Claude 59d38921bb Pin images that exist; add pinned local builds for upstreams without one ...

11 of 15 pinned images did not exist in their registries. Published images
now use real release tags (bifrost v2.3.0, searxng 2026.10.16-0ce72dd2c,
docker-android emulator_14.0_v3.8.0-p1, devcontainers/base 2.2.3-bookworm).
Upstreams with no usable image get images/<service>/Dockerfile on a pinned
base, installing a checksum- or commit-verified upstream release, tagged
localhost/heretek/<service>:<version> with pull_policy: build. Stdio-only
servers are wrapped with a pinned mcp-proxy so every MCP service serves
streamable HTTP; compose labels declare each endpoint.

radare2-mcp now runs with -R (read-only); the previous -r enabled the
dangerous run_* tools.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_012AuVk4nEvBXaTjs4G6wdW4

2026-10-16 19:29:57 +00:00

..

ai-cuda-dev

feat(wave-3): devcontainers, quadlets, heretek-exec and box-ctl

2026-10-15 21:37:45 -04:00

headless-wayland-desktop

Pin images that exist; add pinned local builds for upstreams without one

2026-10-16 19:29:57 +00:00

polyglot-dev

Pin images that exist; add pinned local builds for upstreams without one

2026-10-16 19:29:57 +00:00