diff --git a/.github/skills/change-devcontainer-feature/SKILL.md b/.github/skills/change-devcontainer-feature/SKILL.md
index efbe81a..d3ac3ed 100644
--- a/.github/skills/change-devcontainer-feature/SKILL.md
+++ b/.github/skills/change-devcontainer-feature/SKILL.md
@@ -37,6 +37,8 @@ Apply the changes described in the issue. Common change types:
 - **Update tests** — fix or improve `test.sh` assertions
 - **Update helper functions** — copy latest versions from https://github.com/devcontainer-community/shell-snippets
 
+When editing `devcontainer-feature.json`, ensure `"installsAfter"` includes `"ghcr.io/devcontainer-community/features/ca-certificates:latest"` as the first entry. Add it if missing.
+
 When modifying `install.sh`:
 - Keep helper functions verbatim from the shell-snippets repo
 - Only customize the feature-specific parts (repository, binary name, URL template, architecture mappings)
diff --git a/.github/skills/create-devcontainer-feature/SKILL.md b/.github/skills/create-devcontainer-feature/SKILL.md
index 57acb91..6490970 100644
--- a/.github/skills/create-devcontainer-feature/SKILL.md
+++ b/.github/skills/create-devcontainer-feature/SKILL.md
@@ -85,7 +85,10 @@ Create these files:
             ],
             "description": "Version of \"<binary-name>\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
 ```
 
@@ -93,7 +96,7 @@ Notes:
 - `name` uses the owner/project format with a slash (e.g., `"schpet/linear-cli"`, `"github.com/cli"`, `"cloudflare.com/warp-cli"`). For plain-name features (e.g., `bat`, `jq`), `name` is just the tool name.
 - `id` is derived from `name` by replacing `/` with `-` (e.g., `"schpet/linear-cli"` → `"schpet-linear-cli"`). It MUST match the directory name exactly.
 - `version` starts at `"1.0.0"` for new features
-- Add `"installsAfter"` only if there is a real dependency on another feature
+- Always include `"installsAfter": ["ghcr.io/devcontainer-community/features/ca-certificates:latest"]` so CA certificates are available before the feature runs
 
 ### 4b. `src/<FEATURE_ID>/install.sh`
 
diff --git a/README.md b/README.md
index 9c99dfe..8fa0265 100644
--- a/README.md
+++ b/README.md
@@ -10,94 +10,94 @@
 
 | Feature | Description | Install method | Version |
 | ------- | ----------- | -------------- | ------- |
-| [add-script](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/add-script) | Add a script from a URL or inline text to /usr/local/bin during devcontainer build | custom | 1.1.0 |
-| [alexpasmantier/television](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/alexpasmantier-television) | `tv` — fuzzy finder for files, text, and more | gh release | 1.0.1 |
-| [ankitpokhrel/jira-cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ankitpokhrel-jira-cli) | `jira` — feature-rich interactive Jira command line client | gh release | 1.0.0 |
-| [apt-build-essential](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/apt-build-essential) | `gcc`/`g++`/`make` — C/C++ compiler toolchain via the build-essential package | apt | 1.0.0 |
-| [asdf-vm.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/asdf-vm.com) | `asdf` — multi-runtime version manager | gh release | 1.0.2 |
-| [astral.sh/uv](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/astral.sh-uv) | `uv`/`uvx` — fast Python package and project manager | gh release | 1.0.4 |
-| [atuin.sh](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/atuin.sh) | `atuin` — shell history sync and search | gh release | 1.0.3 |
-| [avivsinai/bitbucket-cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/avivsinai-bitbucket-cli) | `bkt` — CLI for Bitbucket | gh release | 1.0.0 |
-| [AWS CLI](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/aws-cli) | `aws` — official AWS command-line interface | curl | 1.1.2 |
-| [basecamp/fizzy-cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/basecamp-fizzy-cli) | `fizzy` — CLI for Basecamp | gh release | 1.0.1 |
-| [bat](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/bat) | `bat` — cat with syntax highlighting and git integration | gh release | 1.0.1 |
-| [biomejs.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/biomejs.dev) | `biome` — fast JS/TS formatter and linter | gh release | 1.0.1 |
-| [btop](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/btop) | `btop` — resource monitor (CPU, memory, network, processes) | gh release | 1.0.3 |
-| [bun.sh](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/bun.sh) | `bun` — fast JS runtime and package manager | curl | 1.0.0 |
+| [add-script](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/add-script) | Add a script from a URL or inline text to /usr/local/bin during devcontainer build | custom | 1.1.1 |
+| [alexpasmantier/television](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/alexpasmantier-television) | `tv` — fuzzy finder for files, text, and more | gh release | 1.0.2 |
+| [ankitpokhrel/jira-cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ankitpokhrel-jira-cli) | `jira` — feature-rich interactive Jira command line client | gh release | 1.0.1 |
+| [apt-build-essential](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/apt-build-essential) | `gcc`/`g++`/`make` — C/C++ compiler toolchain via the build-essential package | apt | 1.0.1 |
+| [asdf-vm.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/asdf-vm.com) | `asdf` — multi-runtime version manager | gh release | 1.0.3 |
+| [astral.sh/uv](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/astral.sh-uv) | `uv`/`uvx` — fast Python package and project manager | gh release | 1.0.5 |
+| [atuin.sh](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/atuin.sh) | `atuin` — shell history sync and search | gh release | 1.0.4 |
+| [avivsinai/bitbucket-cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/avivsinai-bitbucket-cli) | `bkt` — CLI for Bitbucket | gh release | 1.0.1 |
+| [AWS CLI](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/aws-cli) | `aws` — official AWS command-line interface | curl | 1.1.3 |
+| [basecamp/fizzy-cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/basecamp-fizzy-cli) | `fizzy` — CLI for Basecamp | gh release | 1.0.2 |
+| [bat](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/bat) | `bat` — cat with syntax highlighting and git integration | gh release | 1.0.2 |
+| [biomejs.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/biomejs.dev) | `biome` — fast JS/TS formatter and linter | gh release | 1.0.2 |
+| [btop](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/btop) | `btop` — resource monitor (CPU, memory, network, processes) | gh release | 1.0.4 |
+| [bun.sh](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/bun.sh) | `bun` — fast JS runtime and package manager | curl | 1.0.1 |
 | [ca-certificates](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ca-certificates) | `ca-certificates` — install CA certificates and optionally add custom ones from URLs | apt | 1.0.0 |
-| [ccache.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ccache.dev) | `ccache` — compiler cache for faster C/C++ recompilation | apt | 1.0.0 |
-| [charmbracelet/gum](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/charmbracelet-gum) | `gum` — building blocks for shell scripts | gh release | 1.0.4 |
-| [chezmoi.io](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/chezmoi.io) | `chezmoi` — dotfiles manager across machines | gh release | 1.0.2 |
-| [clang-format](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/clang-format) | `clang-format` — C/C++ code formatter from the LLVM project | apt | 1.0.0 |
-| [clang-tidy](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/clang-tidy) | `clang-tidy` — C++ linter and static analyzer from LLVM | apt | 1.0.0 |
-| [cloudflare.com/warp-cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/cloudflare.com-warp-cli) | `warp-cli` — Cloudflare WARP VPN client | curl | 1.0.1 |
-| [cmake.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/cmake.org) | `cmake` — cross-platform build system generator | apt | 1.0.0 |
-| [collection-c-cpp](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/collection-c-cpp) | C/C++ dev collection — cmake, ninja, gdb, valgrind, ccache, cppcheck, clang-format, clang-tidy, distcc, vcpkg, build-essential | meta | 1.0.1 |
-| [critique.work](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/critique.work) | `critique` — TUI for reviewing git changes | bun | 1.0.0 |
