mirror of
https://github.com/Heretek-AI/The-Agency.git
synced 2026-11-07 10:06:01 -10:00
John Smith
e0ce9ab989
App shell, design tokens, role gating, inbox/missions/detail/fleet views, SSE chat, plan editor, diff viewer, seeded accept harness (9 checks), red proofs, and screenshot evidence.
137 lines
5.5 KiB
Bash
137 lines
5.5 KiB
Bash
# Exact pins for every toolchain and dependency. No `latest`, no ranges.
|
|
BUN_VERSION=1.4.2
|
|
OPENCODE_VERSION=2.0.26
|
|
TYPESCRIPT_VERSION=5.9.2
|
|
OXLINT_VERSION=1.87.0
|
|
PRETTIER_VERSION=3.6.2
|
|
BUN_TYPES_VERSION=1.4.3
|
|
ZOD_VERSION=3.25.76
|
|
# Stage 1a base-image pins (all verified reachable before depending on them).
|
|
UBUNTU_DIGEST=sha256:534baea6a22c03a63003dbc8dbe78fe34bc0d7e595d9a9dc9834884ff530eb55
|
|
NODE_VERSION=24.21.0
|
|
NODE_SHA256=fd8e59d5a511510f6a298afb548f18c7d2b1be404d8b4a27d94fbe49f56cb2d6
|
|
YQ_VERSION=4.48.2
|
|
YQ_SHA256=0ffc35320180d4911bc3a772934da508715e08af444cb33d4d43660065e25bcc
|
|
UV_VERSION=0.9.12
|
|
UV_SHA256=4e43dac0c82b12b66564d91d5649350377b771d1df84374d9be1b9e6c8dd8152
|
|
OPENCODE_CLIENT_VERSION=2.0.26
|
|
APT_CA_CERTIFICATES=20260601~24.04.1
|
|
APT_CURL=8.5.0-2ubuntu10.15
|
|
APT_GIT=1:2.43.0-1ubuntu7.3
|
|
APT_JQ=1.7.1-3ubuntu0.24.04.2
|
|
APT_RIPGREP=14.1.0-1
|
|
APT_FD_FIND=9.0.0-1
|
|
APT_TINI=0.19.0-1
|
|
APT_UNZIP=6.0-28ubuntu4.1
|
|
APT_XZ_UTILS=5.6.1+really5.4.5-1ubuntu0.3
|
|
APT_OPENSSH_CLIENT=1:9.6p1-3ubuntu13.19
|
|
APT_PYTHON3=3.12.3-0ubuntu2.1
|
|
APT_TAR=1.35+dfsg-3ubuntu0.4
|
|
# Stage 1b pins (all verified reachable before depending on them; release
|
|
# shas are computed at verify time and re-checked at build time).
|
|
APT_SQUID=6.14-0ubuntu0.24.04.4
|
|
APT_APACHE2_UTILS=2.4.58-1ubuntu8.16
|
|
APT_TREE=2.1.1-2ubuntu3.24.04.2
|
|
APT_SHELLCHECK=0.9.0-1
|
|
APT_SHFMT=3.8.0-1
|
|
APT_YAMLLINT=1.33.0-1
|
|
APT_MAKE=4.3-4.1build2
|
|
APT_POSTGRESQL_CLIENT=16+257build1.1
|
|
APT_SQLITE3=3.45.1-1ubuntu2.8
|
|
APT_MYSQL_CLIENT=8.0.46-0ubuntu0.24.04.4
|
|
APT_GH=2.45.0-1ubuntu0.3
|
|
YAML_VERSION=2.9.1
|
|
JSONC_PARSER_VERSION=3.3.1
|
|
PNPM_VERSION=12.11.2
|
|
PLAYWRIGHT_MCP_VERSION=0.0.83
|
|
PLAYWRIGHT_CORE_VERSION=1.64.0-alpha-1790635538000
|
|
AXE_CORE_CLI_VERSION=4.13.0
|
|
DEPENDENCY_CRUISER_VERSION=18.6.0
|
|
MADGE_VERSION=8.0.0
|
|
MARKDOWNLINT_CLI2_VERSION=0.23.3
|
|
KUBERNETES_MCP_SERVER_VERSION=0.0.67
|
|
DBHUB_VERSION=1.5.0
|
|
CHROME_DEVTOOLS_MCP_VERSION=1.10.1
|
|
SENTRY_MCP_SERVER_VERSION=0.42.0
|
|
SEMGREP_VERSION=1.180.0
|
|
SQLFLUFF_VERSION=4.4.0
|
|
CHECKOV_VERSION=3.3.29
|
|
HTTPIE_VERSION=3.2.4
|
|
PYTEST_VERSION=9.1.1
|
|
POSTGRES_MCP_VERSION=0.3.0
|
|
SERENA_REF=f9972a32c67359dd4c4a5ab597688bb10d21d1f3
|
|
SCC_VERSION=v4.1.0
|
|
SCC_SHA256=c7328436d3027f4357d3d7853f7dc3ac2bbcb4ca08f1adad91a27c593884079b
|
|
AST_GREP_VERSION=0.50.0
|
|
AST_GREP_SHA256=0fd3f489639abb8465a914b74b8779171577582318d8a940d00399f59dba81c5
|
|
DELTA_VERSION=0.20.1
|
|
DELTA_SHA256=50f08c879f84c81ceb220e476491a7f492d2c9c671e79918cc44badf961a6240
|
|
DIFFTASTIC_VERSION=0.71.0
|
|
DIFFTASTIC_SHA256=61aea5394a53c56f144637cf39b3a0c0dafa27769731745e5851ff276e6478da
|
|
HADOLINT_VERSION=v2.15.1
|
|
HADOLINT_SHA256=c7187db94eeeeca956519a6af171adc31453941a1e777961f6e680f697c8c507
