c1316d8a7eRemove last runtime installs from .tekton/tasks/: - govulncheck (go install) → baked via GOBIN in tools-builder stage, copied to final - @fission-ai/openspec (npm install -g at runtime) → added to npm/package-lock.json (npm ci integrity), symlinked at /usr/local/bin/openspec Also: add GOVULNCHECK_VERSION ARG (default: latest), update VERSIONS.md, renovate.json (govulncheck + openspec tracking), README bundled tools list, and OCI description label. Tracked via forgejo-mcp-7g9: refactor into smaller images (P4, deferred).
10 lines
283 B
JSON
10 lines
283 B
JSON
{
|
|
"name": "release-tools-npm-deps",
|
|
"version": "1.0.0",
|
|
"private": true,
|
|
"description": "Pinned npm dependencies for release-tools image; installed via npm ci --ignore-scripts",
|
|
"dependencies": {
|
|
"@anthropic-ai/mcpb": "2.1.2",
|
|
"@fission-ai/openspec": "1.3.1"
|
|
}
|
|
}
|