-| [danmar/cppcheck](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/danmar-cppcheck) | `cppcheck` — static analysis tool for C/C++ code | apt | 1.0.0 |
-| [delta](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/delta) | `delta` — syntax-highlighting pager for git diffs | gh release | 1.0.1 |
-| [deno.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/deno.com) | `deno` — secure TypeScript/JavaScript runtime | curl | 1.0.0 |
-| [devenv.sh](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/devenv.sh) | `devenv` — reproducible developer environments via Nix | nix | 1.0.0 |
-| [diffity.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/diffity.com) | `diffity` — agent-agnostic GitHub-style diff viewer and code review tool | npm | 1.0.0 |
-| [direnv.net](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/direnv.net) | `direnv` — environment switcher that loads and unloads variables based on the current directory | apt | 1.0.0 |
-| [distcc.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/distcc.org) | `distcc` — distributed C/C++ compiler for faster parallel builds | apt | 1.0.0 |
-| [dolthub.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/dolthub.com) | `dolt` — SQL database with Git-style versioning | gh release | 1.0.0 |
-| [dolthub.com/doltgres](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/dolthub.com-doltgres) | `doltgres` — version-controlled PostgreSQL-compatible database | gh release | 1.0.0 |
-| [dotenv.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/dotenv.org) | `dotenvx` — better dotenv with multi-environment and encrypted secrets support | bun | 1.0.0 |
-| [dozzle.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/dozzle.dev) | `dozzle` — real-time Docker container log viewer | curl | 1.0.0 |
-| [fathyb/carbonyl](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/fathyb-carbonyl) | `carbonyl` — Chromium-based browser that runs in a terminal | gh release | 1.0.0 |
-| [fd](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/fd) | `fd` — fast and user-friendly file finder | gh release | 1.0.1 |
-| [feature-installer](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/feature-installer) | `feature-installer` — install devcontainer features at runtime | curl | 1.0.0 |
-| [fzf](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/fzf) | `fzf` — general-purpose command-line fuzzy finder | gh release | 1.0.0 |
-| [getdnote.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/getdnote.com) | `dnote` — simple command-line notebook for developers | gh release | 1.0.0 |
-| [gitagent.sh](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/gitagent.sh) | `gitagent` — framework-agnostic, git-native standard for defining AI agents | bun | 1.0.1 |
-| [github.com/cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/github.com-cli) | `gh` — GitHub CLI | curl | 1.0.1 |
-| [helix-editor.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/helix-editor.com) | `hx` — modal text editor with built-in LSP | gh release | 1.0.0 |
-| [hermes-agent.nousresearch.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/hermes-agent.nousresearch.com) | `hermes` — self-improving AI agent by Nous Research | curl | 1.0.0 |
-| [icholy/ttygif](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/icholy-ttygif) | `ttygif` — convert ttyrec recordings to animated GIFs | gh release | 1.0.1 |
-| [jj-vcs.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/jj-vcs.dev) | `jj` — Git-compatible distributed VCS | gh release | 1.0.2 |
-| [jnsahaj/lumen](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/jnsahaj-lumen) | `lumen` — AI-powered commit message generator | cargo | 1.0.0 |
-| [joelhooks/agent-secrets](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/joelhooks-agent-secrets) | `secrets` — manage secrets for AI agents | gh release | 1.0.1 |
-| [jonas/tig](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/jonas-tig) | `tig` — text-mode interface for Git | apt | 1.0.0 |
-| [jq](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/jq) | `jq` — command-line JSON processor | apt | 1.0.0 |
-| [k9scli.io](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/k9scli.io) | `k9s` — terminal UI for Kubernetes clusters | gh release | 1.0.1 |
-| [keybase.io](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/keybase.io) | `keybase` — cryptographic identity and encrypted file sharing | curl | 1.2.0 |
-| [lazygit](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/lazygit) | `lazygit` — terminal UI for git | gh release | 1.0.0 |
-| [lnav.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/lnav.org) | `lnav` — advanced log file viewer for the terminal | gh release | 1.0.0 |
-| [memvid.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/memvid.com) | `memvid` — video-based memory for AI applications | npm | 1.0.0 |
-| [mosh.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/mosh.org) | `mosh` — SSH replacement with roaming support | apt | 1.0.0 |
-| [neovim.io](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/neovim.io) | `nvim` — hyperextensible Vim-based text editor | gh release | 1.0.1 |
-| [ninja-build.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ninja-build.org) | `ninja` — small build system with a focus on speed | apt | 1.0.0 |
-| [nixos.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/nixos.org) | `nix` — the Nix package manager | curl | 1.0.0 |
-| [nvidia.com/cuda](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/nvidia.com-cuda) | NVIDIA CUDA Toolkit for GPU computing | curl | 1.0.0 |
-| [onecli.sh/cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/onecli.sh-cli) | `onecli` — manage agents, secrets, rules, and configuration from the terminal | gh release | 1.0.1 |
-| [opencode.ai](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/opencode.ai) | `opencode` — AI coding agent in the terminal | gh release | 1.0.4 |
-| [pi.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/pi.dev) | `pi` — minimal terminal coding harness | gh release | 1.0.1 |
-| [pkgx.sh](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/pkgx.sh) | `pkgx` — run any package without installing | curl | 1.0.0 |
-| [pulumi.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/pulumi.com) | `pulumi` — infrastructure as code in any language | gh release | 1.0.1 |
-| [rclone](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/rclone.org) | `rclone` — sync files to/from cloud storage | gh release | 1.0.1 |
-| [restic.net](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/restic.net) | `restic` — fast, encrypted, deduplicated backups | gh release | 1.0.1 |
-| [ripgrep](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ripgrep) | `rg` — fast grep alternative (ripgrep) | gh release | 1.0.1 |
-| [run-script](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/run-script) | Run a script from a URL or inline text during devcontainer build | custom | 1.1.0 |
-| [schpet/linear-cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/schpet-linear-cli) | `linear` — CLI to access linear.com issue tracker | gh release | 1.0.2 |
-| [smallstep.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/smallstep.com) | `step` — zero-trust security toolkit and CA | gh release | 1.0.2 |
-| [socket.dev/sfw-free](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/socket.dev-sfw-free) | `sfw` — network security proxy that blocks malicious dependencies | gh release | 1.0.0 |
-| [sourceware.org/gdb](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/sourceware.org-gdb) | `gdb` — GNU debugger for C/C++ and other languages | apt | 1.0.0 |
-| [sshd](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/sshd) | `sshd` — OpenSSH server running inside the container | apt | 1.0.0 |
-| [starship.rs](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/starship.rs) | `starship` — minimal, fast cross-shell prompt | gh release | 1.0.2 |
-| [steveyegge/beads](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/steveyegge-beads) | `bd` — distributed graph issue tracker for AI agents | gh release | 1.0.0 |
-| [swc.rs](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/swc.rs) | `swc` — ultra-fast JS/TS compiler | gh release | 1.0.1 |
-| [sxyazi/yazi](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/sxyazi-yazi) | `yazi` — blazing fast terminal file manager | gh release | 1.0.0 |
-| [tailscale.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/tailscale.com) | `tailscale` — zero-config mesh VPN | curl | 1.0.0 |
