Version Packages

[docker-doctor]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@docker-doctor/cli@0.5.2

Patch Changes

• 590ea75: Fix three discovery false positives: <name>.dockerignore files (BuildKit's per-Dockerfile ignore convention) are no longer scanned as Dockerfiles, Dockerfiles with no instructions no longer produce no-root-user / require-labels findings, and discovered paths are always /-separated so the .dockerignore check and the JSON report behave the same on Windows.
• 66816aa: The post-scan wizard now reports a failed write (workflow scaffold, .docker-doctor/, .gitignore) and exits non-zero instead of silently pretending it succeeded; .docker-doctor/diagnostics.json flattens messages and paths the same way the per-rule .txt files already did; and every CLI error path sets the exit code instead of calling process.exit, so piped output is never cut short.
• 5b03d3d: Every diagnostic in the --json report (and in .docker-doctor/diagnostics.json) now carries its rule's category, so consumers no longer need a second rules list call to group findings. The report schemaVersion is now 3; all existing fields are unchanged.
• 61264f3: Raise the supported Node.js floor to 22.18. The CLI's dependencies already required Node 22, and docker-doctor.config.ts only loads on runtimes that strip TypeScript types natively (22.18+). On an older Node the CLI now explains the .ts config failure and points at the YAML/JSON alternatives instead of printing Unknown file extension ".ts".
• d9b9a43: Fix four false results from reading shell text without quote awareness: a <<EOF inside a quoted string no longer opens a heredoc, a heredoc that never closes now fails the file (exit 2, "scan incomplete") instead of silently dropping every instruction after it, avoid-run-cd only flags cd in command position (/opt/cd and cd.tar.gz no longer match), use-pipefail ignores | inside quoted arguments, and a services: written as a YAML list is treated as invalid Compose rather than as services named 0, 1, …
• c30dd7f: The bundled docker-doctor skill no longer claims that category severities other than "off" are ignored — categories entries cascade to every rule in the category unless a per-rule entry overrides them.

docker-doctor-kit@0.1.7

Patch Changes

• Updated dependencies [590ea75]
• Updated dependencies [66816aa]
• Updated dependencies [5b03d3d]
• Updated dependencies [61264f3]
• Updated dependencies [d9b9a43]
• Updated dependencies [c30dd7f]
  • @docker-doctor/cli@0.5.2

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docker-doctor	Ready	Preview	Sep 18, 2026 2:23am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 9dfab5ac-bff9-4a23-af35-75b94e46db6c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

The latest Docker Doctor scan for this pull request. Learn more about Docker Doctor.

File	Status	Issues	Updated
Dockerfile	Error	1 error, 2 info	Sep 18, 2026 2:23am UTC

Score: 84 / 100 · Good

3 issues

Dockerfile

• Dockerfile:2 Potential secret found in ENV: 'DB_PASSWORD'. no-secrets-in-env
• Dockerfile:1 No HEALTHCHECK instruction found. require-healthcheck
• Dockerfile:1 No LABEL metadata was found in this Dockerfile. require-labels

_{Scanned by Docker Doctor for commit 90e4a79.}

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/@docker-doctor/cli@136

commit: 90e4a79