- Downgrade Go from 1.26.2 to 1.25 (stable, avoids compiler crash on Alpine)
- Reorganize protobuf generated files into language_server_pb/ subdirectory
- Update go.mod and go.sum to match new Go version
- Docker build now completes successfully and pushes to registry
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
Reverting Dockerfile to match upstream version:
- Use golang:1.26.2-alpine instead of 1.25
- Use Alpine as final runtime image (not Debian)
- Remove LS binary and certificate setup
- Restore apk-based package management
- Remove multi-architecture build targets
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
Docker named volumes and host bind-mounts may be owned by root,
causing "open data/model_pricing.sha256: permission denied" when
the container runs as the non-root sub2api user.
Add an entrypoint script that fixes /app/data ownership before
dropping to sub2api via su-exec. Replace USER directive with the
entrypoint approach across all three Dockerfiles and update both
GoReleaser configs to include the script in Docker build contexts.
GO-2026-4602 (os), GO-2026-4601 (net/url), GO-2026-4600 and
GO-2026-4599 (crypto/x509). The crypto/x509 fixes are only
available in go1.26.1+, not backported to go1.25.x.
- Add -tags=embed flag to GoReleaser builds
- Add -tags embed flag to Dockerfile builds
- Fix Dockerfile COPY order to prevent frontend dist being overwritten
- Update README build instructions with embed tag explanation