-| [taskwarrior.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/taskwarrior.org) | `task` — command-line task manager | apt | 1.0.0 |
-| [tree-sitter](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/tree-sitter) | `tree-sitter` — incremental parsing toolkit for building syntax trees | gh release | 1.0.0 |
-| [turso.tech](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/turso.tech) | `tursodb` — in-process SQL database compatible with SQLite | gh release | 1.0.0 |
-| [valgrind.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/valgrind.org) | `valgrind` — memory error detector and profiler for C/C++ | apt | 1.0.0 |
-| [vcpkg.io](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/vcpkg.io) | `vcpkg` — C/C++ package manager by Microsoft | git | 1.0.0 |
-| [webinstall.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/webinstall.dev) | `webi` — install packages without sudo | curl | 1.0.1 |
-| [yakitrak/notesmd-cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/yakitrak-notesmd-cli) | `notesmd-cli` — manage Obsidian vaults from the terminal | gh release | 1.0.0 |
-| [yoctoproject.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/yoctoproject.org) | `bitbake` — build tool for the Yocto Project and OpenEmbedded | curl | 1.0.0 |
-| [yoctoproject.org/bitbake](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/yoctoproject.org-bitbake) | `bitbake` — build tool for the Yocto Project | curl | 1.0.0 |
-| [yq](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/yq) | `yq` — command-line YAML/JSON/XML processor | gh release | 1.0.1 |
-| [zellij.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/zellij.dev) | `zellij` — terminal workspace with multiplexer and layouts | gh release | 1.0.2 |
-| [zyedidia/eget](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/zyedidia-eget) | `eget` — easily install prebuilt binaries from GitHub releases | gh release | 1.0.2 |
+| [ccache.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ccache.dev) | `ccache` — compiler cache for faster C/C++ recompilation | apt | 1.0.1 |
+| [charmbracelet/gum](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/charmbracelet-gum) | `gum` — building blocks for shell scripts | gh release | 1.0.5 |
+| [chezmoi.io](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/chezmoi.io) | `chezmoi` — dotfiles manager across machines | gh release | 1.0.3 |
+| [clang-format](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/clang-format) | `clang-format` — C/C++ code formatter from the LLVM project | apt | 1.0.1 |
+| [clang-tidy](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/clang-tidy) | `clang-tidy` — C++ linter and static analyzer from LLVM | apt | 1.0.1 |
+| [cloudflare.com/warp-cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/cloudflare.com-warp-cli) | `warp-cli` — Cloudflare WARP VPN client | curl | 1.0.2 |
+| [cmake.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/cmake.org) | `cmake` — cross-platform build system generator | apt | 1.0.1 |
+| [collection-c-cpp](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/collection-c-cpp) | C/C++ dev collection — cmake, ninja, gdb, valgrind, ccache, cppcheck, clang-format, clang-tidy, distcc, vcpkg, build-essential | meta | 1.0.2 |
+| [critique.work](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/critique.work) | `critique` — TUI for reviewing git changes | bun | 1.0.1 |
+| [danmar/cppcheck](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/danmar-cppcheck) | `cppcheck` — static analysis tool for C/C++ code | apt | 1.0.1 |
+| [delta](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/delta) | `delta` — syntax-highlighting pager for git diffs | gh release | 1.0.2 |
+| [deno.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/deno.com) | `deno` — secure TypeScript/JavaScript runtime | curl | 1.0.1 |
+| [devenv.sh](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/devenv.sh) | `devenv` — reproducible developer environments via Nix | nix | 1.0.1 |
+| [diffity.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/diffity.com) | `diffity` — agent-agnostic GitHub-style diff viewer and code review tool | npm | 1.0.1 |
+| [direnv.net](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/direnv.net) | `direnv` — environment switcher that loads and unloads variables based on the current directory | apt | 1.0.1 |
+| [distcc.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/distcc.org) | `distcc` — distributed C/C++ compiler for faster parallel builds | apt | 1.0.1 |
+| [dolthub.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/dolthub.com) | `dolt` — SQL database with Git-style versioning | gh release | 1.0.1 |
+| [dolthub.com/doltgres](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/dolthub.com-doltgres) | `doltgres` — version-controlled PostgreSQL-compatible database | gh release | 1.0.1 |
+| [dotenv.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/dotenv.org) | `dotenvx` — better dotenv with multi-environment and encrypted secrets support | bun | 1.0.1 |
+| [dozzle.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/dozzle.dev) | `dozzle` — real-time Docker container log viewer | curl | 1.0.1 |
+| [fathyb/carbonyl](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/fathyb-carbonyl) | `carbonyl` — Chromium-based browser that runs in a terminal | gh release | 1.0.1 |
+| [fd](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/fd) | `fd` — fast and user-friendly file finder | gh release | 1.0.2 |
+| [feature-installer](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/feature-installer) | `feature-installer` — install devcontainer features at runtime | curl | 1.0.1 |
+| [fzf](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/fzf) | `fzf` — general-purpose command-line fuzzy finder | gh release | 1.0.1 |
+| [getdnote.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/getdnote.com) | `dnote` — simple command-line notebook for developers | gh release | 1.0.1 |
+| [gitagent.sh](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/gitagent.sh) | `gitagent` — framework-agnostic, git-native standard for defining AI agents | bun | 1.0.2 |
+| [github.com/cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/github.com-cli) | `gh` — GitHub CLI | curl | 1.0.2 |
+| [helix-editor.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/helix-editor.com) | `hx` — modal text editor with built-in LSP | gh release | 1.0.1 |
+| [hermes-agent.nousresearch.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/hermes-agent.nousresearch.com) | `hermes` — self-improving AI agent by Nous Research | curl | 1.0.1 |
+| [icholy/ttygif](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/icholy-ttygif) | `ttygif` — convert ttyrec recordings to animated GIFs | gh release | 1.0.2 |
+| [jj-vcs.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/jj-vcs.dev) | `jj` — Git-compatible distributed VCS | gh release | 1.0.3 |
+| [jnsahaj/lumen](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/jnsahaj-lumen) | `lumen` — AI-powered commit message generator | cargo | 1.0.1 |
+| [joelhooks/agent-secrets](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/joelhooks-agent-secrets) | `secrets` — manage secrets for AI agents | gh release | 1.0.2 |
+| [jonas/tig](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/jonas-tig) | `tig` — text-mode interface for Git | apt | 1.0.1 |
+| [jq](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/jq) | `jq` — command-line JSON processor | apt | 1.0.1 |
+| [k9scli.io](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/k9scli.io) | `k9s` — terminal UI for Kubernetes clusters | gh release | 1.0.2 |
+| [keybase.io](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/keybase.io) | `keybase` — cryptographic identity and encrypted file sharing | curl | 1.2.1 |
+| [lazygit](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/lazygit) | `lazygit` — terminal UI for git | gh release | 1.0.1 |
+| [lnav.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/lnav.org) | `lnav` — advanced log file viewer for the terminal | gh release | 1.0.1 |
+| [memvid.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/memvid.com) | `memvid` — video-based memory for AI applications | npm | 1.0.1 |
+| [mosh.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/mosh.org) | `mosh` — SSH replacement with roaming support | apt | 1.0.1 |
+| [neovim.io](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/neovim.io) | `nvim` — hyperextensible Vim-based text editor | gh release | 1.0.2 |
