- apko/sdk.yaml: run-as 65532, create /home/nonroot and /app owned by nonroot
- sdk.Dockerfile: USER 65532, set HOME and DOTNET_CLI_HOME to /home/nonroot
- README/DOCKERHUB: update examples to use COPY --chown=nonroot and /app/publish
dotnet restore writes NuGet cache to $DOTNET_CLI_HOME/.nuget/packages
which is now /home/nonroot/.nuget/packages — no root needed.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
HTML comments between the separator and data rows break markdown
table parsing. Markers now wrap the entire table (header included)
and the pipeline regenerates the full table.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
The daily update-check pipeline now regenerates the images table,
EOL dates, and .NET badge in README.md and DOCKERHUB.md from the
Microsoft releases-index.json API. Commits changes only when the
supported version set changes.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- apko configs for runtime (ICU), runtime-invariant (no ICU), and SDK variants
- Build workflow with dynamic matrix from .NET release metadata (EOL-aware)
- Daily update-check workflow to detect new .NET versions
- Docker Scout PR analysis workflow
- LTS/STS floating tags, multi-arch (amd64 + arm64)
- Makefile for local builds and version discovery
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
