Install latest provider CLIs and record observed image versions #649

Merged

toasterson merged 1 commit from codex/observe-provider-versions into main

2026-10-15 17:38:48 +00:00

toasterson commented

2026-10-15 17:02:16 +00:00

Owner

Provider CLI releases change frequently, and independent Dockerfile and smoke-test pins broke the main pipeline. Install Codex and Claude Code with @latest in both runtime recipes, refresh the provider install stage on each platform build, and accept successful, parseable --version output instead of an expected release number.

Record native AMD64/ARM64 observations under images.<image>.provider_versions.<arch> and images.<image>.provenance.<arch>, plus a summary keyed by image/architecture. Embed raw and parsed observations in /usr/local/share/akh/provider-versions.json, including provider-only updates. Existing native wire/cancel and artifact-hash gates remain in place. Document the operator rule and keep historical measurements as evidence.

Validation: 57 .forgejo/scripts unit tests pass, including publication and embedded-provenance coverage, malformed/failed version commands, and architecture-specific observations. The branch invocation skips publication as intended; git diff --check passes. Docker static checking could not run because this Mac has no Docker daemon. No images were built, deployed, or promoted; leave this PR unmerged for the operator pilot.

Companion PRs (leave unmerged): Talos inventory/docs https://github.com/Toasterson/talos/pull/211; Anima runner-image installs toasterson/Anima#794.

Provider CLI releases change frequently, and independent Dockerfile and smoke-test pins broke the main pipeline. Install Codex and Claude Code with `@latest` in both runtime recipes, refresh the provider install stage on each platform build, and accept successful, parseable `--version` output instead of an expected release number. Record native AMD64/ARM64 observations under `images.<image>.provider_versions.<arch>` and `images.<image>.provenance.<arch>`, plus a summary keyed by image/architecture. Embed raw and parsed observations in `/usr/local/share/akh/provider-versions.json`, including provider-only updates. Existing native wire/cancel and artifact-hash gates remain in place. Document the operator rule and keep historical measurements as evidence. Validation: 57 `.forgejo/scripts` unit tests pass, including publication and embedded-provenance coverage, malformed/failed version commands, and architecture-specific observations. The branch invocation skips publication as intended; `git diff --check` passes. Docker static checking could not run because this Mac has no Docker daemon. No images were built, deployed, or promoted; leave this PR unmerged for the operator pilot. Companion PRs (leave unmerged): Talos inventory/docs https://github.com/Toasterson/talos/pull/211; Anima runner-image installs https://code.aopc.cloud/toasterson/Anima/pulls/794.

toasterson added 1 commit

2026-10-15 17:02:18 +00:00