+| [ninja-build.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ninja-build.org) | `ninja` — small build system with a focus on speed | apt | 1.0.1 |
+| [nixos.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/nixos.org) | `nix` — the Nix package manager | curl | 1.0.1 |
+| [nvidia.com/cuda](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/nvidia.com-cuda) | NVIDIA CUDA Toolkit for GPU computing | curl | 1.0.1 |
+| [onecli.sh/cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/onecli.sh-cli) | `onecli` — manage agents, secrets, rules, and configuration from the terminal | gh release | 1.0.2 |
+| [opencode.ai](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/opencode.ai) | `opencode` — AI coding agent in the terminal | gh release | 1.0.5 |
+| [pi.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/pi.dev) | `pi` — minimal terminal coding harness | gh release | 1.0.2 |
+| [pkgx.sh](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/pkgx.sh) | `pkgx` — run any package without installing | curl | 1.0.1 |
+| [pulumi.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/pulumi.com) | `pulumi` — infrastructure as code in any language | gh release | 1.0.2 |
+| [rclone](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/rclone.org) | `rclone` — sync files to/from cloud storage | gh release | 1.0.2 |
+| [restic.net](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/restic.net) | `restic` — fast, encrypted, deduplicated backups | gh release | 1.0.2 |
+| [ripgrep](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ripgrep) | `rg` — fast grep alternative (ripgrep) | gh release | 1.0.2 |
+| [run-script](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/run-script) | Run a script from a URL or inline text during devcontainer build | custom | 1.1.1 |
+| [schpet/linear-cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/schpet-linear-cli) | `linear` — CLI to access linear.com issue tracker | gh release | 1.0.3 |
+| [smallstep.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/smallstep.com) | `step` — zero-trust security toolkit and CA | gh release | 1.0.3 |
+| [socket.dev/sfw-free](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/socket.dev-sfw-free) | `sfw` — network security proxy that blocks malicious dependencies | gh release | 1.0.1 |
+| [sourceware.org/gdb](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/sourceware.org-gdb) | `gdb` — GNU debugger for C/C++ and other languages | apt | 1.0.1 |
+| [sshd](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/sshd) | `sshd` — OpenSSH server running inside the container | apt | 1.0.1 |
+| [starship.rs](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/starship.rs) | `starship` — minimal, fast cross-shell prompt | gh release | 1.0.3 |
+| [steveyegge/beads](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/steveyegge-beads) | `bd` — distributed graph issue tracker for AI agents | gh release | 1.0.1 |
+| [swc.rs](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/swc.rs) | `swc` — ultra-fast JS/TS compiler | gh release | 1.0.2 |
+| [sxyazi/yazi](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/sxyazi-yazi) | `yazi` — blazing fast terminal file manager | gh release | 1.0.1 |
+| [tailscale.com](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/tailscale.com) | `tailscale` — zero-config mesh VPN | curl | 1.0.1 |
+| [taskwarrior.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/taskwarrior.org) | `task` — command-line task manager | apt | 1.0.1 |
+| [tree-sitter](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/tree-sitter) | `tree-sitter` — incremental parsing toolkit for building syntax trees | gh release | 1.0.1 |
+| [turso.tech](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/turso.tech) | `tursodb` — in-process SQL database compatible with SQLite | gh release | 1.0.1 |
+| [valgrind.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/valgrind.org) | `valgrind` — memory error detector and profiler for C/C++ | apt | 1.0.1 |
+| [vcpkg.io](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/vcpkg.io) | `vcpkg` — C/C++ package manager by Microsoft | git | 1.0.1 |
+| [webinstall.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/webinstall.dev) | `webi` — install packages without sudo | curl | 1.0.2 |
+| [yakitrak/notesmd-cli](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/yakitrak-notesmd-cli) | `notesmd-cli` — manage Obsidian vaults from the terminal | gh release | 1.0.1 |
+| [yoctoproject.org](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/yoctoproject.org) | `bitbake` — build tool for the Yocto Project and OpenEmbedded | curl | 1.0.1 |
+| [yoctoproject.org/bitbake](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/yoctoproject.org-bitbake) | `bitbake` — build tool for the Yocto Project | curl | 1.0.1 |
+| [yq](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/yq) | `yq` — command-line YAML/JSON/XML processor | gh release | 1.0.2 |
+| [zellij.dev](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/zellij.dev) | `zellij` — terminal workspace with multiplexer and layouts | gh release | 1.0.3 |
+| [zyedidia/eget](https://github.com/devcontainer-community/devcontainer-features/tree/main/src/zyedidia-eget) | `eget` — easily install prebuilt binaries from GitHub releases | gh release | 1.0.3 |
diff --git a/src/add-script/devcontainer-feature.json b/src/add-script/devcontainer-feature.json
index 70a11c8..333980b 100644
--- a/src/add-script/devcontainer-feature.json
+++ b/src/add-script/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "add-script",
     "id": "add-script",
-    "version": "1.1.0",
+    "version": "1.1.1",
     "description": "Add a script from a URL or inline text to /usr/local/bin during devcontainer build",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/add-script",
     "options": {
@@ -20,5 +20,8 @@
             "default": "",
             "description": "Inline script text to add."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/alexpasmantier-television/devcontainer-feature.json b/src/alexpasmantier-television/devcontainer-feature.json
index 12c1167..b7be779 100644
--- a/src/alexpasmantier-television/devcontainer-feature.json
+++ b/src/alexpasmantier-television/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "alexpasmantier/television",
     "id": "alexpasmantier-television",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"tv\" (television) binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/alexpasmantier-television",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"tv\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/ankitpokhrel-jira-cli/devcontainer-feature.json b/src/ankitpokhrel-jira-cli/devcontainer-feature.json
index 567dd9f..26ddf76 100644
--- a/src/ankitpokhrel-jira-cli/devcontainer-feature.json
+++ b/src/ankitpokhrel-jira-cli/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "ankitpokhrel/jira-cli",
     "id": "ankitpokhrel-jira-cli",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"jira\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ankitpokhrel-jira-cli",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"jira\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/apt-build-essential/devcontainer-feature.json b/src/apt-build-essential/devcontainer-feature.json
index 527df78..f0f4ccf 100644
--- a/src/apt-build-essential/devcontainer-feature.json
+++ b/src/apt-build-essential/devcontainer-feature.json
@@ -1,7 +1,10 @@
 {
     "name": "apt-build-essential",
     "id": "apt-build-essential",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"build-essential\" apt package (gcc, g++, make)",
-    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/apt-build-essential"
+    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/apt-build-essential",
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/asdf-vm.com/devcontainer-feature.json b/src/asdf-vm.com/devcontainer-feature.json
index 444d72c..33bb866 100644
--- a/src/asdf-vm.com/devcontainer-feature.json
+++ b/src/asdf-vm.com/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "asdf-vm.com",
     "id": "asdf-vm.com",
-    "version": "1.0.2",
+    "version": "1.0.3",
     "description": "Install \"asdf\" binary to the HOME folder of the REMOTE user",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/asdf-vm.com",
     "options": {
@@ -15,5 +15,8 @@
             ],
             "description": "Version of \"asdf\" to install."
