Install upstream ICU for current CLDR/emoji data

JetBrains' bundled JBR fails to load without a modern libicu; Debian
trixie ships libicu76, while upstream is at 78.3 with newer CLDR, IANA
tz, and Unicode/emoji data. The new scripts/icu/install.sh extracts
upstream's Ubuntu22.04 prebuilt into /usr/local, which shadows the
distro libicu via ld.so. Also adds pkg-config to the baseline.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: chapterjason

scripts/icu/install.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+# ICU installer. Extracts upstream's Ubuntu22.04 prebuilt into /usr/local so
+# JetBrains' bundled JBR, .NET, Node intl, etc. pick up a current libicu
+# with fresh CLDR + IANA tz + Unicode/emoji data.
+#
+# Ubuntu22.04 binaries run on Debian trixie: glibc and libstdc++ are
+# forward-compatible, and trixie's toolchain is newer than Ubuntu 22.04's.
+# x86_64 only — upstream ships no arm64 prebuilt.
+# https://github.com/unicode-org/icu
+set -euo pipefail
+
+ICU_VERSION="${VERSION:-latest}"
+
+if [ "$ICU_VERSION" = "latest" ]; then
+  TAG="$(curl -fsSL https://api.github.com/repos/unicode-org/icu/releases/latest \
+    | sed -n 's/^.*"tag_name": *"\([^"]*\)".*$/\1/p')"
+  ICU_VERSION="${TAG#release-}"
+fi
+
+ARCH="$(uname -m)"
+if [ "$ARCH" != "x86_64" ]; then
+  echo "icu: no upstream prebuilt for $ARCH (only x86_64). Install from source or use Debian's libicu." >&2
+  exit 1
+fi
+
+TAG="release-${ICU_VERSION}"
+FILE="icu4c-${ICU_VERSION}-Ubuntu22.04-x64.tgz"
+
+TMPDIR="$(mktemp -d)"
+trap 'rm -rf "$TMPDIR"' EXIT
+
+curl -fsSL -o "$TMPDIR/icu.tgz" \
+  "https://github.com/unicode-org/icu/releases/download/${TAG}/${FILE}"
+
+# Tarball layout: icu/usr/local/{bin,lib,include,share}/... — strip the
+# leading `icu/` and drop the rest onto the root filesystem.
+tar -xzf "$TMPDIR/icu.tgz" -C / --strip-components=1
+
+# /usr/local/lib isn't on Debian's default ld.so search path — drop a conf
+# snippet so the dynamic linker finds the new libicu*.so.
+echo "/usr/local/lib" > /etc/ld.so.conf.d/usr-local.conf
+ldconfig

src/base/Dockerfile

@@ -31,7 +31,7 @@ RUN apt-get update && \
         bash build-essential ca-certificates containerd.io curl docker-ce docker-ce-cli \
         docker-buildx-plugin docker-compose-plugin dtach file git gnupg \
         htop iproute2 iputils-ping jq less locales lsb-release lsof \
-        man-db openssh-client pipx procps python3 python3-pip rsync strace \
+        man-db openssh-client pipx pkg-config procps python3 python3-pip rsync strace \
         sudo systemd systemd-sysv tar tree unzip vim wget && \
     rm -rf /var/lib/apt/lists/*
 
@@ -85,6 +85,8 @@ RUN --mount=type=bind,source=scripts/context-mode,target=/scripts/context-mode \
     bash /scripts/context-mode/install.sh
 RUN --mount=type=bind,source=scripts/home-persist,target=/scripts/home-persist \
     bash /scripts/home-persist/install.sh
+RUN --mount=type=bind,source=scripts/icu,target=/scripts/icu \
+    bash /scripts/icu/install.sh
 RUN --mount=type=bind,source=scripts/jetbrains,target=/scripts/jetbrains \
     bash /scripts/jetbrains/install.sh