Skip to content

Update code-server to 4.136.2 and relax Swift version regex - #9

Merged
aoyn1xw merged 1 commit into
mainfrom
vibe/dependency-updates-fb7d30
Oct 17, 2026
Merged

aoyn1xw merged 1 commit into
mainfrom
vibe/dependency-updates-fb7d30

Conversation

@aoyn1xw

@aoyn1xw aoyn1xw commented Oct 7, 2026

Copy link
Copy Markdown
Owner

Summary

Dependency Updates

  • code-server: Updated from 4.133.0 to 4.136.2
    • Reason: Version 4.136.1 was removed by upstream due to an incorrect data path (~/.vscode-server-oss/data). Version 4.136.2 is the corrected latest release that fixes this issue.
    • Impact: Security and stability improvements from upstream. The 4.133.0 → 4.136.2 jump includes bug fixes for cookie handling, socket activation, and CSP errors.

CI Improvements

  • Swift version regex: Relaxed from 6[.]4([.]0)? to 6[.]4([.][0-9]+)?
    • Reason: The previous regex only accepted 6.4.0 (exact) or 6.4 (no patch), which would fail for future Swift 6.4.x patch releases (e.g., 6.4.1). The new regex accepts any 6.4.x version.
    • Impact: Prevents CI failures when Swift 6.4.x patch releases are published (e.g., if the base image swift:6.4.0-noble is updated to 6.4.1).

Verification

  • ✅ Local script tests (tests/test_scripts.sh) pass
  • ✅ Shell syntax validation for all .sh scripts
  • ✅ Password configuration, onboarding, and fetch-xcode tests pass
  • ✅ Regex updated to handle 6.4.0, 6.4.1, etc.

Files Changed

  • .devcontainer/Dockerfile: Updated CODE_SERVER_VERSION ARG
  • .github/workflows/build-and-push.yml: Updated Swift version regex

Dependencies Not Updated (Justification)

Dependency Current Latest Reason
Swift 6.4.0-noble 6.4.0 Already current; pinned to official Docker image
xtool 1.21.0 1.21.0 Already current
zsign e803f87 614caa8 Pinned commit is not outdated; e803f87 (Aug 4, 2026) is only 17 days older than 614caa8 (Aug 21, 2026). Both are post-v1.1.2 tag. No critical fixes in between. Reproducibility takes priority.
minizip-ng dc8531d 72d3b39 Pinned commit dc8531d (Aug 7, 2026) is a valid, recent fix for a memory leak. Latest 72d3b39 (Oct 1, 2026) updates 7zip to 26.03, but this is non-critical. Reproducibility takes priority.

Risk Assessment

  • Low risk: Changes are minimal and targeted (version bumps + regex).
  • No breaking changes: code-server 4.136.2 is backward-compatible; Swift regex is more permissive.
  • No new dependencies: Only version updates.

- Update code-server from 4.133.0 to 4.136.2 to address upstream fixes
  (4.136.1 was removed due to incorrect data path; 4.136.2 is the
  corrected latest release)
- Relax Swift version regex in CI from '6.4.0' to '6.4.x' to
  accommodate future patch releases (e.g., 6.4.1)

Closes: N/A (maintenance update)

Co-authored-by: aoyn1xw <aoyn1xw@users.noreply.github.com>
@aoyn1xw
aoyn1xw marked this pull request as ready for review October 17, 2026 14:00
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 17, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-17T14:02:09.006232Z 4394eef Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@aoyn1xw
aoyn1xw merged commit a5057a3 into main Oct 17, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants