From 96be7e95f495358b1dc3989475047a9d9c22941e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 2 Apr 2026 10:07:18 +0000
Subject: [PATCH 1/2] chore(deps): update bump-dependencies

---
 Dockerfile | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index caf134d..daa965b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:24-trixie@sha256:8bd2aa8811c33803aa1677674e5388a4524e8bf1d286200afefb9a4c9bd473ef
+FROM node:24-trixie@sha256:dcc3e56b82427ddc3b91ca2b18499450d670fc58251d944e5107d8ef2899f841
 
 ARG TZ
 ENV TZ="$TZ"
@@ -19,13 +19,13 @@ ENV \
 
 ARG \
   # renovate: datasource=npm depName=@anthropic-ai/claude-code
-  CLAUDE_CLI_VERSION=2.1.79 \
+  CLAUDE_CLI_VERSION=2.1.87 \
   # renovate: datasource=npm depName=@openai/codex
-  CODEX_CLI_VERSION=0.116.0 \
+  CODEX_CLI_VERSION=0.118.0-alpha.3-win32-x64 \
   # renovate: datasource=npm depName=@google/gemini-cli
-  GEMINI_CLI_VERSION=0.34.0 \
+  GEMINI_CLI_VERSION=0.36.0-preview.6 \
   # renovate: datasource=npm depName=opencode-ai
-  OPENCODE_AI_VERSION=1.2.27 \
+  OPENCODE_AI_VERSION=1.3.7 \
   CLI=""
 
 RUN if [ -n "$CLI" ]; then \
@@ -51,7 +51,7 @@ ARG \
   # renovate: datasource=repology depName=debian_13/bc
   BC_VERSION=1.07.1-4 \
   # renovate: datasource=repology depName=debian_13/bind9
-  BIND9_VERSION=1:9.20.18-1~deb13u1 \
+  BIND9_VERSION=1:9.20.21-1~deb13u1 \
   # renovate: datasource=repology depName=debian_13/bubblewrap
   BW_VERSION=0.11.0-2 \
   # renovate: datasource=repology depName=debian_13/fzf

From 4d3efe716e36b53f17e50e8e01213927e3993a95 Mon Sep 17 00:00:00 2001
From: Joe Corall <jjc223@lehigh.edu>
Date: Thu, 2 Apr 2026 10:17:56 -0400
Subject: [PATCH 2/2] force semver on nmp packages

---
 Dockerfile     |  8 ++++----
 renovate.json5 | 12 ++++++++++++
 2 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index daa965b..b283ea4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -19,13 +19,13 @@ ENV \
 
 ARG \
   # renovate: datasource=npm depName=@anthropic-ai/claude-code
-  CLAUDE_CLI_VERSION=2.1.87 \
+  CLAUDE_CLI_VERSION=2.1.90 \
   # renovate: datasource=npm depName=@openai/codex
-  CODEX_CLI_VERSION=0.118.0-alpha.3-win32-x64 \
+  CODEX_CLI_VERSION=0.118.0 \
   # renovate: datasource=npm depName=@google/gemini-cli
-  GEMINI_CLI_VERSION=0.36.0-preview.6 \
+  GEMINI_CLI_VERSION=0.36.0 \
   # renovate: datasource=npm depName=opencode-ai
-  OPENCODE_AI_VERSION=1.3.7 \
+  OPENCODE_AI_VERSION=1.3.13 \
   CLI=""
 
 RUN if [ -n "$CLI" ]; then \
diff --git a/renovate.json5 b/renovate.json5
index c73c70e..9b8c2f7 100644
--- a/renovate.json5
+++ b/renovate.json5
@@ -3,4 +3,16 @@
   extends: [
     'github>libops/renovate-config:default.json5',
   ],
+  packageRules: [
+    {
+      matchDatasources: ['npm'],
+      matchPackageNames: [
+        '@anthropic-ai/claude-code',
+        '@google/gemini-cli',
+        '@openai/codex',
+        'opencode-ai',
+      ],
+      allowedVersions: '/^\\d+\\.\\d+\\.\\d+$/',
+    },
+  ],
 }