11/06/2026

Changed

• Updated Node to 26.13.0, Claude Code to 2.1.318, Gemini CLI to 0.67.0, Codex to 0.166.0, OpenCode to 1.19.5 and Junie to 4011.1 from official upstream releases.
• Updated Python to 3.14.10 and Debian Chromium to 156.0.8078.79 on AMD64 and ARM64.
• Aligned Node and Python Playwright at 1.64.1 and refreshed compatible developer, notification and document tools. Existing CloudCLI features and retained third-party patches remain unchanged.

Security

• Added origin checks for the Node binary bundled in Python Playwright, binding its version, architecture, file hash and image layer to the reviewed official wheel.
• Renewed immutable-input evidence and updated Syft to 1.56.0 and Grype to 0.121.1. Upstream vulnerability findings remain visible as accepted findings, not fixes.

10/26/2026

Changed

• Updated the runtime to Node 26.12.1 and Python 3.14.9, with Debian Chromium 156.0.8078.47.
• Updated Claude Code to 2.1.307, Gemini CLI to 0.65.0, OpenAI Codex to 0.163.0, Junie to nightly 3888.1 and OpenCode to 1.19.3.
• Updated GitHub CLI to 2.103.0 and refreshed compatible npm and Python packages.
• Removed the Prisma mysql2 and PM2 js-yaml replacement steps. Prisma 7.10.1 supplies mysql2 3.24.4, and PM2 7.1.0 supplies js-yaml 4.3.2 through their official package trees.
• Updated the optional Full-derived Docker client recipe to Docker CLI 29.9.2 and Compose 5.6.1.
• Kept Node and Python Playwright aligned at 1.64.0. CloudCLI features and the existing FFmpeg security patches remain unchanged.
• Kept Go 1.27.1 for the existing custom esbuild binaries. A toolchain update remains deferred.

Security

• Refreshed immutable input bindings for v1.6.8 and retained checks of the official Prisma and PM2 dependency trees.
• Updated Syft to 1.55.0 and Grype to 0.121.0. Dependency reports still list accepted upstream vulnerabilities with their installed versions. These remain unresolved.

10/14/2026

Changed

• Updated Node to 26.12.0, Claude Code to 2.1.300, Gemini CLI to 0.64.0, Junie to stable 3659.4 and OpenCode to 1.19.0.
• Updated Chromium to 155.0.8059.39 and aligned Node and Python Playwright at 1.64.0.
• Updated compatible developer, deployment, Python and optional Docker client tools from official upstream packages.
• Added disk and swap capacity preparation to published Full-image monitoring before scanner installation, with disk and memory diagnostics retained in the job log.
• Updated Azure CLI to 2.91.0 while retaining its strict embedded-runtime probes.
• Kept Go, CloudCLI, Vercel CLI and Pi Coding Agent at their qualified compatibility baselines. See deferred replacements.

Security

• Refreshed immutable-input bindings for v1.6.7 and kept dependency scans active.
• Scans still report accepted upstream vulnerabilities in Vercel's smol-toml 1.5.2, EAS's tar 7.5.19, Azure's cryptography 48.0.1 and other bundled dependencies. These remain unresolved.
• Kept historical Chromium review decisions bound to their original package version instead of carrying them into Chromium 155.

Fixed

• Made immutable-input validation reject stale or untracked Docker and workflow references, including mismatched GitHub Action versions and commit pins.

10/10/2026

Changed

• Updated Node to 26.11.1, Claude Code to 2.1.296, Gemini CLI to 0.63.0, Codex to 0.162.1, Junie to stable 3579.5 and OpenCode to 1.18.35.
• Updated compatible developer and deployment tools using official upstream packages.
• EAS, Netlify and Vercel keep their official dependency trees.
• Updated Syft to 1.54.1, Grype to 0.120.1 and the artifact upload and download actions to 7.0.2 and 8.0.2.
• Kept CloudCLI account controls, notifications, proxy paths and existing plugins. See deferred updates for compatibility details.

Fixed

• Updated release validation to use v1.6.5 as the source parent while keeping retained artifact checks tied to their original reviewed baseline.
• Corrected the contributor guide's description of the Docker build stages.

