feat(config): support OCI remote extends for devcontainer.json

[skevetter]

Summary

• Adds OCI registry support to the extends property: refs like ghcr.io/org/devcontainer-base:1 are detected, pulled from the registry, and the first layer is extracted to find devcontainer.json
• isOCIRef() distinguishes OCI refs from local paths (no .json/.jsonc suffix, contains /, not relative/absolute path)
• resolveOCIExtends() handles pull with retry/backoff, layer extraction, JSONC parsing, and recursive extends resolution
• Cycle detection uses the OCI ref string directly in the visited set
• Includes integration test using go-containerregistry's in-memory registry + unit tests for ref detection, extraction, and cycle detection (15 new tests, 210 total in package)

[netlify]

✅ Deploy Preview for devsydev canceled.

Name	Link
🔨 Latest commit	488416c
🔍 Latest deploy log	https://app.netlify.com/projects/devsydev/deploys/69f80e015227cb00082ae7c7

[coderabbitai]

Warning

Rate limit exceeded

@skevetter has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 16 minutes and 4 seconds before requesting another review.

To keep reviews running without waiting, you can enable usage-based add-on for your organization. This allows additional reviews beyond the hourly cap. Account admins can enable it under billing.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 8e17fdde-9167-44e0-ac7a-14acd8e6210e

📥 Commits

Reviewing files that changed from the base of the PR and between da42f37 and 488416c.

📒 Files selected for processing (4)

• pkg/devcontainer/config/extends.go
• pkg/devcontainer/config/extends_oci.go
• pkg/devcontainer/config/extends_oci_test.go
• pkg/devcontainer/config/extends_test.go

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Review rate limit: 0/1 reviews remaining, refill in 16 minutes and 4 seconds.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}