06/21/2026

Changed

• Include Paperclip's published Skills catalog package in the Docker image until stable Paperclip carries the upstream package-layout fix.
• Document the Paperclip Skills catalog compatibility shim in the README, Docker Hub description, Podman guide, translations, and third-party notices.

Fixed

• Stop Paperclip's Skills page from failing on GET /api/skills/catalog by providing the catalog manifest at the path stable Paperclip expects.
• Add pull-request validation that checks the Paperclip Skills catalog manifest and verifies a non-empty catalog can load from the built image.

06/20/2026

Changed

• Refresh Paperclip to 2026.618.0.
• Document Paperclip's OpenCode home/config paths and the supported Docker update path across the README, Docker Hub description, Podman guide, examples, security notes, and translations.

Fixed

• Start Paperclip with the same /home/opencode HOME and XDG paths used by OpenCode so the OpenCode adapter no longer falls back to /root/.config/opencode.
• Add pull-request validation that starts Paperclip and checks its runtime HOME/XDG environment.

06/18/2026

Changed

• Refreshed the Docker runtime to Node.js 22.23.0 LTS with npm 10.9.8.
• Refreshed pinned npm, PyPI, GitHub-release, and git-tag tools in the image.
• Updated GitHub Actions checkout/QEMU pins, read-only workflow permissions, and Docker Hub secret documentation.
• Migrated Renovate custom managers to managerFilePatterns.
• Updated README, Docker Hub description, Podman guide, changelog, security notes, third-party notices, and translated runtime tables.
• Documented the supported update path: docker compose pull && docker compose up -d.
• Documented that some current bundled third-party CLIs still report transitive npm advisories at their latest stable versions.

Fixed

• Removed the critical npm audit findings from the previous Dockerfile npm pin set.
• Kept shell and s6 service files on LF endings so Docker images built from Windows checkouts start correctly.
• Started Hermes in foreground mode under HolyCode's s6 supervision and documented the required API_SERVER_KEY.
• Started Paperclip with a Docker-reachable bind preset and pre-created embedded Postgres compatibility symlinks.

05/27/2026

Added

• Add a dedicated Podman guide covering env-file setup, SELinux bind mounts, rootless permissions, updates, and minimal web UI usage

05/27/2026

Fixed

• Allow Paperclip remote LAN/private hostnames to be configured with PAPERCLIP_ALLOWED_HOSTNAMES

05/27/2026

Added

• Add optional CLIProxyAPI sidecar support in the full Docker Compose reference
• Add runtime OpenCode cliproxyapi provider wiring behind CLIPROXYAPI_ENABLED

Changed

• Document CLIProxyAPI setup, environment variables, and isolated local-cache state paths in English docs

Fixed

• Keep CLIProxyAPI configuration isolated from ENABLE_CLAUDE_AUTH, opencode-claude-auth, and Claude credential paths

05/27/2026

Added

• Add Renovate-only dependency automation for GitHub Actions, Dockerfile pins, Docker ARGs, npm packages, and PyPI packages with automerge disabled

Changed

• Pin Docker and runtime dependency versions for repeatable builds
• Refresh workflow action versions to current stable tags

Fixed

• Preserve user-owned oh-my-openagent-setup skill folders while cleaning up HolyCode-managed copies when the plugin is disabled
• Document local local-cache/ guidance for quick-start setups
• Repair translated README contributing links so they resolve to the source repo contribution guide

[1.0.5] - 04/10/2026

Added

• Add Hermes Agent as an optional bundled service with ENABLE_HERMES, persistent ~/.hermes state, and an API surface on port 8642
• Add Paperclip as an optional bundled service with ENABLE_PAPERCLIP, persistent ~/.paperclip state, and a local dashboard on port 3100
• Install Claude Code CLI in the image so the Claude Auth flow has the binary it expects
• Expand the shipped toolset with TypeScript, pnpm, Prisma, Lighthouse, database CLIs, media tools, and Python utility packages
• Add a pull-request validation workflow that builds the image and smoke-checks the OpenCode binary

Changed

• Refresh the docs, translations, Docker Hub description, and landing page to reflect the new bundled services and the larger 50+ toolset
• Extend the default compose and env examples with Hermes and Paperclip toggles

Fixed

• Resolve the python-dotenv and dotenv-cli binary collision so the image builds cleanly
• Switch Hermes to its foreground gateway runner and bootstrap Paperclip in a Docker-safe authenticated mode so both bundled services start correctly under s6-overlay
• Remove shell-expanded Python config edits from entrypoint.sh by passing data into Python safely
• Repair broken asset and LICENSE paths in the affected translated READMEs
• Remove stale Slim-variant references from the package request issue template

04/04/2026

Added

• Ship a built-in /oh-my-openagent-setup skill for first-time setup and reruns after provider changes (only visible when ENABLE_OH_MY_OPENAGENT=true)
• Copy HolyCode-managed OpenCode skills into ~/.config/opencode/skills on boot without overwriting existing user skill folders
• Ensure enabled plugin packages are installed on boot if they are missing from the OpenCode cache
• Add HOLYCODE_PLUGIN_UPDATE environment variable with two modes: manual (install if missing only) and auto (install if missing and update on boot)

Changed

• Document /oh-my-openagent-setup as the supported path for writing oh-my-openagent.jsonc
• Document the default picker policy so only Sisyphus, Hephaestus, Prometheus, and Atlas are visible by default
• Clarify that OPENCODE_DISABLE_AUTOUPDATE only affects OpenCode itself, not plugins
• Clarify that /oh-my-openagent-setup skill only appears when the plugin is enabled

Fixed

• Add an explicit rerun + doctor + model-capability refresh path for stale visible default-model behavior after provider changes

04/04/2026

Added

• Ship a built-in /oh-my-openagent-setup skill for first-time setup and reruns after provider changes
• Copy HolyCode-managed OpenCode skills into ~/.config/opencode/skills on boot without overwriting existing user skill folders
• Ensure enabled plugin packages are installed on boot if they are missing from the OpenCode cache

Changed

• Document /oh-my-openagent-setup as the supported path for writing oh-my-openagent.jsonc
• Document the default picker policy so only Sisyphus, Hephaestus, Prometheus, and Atlas are visible by default

Fixed

• Add an explicit rerun + doctor + model-capability refresh path for stale visible default-model behavior after provider changes