|
|
ACTIONLINT_VERSION=v1.7.12
|
|
ACTIONLINT_SHA256=8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8
|
|
TFLINT_VERSION=v0.64.0
|
|
TFLINT_SHA256=cca9d13e2e1d7a2c627af60ff899a3c9b74212899416aeb96ec764d2ef954537
|
|
GITLEAKS_VERSION=v8.30.1
|
|
GITLEAKS_SHA256=551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb
|
|
TRIVY_VERSION=v0.75.0
|
|
TRIVY_SHA256=c6e65abddb348e25f10549df887045629cf28cc72453cd1c63acb717316b3f3f
|
|
TRIVY_MCP_PLUGIN_VERSION=v0.0.20
|
|
SYFT_VERSION=v1.54.1
|
|
SYFT_SHA256=c069905b391cc4c20a5ba65ad5c10be2a7ba074f8ea6ad203e24d14e303dad47
|
|
GRYPE_VERSION=v0.120.1
|
|
GRYPE_SHA256=0a9ee97ef5ae2ee953b0a80098105052e846cdbe319a57d808b519c33cd1343d
|
|
OSV_SCANNER_VERSION=v2.7.0
|
|
OSV_SCANNER_SHA256=160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b
|
|
HURL_VERSION=8.0.1
|
|
HURL_SHA256=cac7c4670d69444db120edb21fe06c97ba8c80dcc52279957c8dd18f05fb0c06
|
|
GIT_CLIFF_VERSION=v2.14.2
|
|
GIT_CLIFF_SHA256=24f397c733add5390fdceee3a2088588ab0d5f944ce00d34cb7029b888cf2db4
|
|
LYCHEE_VERSION=lychee-v0.24.2
|
|
LYCHEE_SHA256=1f4e0ef7f6554a6ed33dd7ac144fb2e1bbed98598e7af973042fc5cd43951c9a
|
|
KUBECONFORM_VERSION=v0.8.0
|
|
KUBECONFORM_SHA256=9bc2bffbf71f261128533edaf912153948b7ff238f9a531ae6d34466ec287883
|
|
KUSTOMIZE_VERSION=v5.8.3
|
|
KUSTOMIZE_SHA256=cb9e31198d3f63b44848bd0afc4c8efc56e6cfef9c93a4a39a211940e6decd61
|
|
HELM_VERSION=v4.3.0
|
|
HELM_SHA256=86584a54def73570558f66f5111cc53dfed56689637ae32c1201205d494f54fb
|
|
KUBECTL_VERSION=v1.37.1
|
|
KUBECTL_SHA256=65691ff77eb6fa44c908b77a1082c9f092c3b9733b5cefabec0d1104890e21a8
|
|
TERRAFORM_VERSION=1.16.5
|
|
TERRAFORM_SHA256=2bc2fcfff033265c9e02ca0351f01794eb122f62a9b2a49a3294b9e49eaab5e4
|
|
TERRAFORM_MCP_SERVER_VERSION=1.3.0
|
|
TERRAFORM_MCP_SERVER_SHA256=f8ecdbfb8473af4d54f6ca428de59649ff4c74f1c8a904da1c2973fa345d4d26
|
|
BUN_LINUX_X64_SHA256=36368faef7527875d5ffa52e53cd48021741f2a83eb6208a8dd64068d422a913
|
|
APT_LIBXML2=2.9.14+dfsg-1.3ubuntu3.10
|
|
MCP_PYPI_VERSION=1.30.0
|
|
# Stage 1c: BUN_LINUX_X64_SHA256 above is the bun-linux-x64.zip release
|
|
# asset; the verifier and dispatcher images check it at build time.
|
|
# Stage 1d gateway pin (verified with `docker pull caddy:2.10-alpine` on
|
|
# 2026-10-14; the digest below is its RepoDigest).
|
|
CADDY_VERSION=2.10-alpine
|
|
CADDY_DIGEST=sha256:4c6e91c6ed0e2fa03efd5b44747b625fec79bc9cd06ac5235a779726618e530d
|
|
# Stage 1e web UI pins (all verified reachable via `bun pm view` before depending on them).
|
|
WEB_REACT_VERSION=19.3.1
|
|
WEB_REACT_DOM_VERSION=19.3.1
|
|
WEB_TYPES_REACT_VERSION=19.3.0
|
|
WEB_TYPES_REACT_DOM_VERSION=19.3.0
|
|
WEB_VITE_VERSION=8.3.4
|
|
WEB_VITE_PLUGIN_REACT_VERSION=6.1.2
|
|
WEB_TAILWINDCSS_VERSION=4.3.3
|
|
WEB_TAILWIND_VITE_VERSION=4.3.3
|
|
WEB_LUCIDE_REACT_VERSION=1.57.0
|
|
WEB_XYFLOW_REACT_VERSION=12.12.0
|
|
WEB_TANSTACK_QUERY_VERSION=5.104.2
|
|
WEB_TANSTACK_ROUTER_VERSION=1.170.44
|
|
WEB_CLSX_VERSION=2.1.1
|
|
WEB_TAILWIND_MERGE_VERSION=3.7.0
|
|
WEB_RADIX_DIALOG_VERSION=1.3.1
|
|
WEB_RADIX_TOOLTIP_VERSION=1.4.1
|
|
WEB_RADIX_TABS_VERSION=1.2.1
|
|
WEB_RADIX_AVATAR_VERSION=1.3.1
|
|
WEB_RADIX_SLOT_VERSION=1.5.0
|
|
WEB_PLAYWRIGHT_TEST_VERSION=1.64.1
|
|
WEB_AXE_PLAYWRIGHT_VERSION=4.13.0
|