otpGarmin/docker/docs/package-lock.json, branch mainOTP Wallet for Garmin Connect IQ: offline one-time passwords and barcodes.https://git.cirakg.xyz/otpGarmin/atom?h=main2026-10-18T18:28:09+00:00build(docker): add pinned dev and docs images2026-10-18T18:28:09+00:00cirakgcirakg@cirakg.xyz2026-10-18T18:28:09+00:00urn:sha1:fe4ba63c0a12d9c914acbb0332d96924810b393b
garmin-otp/dev: Ubuntu 22.04 (pinned by digest; the simulator needs
WebKitGTK 4.0), apt packages from a dated snapshot.ubuntu.com mirror,
OpenJDK 17, Xvfb/openbox/noVNC for the headless simulator, the
connect-iq-sdk-manager CLI v0.8.4 checked against its release SHA-256,
and Python tools installed from a hash-locked requirements file.
garmin-otp/docs: Node 22 (pinned by digest), Debian snapshot packages,
markdownlint-cli2 and mermaid-cli from package-lock.json, and the
headless Chrome build pinned by Puppeteer.
Locks only use releases published before 2026-10-01. The Garmin SDK,
device files and the developer key are never baked into an image.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>