Security

• Dependency scans continue. Accepted upstream vulnerabilities remain unresolved; source, artifact integrity and runtime checks still block delivery.

10/06/2026

Changed

• Updated Node to 26.10.0 and compatible AI CLI, developer-tool and Python packages from official upstream releases.
• Updated Vercel to official 62.4.0 and Apprise to 2.0.1. Kept legacy email encryption settings working in the notification integration.
• Added source checks for pull requests and master, plus scheduled released-image dependency scans.
• Added weekly Docker and GitHub Actions dependency update checks.
• Kept the existing CloudCLI and plugin artifacts while official replacements lack the required account, reverse-proxy and notification features. See deferred replacements.

Fixed

• Corrected the ARM-native build roadmap status and the optional Docker-client image examples.
• Excluded local execution state from Git and Docker build contexts.
• Kept the historical Junie applicability guard separate from current-release runtime checks.
• Fixed Linux advisory checks that could fail when a library lookup closed its output pipe early.

Security

• Official Vercel 62.4.0 includes smol-toml 1.5.2, affected by CVE-2026-85730 and GHSA-r4xh-jqrq-34v2. These are accepted upstream vulnerabilities, not fixed.
• Dependency scans now retain accepted upstream vulnerabilities with raw severity, installed versions and available fixes. Acceptance does not mean fixed. Retained modified third-party components are identified separately from official releases.
• Kept HolyClaude source checks, artifact integrity, native runtime tests and promotion checks blocking. Historical v1.6.4 approvals remain unchanged.

10/02/2026

Changed

• Updated Claude Code to 2.1.287, OpenAI Codex to 0.160.0, and Junie to 3419.26.
• Pinned Debian Chromium 154.0.8037.92 for AMD64 and ARM64. Updated the application Python runtime to 3.14.8 and Wrangler to 4.146.0 in the Full image.
• Updated Azure CLI's bundled PyJWT to 2.15.1 and urllib3 to 2.8.0.

Security

• CoderLuii accepted the exact known Critical and High findings in the four v1.6.4 images through October 4, 2026. This includes findings in HolyClaude's custom FFmpeg build and bundled tools, not only Debian packages. The findings are still present; acceptance does not mean they are fixed or harmless. The accepted-risk manifest and scan evidence record their scope. New or changed findings still block publication.

09/24/2026

Changed

• Updated Debian Chromium to 153.0.8010.52 with checksum-pinned Bookworm packages for AMD64 and ARM64.
• Updated Claude Code to 2.1.281, Gemini CLI to 0.61.0, Codex to 0.156.1, OpenCode to 1.18.32, and Atuin to 18.23.0.
• Updated pnpm to 12.6.0, Vite to 8.3.1, ESLint to 10.11.0, and Prettier to 3.9.9.

Security

• Updated Bookworm libde265-0 to 1.0.11-1+deb12u3 and retired reviews for the previous package version.
• Temporarily accepted nine High advisories in installed Bookworm packages through October 1, 2026. These packages are not claimed to be fixed; the exact scope and expiration are in the security reviews.

09/18/2026

Changed

• Updated Node to 26.9.0, Claude Code to 2.1.276, Codex to 0.155.0, Gemini CLI to 0.60.0, OpenCode to 1.18.31, Cursor Agent to 2026.09.15-d2fe57e, and Junie to stable 3196.5.
• Updated pnpm to 12.4.2, Prettier to 3.9.8, Wrangler to 4.134.0, Vercel CLI to 59.23.1, Netlify CLI to 27.8.0, and EAS CLI to 24.7.0.
• Updated GitHub CLI to 2.101.0, pandas to 3.0.6, tree-sitter-language-pack to 1.20.0, and Python Playwright to 1.63.0.
• Updated Debian Chromium to 153.0.8010.47 using checksum-pinned Bookworm security packages for AMD64 and ARM64.
• Updated libevent-core-2.1-7 to Debian's 2.1.12-stable-8+deb12u1 Bookworm security build for AMD64 and ARM64.
• Updated the pinned brace-expansion and ip-address overlays, Docker build actions, and SBOM scanners.