         }
-    }
-}
\ No newline at end of file
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
+}
diff --git a/src/astral.sh-uv/devcontainer-feature.json b/src/astral.sh-uv/devcontainer-feature.json
index 083e13b..aff8508 100644
--- a/src/astral.sh-uv/devcontainer-feature.json
+++ b/src/astral.sh-uv/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "astral.sh/uv",
     "id": "astral.sh-uv",
-    "version": "1.0.4",
+    "version": "1.0.5",
     "description": "Install \"uv\" and \"uvx\" binaries",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/astral.sh-uv",
     "options": {
@@ -18,5 +18,8 @@
             "description": "Enable or disable uv and uvx autocompletion.",
             "type": "boolean"
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/atuin.sh/devcontainer-feature.json b/src/atuin.sh/devcontainer-feature.json
index 05d3ba8..2fd77e8 100644
--- a/src/atuin.sh/devcontainer-feature.json
+++ b/src/atuin.sh/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "atuin.sh",
     "id": "atuin.sh",
-    "version": "1.0.3",
+    "version": "1.0.4",
     "description": "Install \"atuin\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/atuin.sh",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"atuin\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/avivsinai-bitbucket-cli/devcontainer-feature.json b/src/avivsinai-bitbucket-cli/devcontainer-feature.json
index 1cedbb5..f80254e 100644
--- a/src/avivsinai-bitbucket-cli/devcontainer-feature.json
+++ b/src/avivsinai-bitbucket-cli/devcontainer-feature.json
@@ -1,8 +1,8 @@
 {
     "name": "avivsinai/bitbucket-cli",
     "id": "avivsinai-bitbucket-cli",
-    "version": "1.0.0",
-    "description": "bkt — CLI for Bitbucket",
+    "version": "1.0.1",
+    "description": "bkt \u2014 CLI for Bitbucket",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/avivsinai-bitbucket-cli",
     "options": {
         "version": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"bkt\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/aws-cli/devcontainer-feature.json b/src/aws-cli/devcontainer-feature.json
index 18e296c..ad2bafa 100644
--- a/src/aws-cli/devcontainer-feature.json
+++ b/src/aws-cli/devcontainer-feature.json
@@ -1,6 +1,6 @@
 {
     "id": "aws-cli",
-    "version": "1.1.2",
+    "version": "1.1.3",
     "name": "AWS CLI",
     "documentationURL": "https://github.com/devcontainers/features/tree/main/src/aws-cli",
     "description": "Installs the AWS CLI along with needed dependencies. Useful for base Dockerfiles that often are missing required install dependencies like gpg.",
@@ -15,6 +15,7 @@
         }
     },
     "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest",
         "ghcr.io/devcontainers/features/common-utils"
     ]
-}
\ No newline at end of file
+}
diff --git a/src/basecamp-fizzy-cli/devcontainer-feature.json b/src/basecamp-fizzy-cli/devcontainer-feature.json
index 2be5edd..13b4104 100644
--- a/src/basecamp-fizzy-cli/devcontainer-feature.json
+++ b/src/basecamp-fizzy-cli/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "basecamp/fizzy-cli",
     "id": "basecamp-fizzy-cli",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"fizzy\" CLI binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/basecamp-fizzy-cli",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"fizzy\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/bat/devcontainer-feature.json b/src/bat/devcontainer-feature.json
index f195dc8..dff4c45 100644
--- a/src/bat/devcontainer-feature.json
+++ b/src/bat/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "bat",
     "id": "bat",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"bat\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/bat",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"bat\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/biomejs.dev/devcontainer-feature.json b/src/biomejs.dev/devcontainer-feature.json
index 306cc66..771be63 100644
--- a/src/biomejs.dev/devcontainer-feature.json
+++ b/src/biomejs.dev/devcontainer-feature.json
@@ -1,15 +1,20 @@
 {
     "name": "biomejs.dev",
     "id": "biomejs.dev",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"biome\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/biomejs.dev",
     "options": {
         "version": {
             "type": "string",
             "default": "latest",
-            "proposals": ["latest"],
+            "proposals": [
+                "latest"
+            ],
             "description": "Version of \"biome\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/btop/devcontainer-feature.json b/src/btop/devcontainer-feature.json
index 47657c7..9bda551 100644
--- a/src/btop/devcontainer-feature.json
+++ b/src/btop/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "btop",
     "id": "btop",
-    "version": "1.0.3",
+    "version": "1.0.4",
     "description": "Install \"btop\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/btop",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"btop\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/bun.sh/devcontainer-feature.json b/src/bun.sh/devcontainer-feature.json
index d09e2b8..3859f35 100644
--- a/src/bun.sh/devcontainer-feature.json
+++ b/src/bun.sh/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "bun.sh",
     "id": "bun.sh",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"bun\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/bun.sh",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Currently unused."
         }
-    }
-}
\ No newline at end of file
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
+}
diff --git a/src/ccache.dev/devcontainer-feature.json b/src/ccache.dev/devcontainer-feature.json
index 8021218..1a6fe2d 100644
--- a/src/ccache.dev/devcontainer-feature.json
+++ b/src/ccache.dev/devcontainer-feature.json
@@ -1,7 +1,10 @@
 {
     "name": "ccache.dev",
     "id": "ccache.dev",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"ccache\" binary",
-    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ccache.dev"
+    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ccache.dev",
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/charmbracelet-gum/devcontainer-feature.json b/src/charmbracelet-gum/devcontainer-feature.json
index 3872f44..2a410fb 100644
--- a/src/charmbracelet-gum/devcontainer-feature.json
+++ b/src/charmbracelet-gum/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "charmbracelet/gum",
     "id": "charmbracelet-gum",
-    "version": "1.0.4",
+    "version": "1.0.5",
     "description": "Install \"gum\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/charmbracelet-gum",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"gum\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/chezmoi.io/devcontainer-feature.json b/src/chezmoi.io/devcontainer-feature.json
index 6ae381d..3313611 100644
--- a/src/chezmoi.io/devcontainer-feature.json
+++ b/src/chezmoi.io/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "chezmoi.io",
     "id": "chezmoi.io",
-    "version": "1.0.2",
+    "version": "1.0.3",
     "description": "Install \"chezmoi\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/chezmoi.io",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"chezmoi\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/clang-format/devcontainer-feature.json b/src/clang-format/devcontainer-feature.json
index 3a089e0..cc8e591 100644
--- a/src/clang-format/devcontainer-feature.json
+++ b/src/clang-format/devcontainer-feature.json
@@ -1,7 +1,10 @@
 {
     "name": "clang-format",
     "id": "clang-format",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"clang-format\" binary",
-    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/clang-format"
+    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/clang-format",
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/clang-tidy/devcontainer-feature.json b/src/clang-tidy/devcontainer-feature.json
index 9bda171..0d017c1 100644
--- a/src/clang-tidy/devcontainer-feature.json
+++ b/src/clang-tidy/devcontainer-feature.json
@@ -1,7 +1,10 @@
 {
     "name": "clang-tidy",
     "id": "clang-tidy",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"clang-tidy\" binary",
-    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/clang-tidy"
+    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/clang-tidy",
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/cloudflare.com-warp-cli/devcontainer-feature.json b/src/cloudflare.com-warp-cli/devcontainer-feature.json
index bbb9182..ca1daf3 100644
--- a/src/cloudflare.com-warp-cli/devcontainer-feature.json
+++ b/src/cloudflare.com-warp-cli/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "cloudflare.com/warp-cli",
     "id": "cloudflare.com-warp-cli",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"warp-cli\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/cloudflare.com-warp-cli",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Currently unused."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/cmake.org/devcontainer-feature.json b/src/cmake.org/devcontainer-feature.json
index 2b1775b..066c4b1 100644
--- a/src/cmake.org/devcontainer-feature.json
+++ b/src/cmake.org/devcontainer-feature.json
@@ -1,7 +1,10 @@
 {
     "name": "cmake.org",
     "id": "cmake.org",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"cmake\" binary",
-    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/cmake.org"
+    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/cmake.org",
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/collection-c-cpp/devcontainer-feature.json b/src/collection-c-cpp/devcontainer-feature.json
index 217a8d5..55f8381 100644
--- a/src/collection-c-cpp/devcontainer-feature.json
+++ b/src/collection-c-cpp/devcontainer-feature.json
@@ -1,8 +1,8 @@
 {
     "name": "collection-c-cpp",
     "id": "collection-c-cpp",
-    "version": "1.0.1",
-    "description": "C/C++ dev collection — cmake, ninja, gdb, valgrind, ccache, cppcheck, clang-format, clang-tidy, distcc, vcpkg, build-essential",
+    "version": "1.0.2",
+    "description": "C/C++ dev collection \u2014 cmake, ninja, gdb, valgrind, ccache, cppcheck, clang-format, clang-tidy, distcc, vcpkg, build-essential",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/collection-c-cpp",
     "dependsOn": {
         "ghcr.io/devcontainer-community/devcontainer-features/cmake.org:latest": {},
@@ -16,5 +16,8 @@
         "ghcr.io/devcontainer-community/devcontainer-features/distcc.org:latest": {},
         "ghcr.io/devcontainer-community/devcontainer-features/vcpkg.io:latest": {},
         "ghcr.io/devcontainer-community/devcontainer-features/apt-build-essential:latest": {}
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/critique.work/devcontainer-feature.json b/src/critique.work/devcontainer-feature.json
index 341caba..70ecb6d 100644
--- a/src/critique.work/devcontainer-feature.json
+++ b/src/critique.work/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "critique.work",
     "id": "critique.work",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"critique\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/critique.work",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"critique\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/danmar-cppcheck/devcontainer-feature.json b/src/danmar-cppcheck/devcontainer-feature.json
index e226906..2b543b7 100644
--- a/src/danmar-cppcheck/devcontainer-feature.json
+++ b/src/danmar-cppcheck/devcontainer-feature.json
@@ -1,7 +1,10 @@
 {
     "name": "danmar/cppcheck",
     "id": "danmar-cppcheck",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"cppcheck\" binary",
-    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/danmar-cppcheck"
+    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/danmar-cppcheck",
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/delta/devcontainer-feature.json b/src/delta/devcontainer-feature.json
index 58dfcdf..3eb1b96 100644
--- a/src/delta/devcontainer-feature.json
+++ b/src/delta/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "delta",
     "id": "delta",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"delta\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/delta",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"delta\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/deno.com/devcontainer-feature.json b/src/deno.com/devcontainer-feature.json
index f189b69..c6eaa2f 100644
--- a/src/deno.com/devcontainer-feature.json
+++ b/src/deno.com/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "deno.com",
     "id": "deno.com",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"deno\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/deno.com",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"deno\" to install."
