From f69560eff87139abfda6b4559bcd9e15c2c08b8c Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 6 Jun 2026 10:18:24 +0000
Subject: [PATCH 1/3] chore(deps): update bump-dependencies

---
 Dockerfile | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 67f8294..b85e0c3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # renovate: datasource=golang-version depName=go versioning=semver
-ARG GO_VERSION=1.26.3
+ARG GO_VERSION=1.26.4
 ARG GO_AMD64=linux-amd64.tar.gz
 ARG GO_AMD64_SHA256="2b2cfc7148493da5e73981bffbf3353af381d5f93e789c82c79aff64962eb556"
 ARG GO_ARM64=linux-arm64.tar.gz
@@ -11,7 +11,7 @@ ARG \
   # renovate: datasource=go depName=golang.org/x/vuln
   GOVULNCHECK_VERSION=v1.3.0 \
   # renovate: datasource=go depName=github.com/securego/gosec/v2
-  GOSEC_VERSION=v2.26.1 \
+  GOSEC_VERSION=v2.27.1 \
   # renovate: datasource=go depName=github.com/rhysd/actionlint
   ACTIONLINT_VERSION=v1.7.12 \
   # renovate: datasource=go depName=github.com/bufbuild/buf
@@ -224,15 +224,15 @@ ENV \
 
 ARG \
   # renovate: datasource=npm depName=@anthropic-ai/claude-code
-  CLAUDE_CLI_VERSION=2.1.156 \
+  CLAUDE_CLI_VERSION=2.1.161 \
   # renovate: datasource=npm depName=@openai/codex
-  CODEX_CLI_VERSION=0.135.0 \
+  CODEX_CLI_VERSION=0.136.0 \
   # renovate: datasource=npm depName=@google/gemini-cli
-  GEMINI_CLI_VERSION=0.44.1 \
+  GEMINI_CLI_VERSION=0.45.0 \
   # renovate: datasource=npm depName=opencode-ai
-  OPENCODE_AI_VERSION=1.15.12 \
+  OPENCODE_AI_VERSION=1.15.13 \
   # renovate: datasource=npm depName=@earendil-works/pi-coding-agent
-  PI_CLI_VERSION=0.77.0 \
+  PI_CLI_VERSION=0.78.0 \
   CLI=""
 
 RUN if [ -n "$CLI" ]; then \

From 15aeb5e3f628bd210b3cff6a6acc6e0d6ac9d4ba Mon Sep 17 00:00:00 2001
From: Joe Corall <joe@libops.io>
Date: Sat, 6 Jun 2026 06:20:16 -0400
Subject: [PATCH 2/3] Update Go version checksums in Dockerfile

---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index b85e0c3..1fe520d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,9 +1,9 @@
 # renovate: datasource=golang-version depName=go versioning=semver
 ARG GO_VERSION=1.26.4
 ARG GO_AMD64=linux-amd64.tar.gz
-ARG GO_AMD64_SHA256="2b2cfc7148493da5e73981bffbf3353af381d5f93e789c82c79aff64962eb556"
+ARG GO_AMD64_SHA256="1153d3d50e0ac764b447adfe05c2bcf08e889d42a02e0fe0259bd47f6733ad7f"
 ARG GO_ARM64=linux-arm64.tar.gz
-ARG GO_ARM64_SHA256="9d89a3ea57d141c2b22d70083f2c8459ba3890f2d9e818e7e933b75614936565"
+ARG GO_ARM64_SHA256="ef758ae7c6cf9267c9c0ef080b8965f453d89ab2d25d9eb22de4405925238768"
 
 ARG \
   # renovate: datasource=go depName=golang.org/x/tools/gopls

From d9a880f53158cec09c3f61d4a686c450cd8226f3 Mon Sep 17 00:00:00 2001
From: Joe Corall <joe@libops.io>
Date: Sat, 6 Jun 2026 06:22:06 -0400
Subject: [PATCH 3/3] Update Dockerfile

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 1fe520d..aad898d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -226,7 +226,7 @@ ARG \
   # renovate: datasource=npm depName=@anthropic-ai/claude-code
   CLAUDE_CLI_VERSION=2.1.161 \
   # renovate: datasource=npm depName=@openai/codex
-  CODEX_CLI_VERSION=0.136.0 \
+  CODEX_CLI_VERSION=0.137.0 \
   # renovate: datasource=npm depName=@google/gemini-cli
   GEMINI_CLI_VERSION=0.45.0 \
   # renovate: datasource=npm depName=opencode-ai