Fixed

• Aligned CloudCLI's copied better-sqlite3 12.11.1 metadata with its official Node 26 engine range while retaining the same registry artifact and integrity.
• Normalized CloudCLI's generated shrinkwrap permissions so its checksum-bound bundle reproduces identically on Windows and Linux builders.
• Covered Vercel CLI's hoisted and nested tar copies and the complete smol-toml owner graph with exact fail-closed checks before applying pinned overlays.

Security

• Renewed temporary acceptance through September 25, 2026 for previously reviewed High findings that remain in the updated bundle. Exact components, paths, and deadlines are recorded in the security reviews.

09/15/2026

Added

• Added an opt-in Full-derived recipe for Docker CLI 29.8.0 and Compose 5.5.1. The stock images still omit Docker Engine and the Docker client.
• Added a read-only Synology diagnostic for Too many levels of symbolic links. It inspects the stopped container's bind source without changing saved state; existing link loops still need a separate recovery step.

Changed

• Updated Claude Code to 2.1.270 and Cursor Agent to 2026.09.10-fd3934a. Switched Junie to the official stable 3196.4 release.
• Updated pnpm to 12.4.1, Wrangler to 4.131.2, Vercel CLI to 59.16.0, Netlify CLI to 27.6.0, and EAS CLI to 24.3.0.
• Updated fzf to 0.74.4, tqdm to 4.70.1, tree-sitter-language-pack to 1.19.1, matplotlib to 3.11.2, and Uvicorn to 0.53.0.

Security

• The affected Bookworm libde265 packages remain unfixed and are temporarily accepted through September 17, 2026. The exact package, path, variant, and architecture scope is in the security reviews.

09/11/2026

Added

• Bundled nano, ShellCheck, Mike Farah's yq, DNS utilities, MariaDB's MySQL-compatible clients, pytest, pytest-asyncio, flake8, aiomqtt and aiohttp in both image variants.
• Added Atuin without enabling its shell hook, signing in, or turning on sync.
• Made .bash_aliases persist through the existing .claude mount.

Changed

• Updated Claude Code to 2.1.268, Gemini CLI to 0.59.0, Codex to 0.154.0, Cursor Agent to 2026.09.08-6caf4ff, Junie to 3220.1, OpenCode to 1.18.30 and Pi Coding Agent to 0.85.1.
• Updated Node to 26.8.2, the Go builder to 1.27.1, GitHub CLI to 2.100.0, Debian Chromium to 152.0.7977.82 and Node Playwright to 1.63.0. Python Playwright remains 1.62.0 and uses the same packaged browser.
• Updated pnpm to 12.3.4, ESLint to 10.10.0, Vite to 8.3.0, Wrangler to 4.131.0, Vercel CLI to 59.15.1, Netlify CLI to 27.5.2 and EAS CLI to 24.0.0.
• Updated WeasyPrint to 70.0, CairoSVG to 2.9.1, lxml to 6.1.3 and NumPy to 2.5.3.
• Updated Web Terminal to 1.1.0 with its pinned dependency lock.
• Updated HolyClaude's bundled CloudCLI to 1.37.3.
• Retained official packages with affected, unfixed upstream vulnerabilities, including Critical Chromium findings. The newly accepted risks are approved only through September 17, 2026; exact scope and deadlines are recorded in the security reviews.

Fixed

• Applied Bookworm package updates during the build, including the PCRE2 security update to 10.42-1+deb12u1.
• Updated PM2/Vercel js-yaml to 4.3.2, CloudCLI js-yaml to 3.15.2, Vercel smol-toml to 1.7.1, and Wrangler/Netlify Sharp to 0.35.4 with matching native bindings.
• Updated Marp's nested xmldom package to 0.9.12 to fix XML serialization and parsing vulnerabilities.
• Fixed password-change session cleanup so active authenticated WebSocket sessions close and open browser tabs sign out without reconnect loops.
• Added a specific startup error when a broad home-directory mount hides Claude's executable, with recovery instructions that keep the original files as a backup.
• Added persistence-path checks before UID/GID remapping to stop on unsafe link layouts without deleting configuration. Valid user-managed CLI directory links remain untouched.
• Clarified the supported persistence paths for CLI state, workspaces, Bash aliases and the separate CloudCLI account database.