Add .devcontainer/devcontainer-lock.json

[Spitfire1900]

What Changed

Add .devcontainer/devcontainer-lock.json

Why

Beginning with VSCode 1.118 fresh builds of devcontainers will create a .devcontainer/devcontainer-lock.json file and VSCode will honor the devcontainer-lock.json file if it exists.

UI Changes

Checklist

• This PR is small and focused
• I explained what changed and why
• [N/A] I included before/after screenshots for any UI changes
• [N/A] I included a video for animation/interaction changes

---

Note

Low Risk
Low risk: changes are limited to devcontainer reproducibility metadata and a formatter version bump; no runtime application logic is affected.

Overview
Adds .devcontainer/devcontainer-lock.json to pin exact digests/versions for devcontainer features (bun/git/node/python) for more reproducible builds.

Updates .oxfmtrc.json with an override to format the new lock file (no trailing commas and no final newline), and bumps oxfmt from ^0.40.0 to ^0.47.0 (updating bun.lock and package.json).

^{Reviewed by Cursor Bugbot for commit 8b34e4a. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Add devcontainer features lock file pinning bun, git, node, and python versions

• Adds devcontainer-lock.json pinning devcontainer feature images (bun 1.1.0, git 1.3.5, node 1.7.1, python 1.8.0) with resolved digests and integrity hashes for reproducible dev environments.
• Adds a formatter override in .oxfmtrc.json to disable trailing commas and final newline for the lock file.
• Bumps oxfmt from ^0.40.0 to ^0.47.0 in package.json with updated lockfile entries.

^{Macroscope summarized 8b34e4a.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: a97accd6-55c0-4ad1-a82f-9462005d55d1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[macroscopeapp]

Approvability

Verdict: Approved

Development tooling changes only: adds a devcontainer lock file for pinning dev environment versions and updates the oxfmt formatter dependency. No runtime behavior impact.

^{You can customize Macroscope's approvability policy. Learn more.}

Dismissing prior approval to re-evaluate 964f923

Dismissing prior approval to re-evaluate b735103

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit b735103. Configure here.}

Dismissing prior approval to re-evaluate 8b34e4a