167.0 -> 0.168.0 #18062

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
0f6e6cb
🌱 images: bump codex 0.167.0 -> 0.168.0
Nov 13, 2026
a8f016e
Merge v5 into cli-pin-bump/codex
hivecommons-hive[bot] Nov 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion src/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -324,7 +324,7 @@ RUN timeout 120s npm install -g --ignore-scripts --no-fund --no-audit \
# dashboard's codex model discovery (`codex app-server` model/list — pure
# local stdio, no network, unaffected by the proxy CA) falls back to the
# static list, and non-codex backends are unaffected.
ARG CODEX_VERSION=0.167.0
ARG CODEX_VERSION=0.168.0
ARG CLINE_VERSION=3.0.74
# npm can briefly advertise AWS SDK versions before all registry replicas serve
# them. Wait at most three minutes between attempts and revalidate metadata.
Expand Down
2 changes: 1 addition & 1 deletion src/Dockerfile.contributor
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -219,7 +219,7 @@
# NODESOURCE_KEY_SHA256 is the digest of the raw ASCII-armored key as
# published at the URL below; re-verify against NodeSource's documented
# fingerprint (6F71F5252828 41EEDAF851B4 2F59B5F99B1B E0B4) before bumping.
ARG NODESOURCE_KEY_SHA256=b42e0321dabdc24e892115da705cf061167eac12a317f23d329862d0aa0a271d

Check warning on line 222 in src/Dockerfile.contributor

View workflow job for this annotation

GitHub Actions / build-contributor (linux/amd64, true, false, 60)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NODESOURCE_KEY_SHA256")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/

Check warning on line 222 in src/Dockerfile.contributor

View workflow job for this annotation

GitHub Actions / build-contributor (linux/arm64, true, true, 75)

Sensitive data should not be used in the ARG or ENV commands 

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NODESOURCE_KEY_SHA256")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
RUN mkdir -p /etc/apt/keyrings \
&& curl -fsSL -o /tmp/nodesource.key https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key \
&& echo "${NODESOURCE_KEY_SHA256} /tmp/nodesource.key" | sha256sum -c - \
Expand Down Expand Up @@ -262,7 +262,7 @@
# Same ARG name and value as src/Dockerfile so bin/test_backend_smoke.sh can
# assert the two pins agree — this line was previously an inline hardcode that
# could (and did) drift from the main image's CODEX_VERSION unnoticed.
ARG CODEX_VERSION=0.167.0
ARG CODEX_VERSION=0.168.0
RUN npm install -g --ignore-scripts --no-fund --no-audit \
@anthropic-ai/claude-code@${CLAUDE_CODE_VERSION} \
@github/copilot@${COPILOT_VERSION} \
Expand Down
Loading