         }
-    }
-}
\ No newline at end of file
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
+}
diff --git a/src/devenv.sh/devcontainer-feature.json b/src/devenv.sh/devcontainer-feature.json
index 01809e6..aae8621 100644
--- a/src/devenv.sh/devcontainer-feature.json
+++ b/src/devenv.sh/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "devenv.sh",
     "id": "devenv.sh",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install devenv via Nix",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/devenv.sh",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of devenv to install (e.g. \"2.0.4\"), or \"latest\"."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/diffity.com/devcontainer-feature.json b/src/diffity.com/devcontainer-feature.json
index ce2de0b..14f3497 100644
--- a/src/diffity.com/devcontainer-feature.json
+++ b/src/diffity.com/devcontainer-feature.json
@@ -1,15 +1,20 @@
 {
     "name": "diffity.com",
     "id": "diffity.com",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"diffity\" CLI",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/diffity.com",
     "options": {
         "version": {
             "type": "string",
             "default": "latest",
-            "proposals": ["latest"],
+            "proposals": [
+                "latest"
+            ],
             "description": "Version of \"diffity\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/direnv.net/devcontainer-feature.json b/src/direnv.net/devcontainer-feature.json
index d716c10..6723a3c 100644
--- a/src/direnv.net/devcontainer-feature.json
+++ b/src/direnv.net/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "direnv.net",
     "id": "direnv.net",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"direnv\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/direnv.net",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Currently unused. direnv is installed via the system package manager."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/distcc.org/devcontainer-feature.json b/src/distcc.org/devcontainer-feature.json
index f3b9cd7..0a3ab09 100644
--- a/src/distcc.org/devcontainer-feature.json
+++ b/src/distcc.org/devcontainer-feature.json
@@ -1,7 +1,10 @@
 {
     "name": "distcc.org",
     "id": "distcc.org",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"distcc\" binary",
-    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/distcc.org"
+    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/distcc.org",
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/dolthub.com-doltgres/devcontainer-feature.json b/src/dolthub.com-doltgres/devcontainer-feature.json
index fca377c..87a635d 100644
--- a/src/dolthub.com-doltgres/devcontainer-feature.json
+++ b/src/dolthub.com-doltgres/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "dolthub.com/doltgres",
     "id": "dolthub.com-doltgres",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"doltgres\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/dolthub.com-doltgres",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"doltgres\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/dolthub.com/devcontainer-feature.json b/src/dolthub.com/devcontainer-feature.json
index b308c3d..3ddc5bb 100644
--- a/src/dolthub.com/devcontainer-feature.json
+++ b/src/dolthub.com/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "dolthub.com",
     "id": "dolthub.com",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"dolt\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/dolthub.com",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"dolt\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/dotenv.org/devcontainer-feature.json b/src/dotenv.org/devcontainer-feature.json
index 55dbceb..ef0496b 100644
--- a/src/dotenv.org/devcontainer-feature.json
+++ b/src/dotenv.org/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "dotenv.org",
     "id": "dotenv.org",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"dotenvx\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/dotenv.org",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"dotenvx\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/dozzle.dev/devcontainer-feature.json b/src/dozzle.dev/devcontainer-feature.json
index c642f18..451ae80 100644
--- a/src/dozzle.dev/devcontainer-feature.json
+++ b/src/dozzle.dev/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "dozzle.dev",
     "id": "dozzle.dev",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"dozzle\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/dozzle.dev",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"dozzle\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/fathyb-carbonyl/devcontainer-feature.json b/src/fathyb-carbonyl/devcontainer-feature.json
index d5c96bb..d49cf92 100644
--- a/src/fathyb-carbonyl/devcontainer-feature.json
+++ b/src/fathyb-carbonyl/devcontainer-feature.json
@@ -1,15 +1,20 @@
 {
-  "name": "fathyb/carbonyl",
-  "id": "fathyb-carbonyl",
-  "version": "1.0.0",
-  "description": "Install \"carbonyl\" binary",
-  "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/fathyb-carbonyl",
-  "options": {
-    "version": {
-      "type": "string",
-      "default": "latest",
-      "proposals": ["latest"],
-      "description": "Version of \"carbonyl\" to install."
-    }
-  }
+    "name": "fathyb/carbonyl",
+    "id": "fathyb-carbonyl",
+    "version": "1.0.1",
+    "description": "Install \"carbonyl\" binary",
+    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/fathyb-carbonyl",
+    "options": {
+        "version": {
+            "type": "string",
+            "default": "latest",
+            "proposals": [
+                "latest"
+            ],
+            "description": "Version of \"carbonyl\" to install."
+        }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/fd/devcontainer-feature.json b/src/fd/devcontainer-feature.json
index e02acfe..89ada45 100644
--- a/src/fd/devcontainer-feature.json
+++ b/src/fd/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "fd",
     "id": "fd",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"fd\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/fd",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"fd\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/feature-installer/devcontainer-feature.json b/src/feature-installer/devcontainer-feature.json
index 7023592..0e4e861 100644
--- a/src/feature-installer/devcontainer-feature.json
+++ b/src/feature-installer/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "feature-installer",
     "id": "feature-installer",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"feature-installer\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/feature-installer",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"feature-installer\" to install."
