Replace gum with bubblewrap in Docker image

.codex_yolo.Dockerfile

@@ -6,21 +6,14 @@ ARG CODEX_YOLO_WRAPPER_VERSION=unknown
 RUN apt-get update \
   && apt-get install -y --no-install-recommends \
     ca-certificates \
-    curl \
+    bubblewrap \
     gh \
     git \
-    gnupg \
     gosu \
     openssh-client \
     passwd \
     ripgrep \
     sudo \
-  && mkdir -p /etc/apt/keyrings \
-  && curl -fsSL https://repo.charm.sh/apt/gpg.key | gpg --dearmor -o /etc/apt/keyrings/charm.gpg \
-  && echo "deb [signed-by=/etc/apt/keyrings/charm.gpg] https://repo.charm.sh/apt/ * *" > /etc/apt/sources.list.d/charm.list \
-  && apt-get update \
-  && apt-get install -y --no-install-recommends \
-    gum \
   && rm -rf /var/lib/apt/lists/*
 
 # Install Codex CLI (provides the `codex` binary).

CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to codex_yolo will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.1.9] - 2026-03-29
+
+### Changed
+- Replace Charm's `gum` package with `bubblewrap` in the Docker image.
+- Remove the extra Charm apt repository setup that was only needed for `gum`.
+- Bump the project version from 1.1.8 to 1.1.9.
+
 ## [1.1.8] - 2026-03-29
 
 ### Added

VERSION

@@ -1 +1 @@
-1.1.8
+1.1.9

tests/integration_tests.sh

@@ -374,12 +374,16 @@ else
   log_fail "Wrapper version mismatch rebuild logic missing"
 fi
 
-# Test 19: Dockerfile includes rg, gh, and gum packages
-log_test "Dockerfile installs rg, gh, and gum"
-if grep -q 'gh' "${dockerfile}" && grep -q 'ripgrep' "${dockerfile}" && grep -q 'gum' "${dockerfile}"; then
-  log_pass "Dockerfile includes gh, ripgrep, and gum packages"
+# Test 19: Dockerfile includes rg, gh, and bubblewrap packages without Charm gum setup
+log_test "Dockerfile installs rg, gh, and bubblewrap"
+if grep -q 'gh' "${dockerfile}" && \
+   grep -q 'ripgrep' "${dockerfile}" && \
+   grep -q 'bubblewrap' "${dockerfile}" && \
+   ! grep -q 'gum' "${dockerfile}" && \
+   ! grep -q 'repo\\.charm\\.sh' "${dockerfile}"; then
+  log_pass "Dockerfile includes gh, ripgrep, and bubblewrap without Charm gum setup"
 else
-  log_fail "Dockerfile missing gh, ripgrep, and/or gum package install"
+  log_fail "Dockerfile is missing bubblewrap or still contains Charm gum setup"
 fi
 
 # Test 20: --gh mounting in dry run mode