v2.0.0

devbox Release — 2026-10-24

Commit: 1062bd160533
Previous: accc27f9c4e4

Image Digest Changes

services/ollama-openwebui

- image: docker.io/ollama/ollama@sha256:a79fc15cecf33ed3b05c09a28415db7291c85c4c9d5945f4597317ca02456532
- image: ghcr.io/open-webui/open-webui@sha256:c1e4f0927fb0acd53bcbd8bbc92ecaf7ca36a23ee4cb8f25ce90c541012a473a
+ image: docker.io/ollama/ollama:0.40.10@sha256:4c5b27871a3239a717048f9b93057680a51b60c8119a7016aebb57f938e25e35
+ image: ghcr.io/open-webui/open-webui:0.12@sha256:a537bbe1e6b428820f52ed4a029d7fff97062e24d5cf32c365fba36fd0542def

services/traefik

- image: docker.io/tecnativa/docker-socket-proxy@sha256:9e4b9e7517a6b660f2cc903a19b257b1852d5b3344794e3ea334ff00ae677ac2
- image: docker.io/library/traefik@sha256:e561a37f8710d9cf41c78bdf421d822b2c0b48267ec0552e644565fb55466ea9
+ image: docker.io/tecnativa/docker-socket-proxy:v0.5.0@sha256:1f5038b54f06c3e18422902cf00ba21803d1c97805aae032e5e6673d532d3459
+ image: docker.io/library/traefik:v3.7@sha256:c8a121e4bb1347e8fd52657fab12f2cb70b68f8a018895e2068f92c9e519b9c2

Commits

• 1062bd1 fix: give Open WebUI room to boot; e2e dumps diagnostics on failure
• 7eb721b chore: support named vX.Y.Z releases from monthly-rebuild
• e95d4a5 docs: rewrite for the new layout, trust model and operations
• f1ecd6e chore: pin actions by SHA, gate releases on CI, drop SLSA/SBOM/alpine jobs
• 45cd98c test: contract tests on resolved compose, e2e install, local CI mirror
• 051a741 fix: working backup and restore, real security checks, helper fixes
• fd15fc2 fix: native COMPOSE_FILE chain, fail-closed binds, Traefik file access
• 80a1535 fix: rebuild setup.sh around preflight, signed vendor repos and safe SSH lockdown
• fcc6fb3 docs: AGENTS.md symlinks to CLAUDE.md, note patch-pinned images
• 1546596 docs: add CLAUDE.md
• f259d38 feat: bump images and fix lockfile refresh
• c6f83ba chore: monthly release cadence, CI runs bats, faster tests
• b094b1c fix: address reviewer-flagged setup bugs