         }
-    }
-}
\ No newline at end of file
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
+}
diff --git a/src/fzf/devcontainer-feature.json b/src/fzf/devcontainer-feature.json
index 9b482f9..b90f4c0 100644
--- a/src/fzf/devcontainer-feature.json
+++ b/src/fzf/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "fzf",
     "id": "fzf",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"fzf\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/fzf",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"fzf\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/getdnote.com/devcontainer-feature.json b/src/getdnote.com/devcontainer-feature.json
index f5f5290..a7016ff 100644
--- a/src/getdnote.com/devcontainer-feature.json
+++ b/src/getdnote.com/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "getdnote.com",
     "id": "getdnote.com",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"dnote\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/getdnote.com",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"dnote\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/gitagent.sh/devcontainer-feature.json b/src/gitagent.sh/devcontainer-feature.json
index 9566aea..48bd81c 100644
--- a/src/gitagent.sh/devcontainer-feature.json
+++ b/src/gitagent.sh/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "gitagent.sh",
     "id": "gitagent.sh",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"gitagent\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/gitagent.sh",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"gitagent\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/github.com-cli/devcontainer-feature.json b/src/github.com-cli/devcontainer-feature.json
index 58115a3..df16494 100644
--- a/src/github.com-cli/devcontainer-feature.json
+++ b/src/github.com-cli/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "github.com/cli",
     "id": "github.com-cli",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"gh\" (GitHub CLI) binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/github.com-cli",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Currently unused. gh is installed via the official GitHub CLI apt repository."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/helix-editor.com/devcontainer-feature.json b/src/helix-editor.com/devcontainer-feature.json
index 7dd64a5..d1ed84e 100644
--- a/src/helix-editor.com/devcontainer-feature.json
+++ b/src/helix-editor.com/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "helix-editor.com",
     "id": "helix-editor.com",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"hx\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/helix-editor.com",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"hx\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/hermes-agent.nousresearch.com/devcontainer-feature.json b/src/hermes-agent.nousresearch.com/devcontainer-feature.json
index fb814c1..bf3468a 100644
--- a/src/hermes-agent.nousresearch.com/devcontainer-feature.json
+++ b/src/hermes-agent.nousresearch.com/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "hermes-agent.nousresearch.com",
     "id": "hermes-agent.nousresearch.com",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"hermes\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/hermes-agent.nousresearch.com",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Currently unused."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/icholy-ttygif/devcontainer-feature.json b/src/icholy-ttygif/devcontainer-feature.json
index 34c4d99..73ec407 100644
--- a/src/icholy-ttygif/devcontainer-feature.json
+++ b/src/icholy-ttygif/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "icholy/ttygif",
     "id": "icholy-ttygif",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"ttygif\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/icholy-ttygif",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"ttygif\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/jj-vcs.dev/devcontainer-feature.json b/src/jj-vcs.dev/devcontainer-feature.json
index aa30ddc..132853e 100644
--- a/src/jj-vcs.dev/devcontainer-feature.json
+++ b/src/jj-vcs.dev/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "jj-vcs.dev",
     "id": "jj-vcs.dev",
-    "version": "1.0.2",
+    "version": "1.0.3",
     "description": "Install \"jj\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/jj-vcs.dev",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"jj\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/jnsahaj-lumen/devcontainer-feature.json b/src/jnsahaj-lumen/devcontainer-feature.json
index 822ec3d..4b86986 100644
--- a/src/jnsahaj-lumen/devcontainer-feature.json
+++ b/src/jnsahaj-lumen/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "jnsahaj/lumen",
     "id": "jnsahaj-lumen",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"lumen\" binary - AI-powered git diff viewer and commit message generator",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/jnsahaj-lumen",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"lumen\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/joelhooks-agent-secrets/devcontainer-feature.json b/src/joelhooks-agent-secrets/devcontainer-feature.json
index 857e693..367d0a6 100644
--- a/src/joelhooks-agent-secrets/devcontainer-feature.json
+++ b/src/joelhooks-agent-secrets/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "joelhooks/agent-secrets",
     "id": "joelhooks-agent-secrets",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"secrets\" (agent-secrets) binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/joelhooks-agent-secrets",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"secrets\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/jonas-tig/devcontainer-feature.json b/src/jonas-tig/devcontainer-feature.json
index a69b379..deb2673 100644
--- a/src/jonas-tig/devcontainer-feature.json
+++ b/src/jonas-tig/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "jonas/tig",
     "id": "jonas-tig",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"tig\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/jonas-tig",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Currently unused. tig is installed via the system package manager."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/jq/devcontainer-feature.json b/src/jq/devcontainer-feature.json
index e5aab33..b48dd33 100644
--- a/src/jq/devcontainer-feature.json
+++ b/src/jq/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "jq",
     "id": "jq",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"jq\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/jq",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Currently unused. jq is installed via the system package manager."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/k9scli.io/devcontainer-feature.json b/src/k9scli.io/devcontainer-feature.json
index 082ab93..59d1f1b 100644
--- a/src/k9scli.io/devcontainer-feature.json
+++ b/src/k9scli.io/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "k9scli.io",
     "id": "k9scli.io",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"k9s\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/k9scli.io",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"k9s\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/keybase.io/devcontainer-feature.json b/src/keybase.io/devcontainer-feature.json
index 8d4fa4f..2e35423 100644
--- a/src/keybase.io/devcontainer-feature.json
+++ b/src/keybase.io/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "keybase.io",
     "id": "keybase.io",
-    "version": "1.2.0",
+    "version": "1.2.1",
     "description": "Install \"keybase\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/keybase.io",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Currently unused."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/lazygit/devcontainer-feature.json b/src/lazygit/devcontainer-feature.json
index 297574d..5cc85c2 100644
--- a/src/lazygit/devcontainer-feature.json
+++ b/src/lazygit/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "lazygit",
     "id": "lazygit",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"lazygit\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/lazygit",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"lazygit\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/lnav.org/devcontainer-feature.json b/src/lnav.org/devcontainer-feature.json
index 1ef7ddb..575af68 100644
--- a/src/lnav.org/devcontainer-feature.json
+++ b/src/lnav.org/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "lnav.org",
     "id": "lnav.org",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"lnav\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/lnav.org",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"lnav\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/memvid.com/devcontainer-feature.json b/src/memvid.com/devcontainer-feature.json
index d18b390..2cdcdbb 100644
--- a/src/memvid.com/devcontainer-feature.json
+++ b/src/memvid.com/devcontainer-feature.json
@@ -1,15 +1,20 @@
 {
     "name": "memvid.com",
     "id": "memvid.com",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"memvid\" CLI",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/memvid.com",
     "options": {
         "version": {
             "type": "string",
             "default": "latest",
-            "proposals": ["latest"],
+            "proposals": [
+                "latest"
+            ],
             "description": "Version of \"memvid\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/mosh.org/devcontainer-feature.json b/src/mosh.org/devcontainer-feature.json
index 1715aed..6cd36fe 100644
--- a/src/mosh.org/devcontainer-feature.json
+++ b/src/mosh.org/devcontainer-feature.json
@@ -1,7 +1,10 @@
 {
     "name": "mosh.org",
     "id": "mosh.org",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"mosh\" (mobile shell) binary",
-    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/mosh.org"
+    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/mosh.org",
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/neovim.io/devcontainer-feature.json b/src/neovim.io/devcontainer-feature.json
index 51bd5ff..699b204 100644
--- a/src/neovim.io/devcontainer-feature.json
+++ b/src/neovim.io/devcontainer-feature.json
@@ -1,15 +1,20 @@
 {
     "name": "neovim.io",
     "id": "neovim.io",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"nvim\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/neovim.io",
     "options": {
         "version": {
             "type": "string",
             "default": "latest",
-            "proposals": ["latest"],
+            "proposals": [
+                "latest"
+            ],
             "description": "Version of \"nvim\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/ninja-build.org/devcontainer-feature.json b/src/ninja-build.org/devcontainer-feature.json
index ad913aa..59288a4 100644
--- a/src/ninja-build.org/devcontainer-feature.json
+++ b/src/ninja-build.org/devcontainer-feature.json
@@ -1,7 +1,10 @@
 {
     "name": "ninja-build.org",
     "id": "ninja-build.org",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"ninja\" binary",
-    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ninja-build.org"
+    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ninja-build.org",
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/nixos.org/devcontainer-feature.json b/src/nixos.org/devcontainer-feature.json
index 55dee70..cc69a2c 100644
--- a/src/nixos.org/devcontainer-feature.json
+++ b/src/nixos.org/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "nixos.org",
     "id": "nixos.org",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"nix\" binary.",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/nixos.org",
     "options": {
@@ -18,5 +18,8 @@
             "default": "--init none",
             "description": "Extra options to pass to the installer."
