From 003ccb0cf8d964bed1649bac1e198a39b7c8d575 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 20 Jan 2026 14:11:44 +0000
Subject: [PATCH 1/3] chore(deps): update bump-dependencies

---
 Dockerfile | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 0fba3bc..3eb3340 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -19,11 +19,11 @@ ENV \
 
 ARG \
   # renovate: datasource=npm depName=@anthropic-ai/claude-code
-  CLAUDE_CLI_VERSION=2.1.9 \
+  CLAUDE_CLI_VERSION=2.1.11 \
   # renovate: datasource=npm depName=@google/gemini-cli
-  GEMINI_CLI_VERSION=0.24.0 \
+  GEMINI_CLI_VERSION=0.24.3 \
   # renovate: datasource=npm depName=opencode-ai
-  OPENCODE_AI_VERSION=1.1.10
+  OPENCODE_AI_VERSION=1.1.25
 
 RUN npm install -g \
   "@anthropic-ai/claude-code@$CLAUDE_CLI_VERSION" \

From 1a2d83f9bfb314b0ef995b28f73d501015b3819d Mon Sep 17 00:00:00 2001
From: Joe Corall <joe@libops.io>
Date: Tue, 20 Jan 2026 09:15:07 -0500
Subject: [PATCH 2/3] did ripgrep multiarch packaging get fixed yet?

---
 Dockerfile | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 3eb3340..a1d735d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -83,7 +83,6 @@ ARG \
   GO_ARM64=linux-arm64.tar.gz \
   GO_ARM64_SHA256="b00b694903d126c588c378e72d3545549935d3982635ba3f7a964c9fa23fe3b9"
 
-# hadolint ignore=DL3008
 RUN apt-get update && apt-get install -y --no-install-recommends \
   aggregate="${AGGREGATE_VERSION}" \
   bc \
@@ -101,7 +100,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
   man-db="${MAN_DB_VERSION}" \
   psmisc="${PSMISC_VERSION}" \
   procps="${PROCPS_VERSION}" \
-  ripgrep \
+  ripgrep="${RIPGREP_VERSION}" \
   sudo="${SUDO_VERSION}" \
   tree="${TREE_VERSION}" \
   unzip="${UNZIP_VERSION}" \

From 1ab59cf06e8c663a71215be08d1bb3287afd4fe3 Mon Sep 17 00:00:00 2001
From: Joe Corall <joe@libops.io>
Date: Tue, 20 Jan 2026 09:16:22 -0500
Subject: [PATCH 3/3] bc hack

---
 Dockerfile | 49 ++++++++++++++++++++++++++-----------------------
 1 file changed, 26 insertions(+), 23 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index a1d735d..a47ced9 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -83,29 +83,32 @@ ARG \
   GO_ARM64=linux-arm64.tar.gz \
   GO_ARM64_SHA256="b00b694903d126c588c378e72d3545549935d3982635ba3f7a964c9fa23fe3b9"
 
-RUN apt-get update && apt-get install -y --no-install-recommends \
-  aggregate="${AGGREGATE_VERSION}" \
-  bc \
-  bind9-dnsutils="${BIND9_VERSION}" \
-  fzf="${FZF_VERSION}" \
-  gh="${GH_VERSION}" \
-  git="${GIT_VERSION}" \
-  gnupg2="${GNUPG2_VERSION}" \
-  iproute2="${IPROUTE2_VERSION}" \
-  ipset="${IPSET_VERSION}" \
-  iptables="${IPTABLES_VERSION}" \
-  jq="${JQ_VERSION}" \
-  less="${LESS_VERSION}" \
-  make="${MAKE_VERSION}" \
-  man-db="${MAN_DB_VERSION}" \
-  psmisc="${PSMISC_VERSION}" \
-  procps="${PROCPS_VERSION}" \
-  ripgrep="${RIPGREP_VERSION}" \
-  sudo="${SUDO_VERSION}" \
-  tree="${TREE_VERSION}" \
-  unzip="${UNZIP_VERSION}" \
-  vim="${VIM_VERSION}" \
-  && apt-get clean && rm -rf /var/lib/apt/lists/*
+RUN BC_VERSION_HACK="${BC_VERSION}$([ "${TARGETARCH}" = "arm64" ] && echo "+b1" || echo "")" && \
+  apt-get update && \
+  apt-get install -y --no-install-recommends \
+    aggregate="${AGGREGATE_VERSION}" \
+    bc="${BC_VERSION_HACK}" \
+    bind9-dnsutils="${BIND9_VERSION}" \
+    fzf="${FZF_VERSION}" \
+    gh="${GH_VERSION}" \
+    git="${GIT_VERSION}" \
+    gnupg2="${GNUPG2_VERSION}" \
+    iproute2="${IPROUTE2_VERSION}" \
+    ipset="${IPSET_VERSION}" \
+    iptables="${IPTABLES_VERSION}" \
+    jq="${JQ_VERSION}" \
+    less="${LESS_VERSION}" \
+    make="${MAKE_VERSION}" \
+    man-db="${MAN_DB_VERSION}" \
+    psmisc="${PSMISC_VERSION}" \
+    procps="${PROCPS_VERSION}" \
+    ripgrep="${RIPGREP_VERSION}" \
+    sudo="${SUDO_VERSION}" \
+    tree="${TREE_VERSION}" \
+    unzip="${UNZIP_VERSION}" \
+    vim="${VIM_VERSION}" && \
+  apt-get clean && \
+  rm -rf /var/lib/apt/lists/*
 
 COPY download.sh /usr/local/bin
 RUN --mount=type=cache,id=base-downloads-${TARGETARCH},sharing=locked,target=/opt/downloads \