v0.2.4

Added

• -u / --update-config flag to bin/opencode-docker — overwrites ~/.opencode-docker/config/ files with the repo versions
• rustc and cargo to the Docker builder stage and runtime rootfs

Changed

• OpenCode bumped from 1.15.12 → 1.17.7
• @upstash/context7-mcp bumped from 1.0.17 → 3.2.1 (Dockerfile and config/opencode.json)
• superpowers plugin ref pinned from commit SHA → tag #v6.0.2
• Debian slim base image digest updated
• Star History chart in README now uses theme-aware <picture> element

Full Changelog: v0.2.3...v0.2.4

v0.2.3

Security

• Pin OpenCode installer script with SHA256 checksum verification
• Pin debian:13-slim base image to SHA256 digest
• Pin npm packages to exact versions (@upstash/context7-mcp@1.0.17)
• Pin plugins to exact versions/commits (superpowers to commit SHA, @tarquinen/opencode-dcp@3.1.12)

Removed

• Remove sequential-thinking MCP server
• Remove brainstorm port functionality (-b/--brainstorm flag, BRAINSTORM_PORT, BRAINSTORM_HOST)

Full Changelog: v0.2.2...v0.2.3

v0.2.2

Features

• Add -m/--memory and -c /--cpus flags with 4g/4cpu defaults
• Add ripgrep and jq to distroless image
• Add OPENCODE_VERSION build arg for cache busting

Improvements

• Upgrade base images from Debian 12 to Debian 13
• Harden PATH by removing /bin, restructuring bin to usr/bin symlinks
• Unpin opencode-dcp plugin version
• Add commit message conventions to AGENTS.md

Full Changelog: v0.2.1...v0.2.2

v0.2.1

Features

• Add -e/--experimental flag to enable experimental features
• Add -w/--websearch flag to enable Exa web search
• Add repo-scoped DCP plugin support

Improvements

• Simplify docker run config and preserve local state
• Document and bundle common shell utilities in distroless image

Bug Fixes

• Fix brainstorming port documentation - all modes use random ports
• Skip shell builtins in runtime deps collection

Full Changelog: v0.2.0...v0.2.1

v0.2.0

Distroless Runtime, Safer Defaults, and Better Developer UX

This release focuses on making OpenCode Docker more production-ready: a hardened distroless runtime, stronger security defaults, improved secrets/bootstrap behavior, and smoother day-to-day workflows.

Highlights

• Migrated to a distroless runtime (gcr.io/distroless/base-debian12)
• Updated runtime stack to Node 24 plus Python (with venv support)
• Improved startup flow via bootstrap.py (secret loading from /run/secrets, Xvfb startup, OpenCode exec)
• Continued hardening with container security defaults (--read-only, dropped caps, no-new-privileges, resource limits)

Developer Experience

• Wrapper flow refined around bin/opencode-docker
• Persistent local data model centered on ~/.opencode-docker/
• Cleaner first-run/bootstrap behavior and wrapper improvements
• Legacy wrapper cleanup (ocd removal) and script refinements

Build & Release Tooling

• Added/improved Make targets for versioned builds and tagging:
  • build VERSION=...
  • build-latest
  • tag-latest VERSION=...
• Removed unnecessary npm dependency from build path

Documentation

• README expanded and clarified across:
  • runtime model and distroless details
  • security rationale and Docker option explanations
  • secrets management and supported secret mappings
  • wrapper usage and PATH setup (Bash/Fish)
  • image tagging and build workflows

Notes

• This release emphasizes security posture and operational clarity rather than large feature-surface expansion.
• Recommended usage remains the wrapper-based workflow (bin/opencode-docker / opencode-docker in PATH).