         }
-    }
-}
\ No newline at end of file
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
+}
diff --git a/src/nvidia.com-cuda/devcontainer-feature.json b/src/nvidia.com-cuda/devcontainer-feature.json
index 89283e0..f676fa6 100644
--- a/src/nvidia.com-cuda/devcontainer-feature.json
+++ b/src/nvidia.com-cuda/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "nvidia.com/cuda",
     "id": "nvidia.com-cuda",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install NVIDIA CUDA Toolkit",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/nvidia.com-cuda",
     "options": {
@@ -21,5 +21,8 @@
             ],
             "description": "Version of CUDA Toolkit to install (e.g. \"latest\", \"12.6\")."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/onecli.sh-cli/devcontainer-feature.json b/src/onecli.sh-cli/devcontainer-feature.json
index 32d4ec0..e0ca427 100644
--- a/src/onecli.sh-cli/devcontainer-feature.json
+++ b/src/onecli.sh-cli/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "onecli.sh/cli",
     "id": "onecli.sh-cli",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"onecli\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/onecli.sh-cli",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"onecli\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/opencode.ai/devcontainer-feature.json b/src/opencode.ai/devcontainer-feature.json
index b497ef5..3bd547d 100644
--- a/src/opencode.ai/devcontainer-feature.json
+++ b/src/opencode.ai/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "opencode.ai",
     "id": "opencode.ai",
-    "version": "1.0.4",
+    "version": "1.0.5",
     "description": "Install \"opencode\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/opencode.ai",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"opencode.ai\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/pi.dev/devcontainer-feature.json b/src/pi.dev/devcontainer-feature.json
index 93a575e..4aca6f7 100644
--- a/src/pi.dev/devcontainer-feature.json
+++ b/src/pi.dev/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "pi.dev",
     "id": "pi.dev",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"pi\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/pi.dev",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"pi\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/pkgx.sh/devcontainer-feature.json b/src/pkgx.sh/devcontainer-feature.json
index 64cf403..bd6e7e0 100644
--- a/src/pkgx.sh/devcontainer-feature.json
+++ b/src/pkgx.sh/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "pkgx.sh",
     "id": "pkgx.sh",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"pkgx\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/pkgx.sh",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"pkgx\" to install."
         }
-    }
-}
\ No newline at end of file
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
+}
diff --git a/src/pulumi.com/devcontainer-feature.json b/src/pulumi.com/devcontainer-feature.json
index 0c542b4..5d8055a 100644
--- a/src/pulumi.com/devcontainer-feature.json
+++ b/src/pulumi.com/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "pulumi.com",
     "id": "pulumi.com",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"pulumi\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/pulumi.com",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"pulumi\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/rclone.org/devcontainer-feature.json b/src/rclone.org/devcontainer-feature.json
index c40ca7f..25057af 100644
--- a/src/rclone.org/devcontainer-feature.json
+++ b/src/rclone.org/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "rclone",
     "id": "rclone.org",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"rclone\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/rclone.org",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"rclone\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/restic.net/devcontainer-feature.json b/src/restic.net/devcontainer-feature.json
index f3d356d..e51a644 100644
--- a/src/restic.net/devcontainer-feature.json
+++ b/src/restic.net/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "restic.net",
     "id": "restic.net",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"restic\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/restic.net",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"restic\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/ripgrep/devcontainer-feature.json b/src/ripgrep/devcontainer-feature.json
index a86b7b7..2ec6126 100644
--- a/src/ripgrep/devcontainer-feature.json
+++ b/src/ripgrep/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "ripgrep",
     "id": "ripgrep",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"rg\" (ripgrep) binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/ripgrep",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"ripgrep\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/run-script/devcontainer-feature.json b/src/run-script/devcontainer-feature.json
index 23cc909..e7dee66 100644
--- a/src/run-script/devcontainer-feature.json
+++ b/src/run-script/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "run-script",
     "id": "run-script",
-    "version": "1.1.0",
+    "version": "1.1.1",
     "description": "Run a script from a URL or inline text during devcontainer build",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/run-script",
     "options": {
@@ -15,5 +15,8 @@
             "default": "",
             "description": "Inline script text to execute."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/schpet-linear-cli/devcontainer-feature.json b/src/schpet-linear-cli/devcontainer-feature.json
index c1be6fb..87a6849 100644
--- a/src/schpet-linear-cli/devcontainer-feature.json
+++ b/src/schpet-linear-cli/devcontainer-feature.json
@@ -1,15 +1,20 @@
 {
     "name": "schpet/linear-cli",
     "id": "schpet-linear-cli",
-    "version": "1.0.2",
+    "version": "1.0.3",
     "description": "Install \"linear\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/schpet-linear-cli",
     "options": {
         "version": {
             "type": "string",
             "default": "latest",
-            "proposals": ["latest"],
+            "proposals": [
+                "latest"
+            ],
             "description": "Version of \"linear\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/smallstep.com/devcontainer-feature.json b/src/smallstep.com/devcontainer-feature.json
index f948fc5..57cf453 100644
--- a/src/smallstep.com/devcontainer-feature.json
+++ b/src/smallstep.com/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "smallstep.com",
     "id": "smallstep.com",
-    "version": "1.0.2",
+    "version": "1.0.3",
     "description": "Install \"step\" cli binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/smallstep.com",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"step cli\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/socket.dev-sfw-free/devcontainer-feature.json b/src/socket.dev-sfw-free/devcontainer-feature.json
index 3f58343..c0e159a 100644
--- a/src/socket.dev-sfw-free/devcontainer-feature.json
+++ b/src/socket.dev-sfw-free/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "socket.dev/sfw-free",
     "id": "socket.dev-sfw-free",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"sfw\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/socket.dev-sfw-free",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"sfw\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/sourceware.org-gdb/devcontainer-feature.json b/src/sourceware.org-gdb/devcontainer-feature.json
index fdb1f29..f49cb0d 100644
--- a/src/sourceware.org-gdb/devcontainer-feature.json
+++ b/src/sourceware.org-gdb/devcontainer-feature.json
@@ -1,7 +1,10 @@
 {
     "name": "sourceware.org/gdb",
     "id": "sourceware.org-gdb",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"gdb\" binary",
-    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/sourceware.org-gdb"
+    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/sourceware.org-gdb",
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/sshd/devcontainer-feature.json b/src/sshd/devcontainer-feature.json
index 105b2fe..e59bedf 100644
--- a/src/sshd/devcontainer-feature.json
+++ b/src/sshd/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "sshd",
     "id": "sshd",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install OpenSSH server (sshd) and ensure it starts when the container starts",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/sshd",
     "options": {
@@ -15,5 +15,8 @@
             "description": "Port for sshd to listen on."
         }
     },
-    "entrypoint": "/usr/local/share/sshd/entrypoint.sh"
+    "entrypoint": "/usr/local/share/sshd/entrypoint.sh",
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/starship.rs/devcontainer-feature.json b/src/starship.rs/devcontainer-feature.json
index bd1e487..aace4a1 100644
--- a/src/starship.rs/devcontainer-feature.json
+++ b/src/starship.rs/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "starship.rs",
     "id": "starship.rs",
-    "version": "1.0.2",
+    "version": "1.0.3",
     "description": "Install \"starship\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/starship.rs",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"starship\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/steveyegge-beads/devcontainer-feature.json b/src/steveyegge-beads/devcontainer-feature.json
index e3d7916..e6f4bdd 100644
--- a/src/steveyegge-beads/devcontainer-feature.json
+++ b/src/steveyegge-beads/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "steveyegge/beads",
     "id": "steveyegge-beads",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"bd\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/steveyegge-beads",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"beads\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/swc.rs/devcontainer-feature.json b/src/swc.rs/devcontainer-feature.json
index 1813ef1..ee89c7d 100644
--- a/src/swc.rs/devcontainer-feature.json
+++ b/src/swc.rs/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "swc.rs",
     "id": "swc.rs",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"swc\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/swc.rs",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"swc\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/sxyazi-yazi/devcontainer-feature.json b/src/sxyazi-yazi/devcontainer-feature.json
index d2b9c82..41964dd 100644
--- a/src/sxyazi-yazi/devcontainer-feature.json
+++ b/src/sxyazi-yazi/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "sxyazi/yazi",
     "id": "sxyazi-yazi",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"yazi\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/sxyazi-yazi",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"yazi\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/tailscale.com/devcontainer-feature.json b/src/tailscale.com/devcontainer-feature.json
index ced2220..003ea87 100644
--- a/src/tailscale.com/devcontainer-feature.json
+++ b/src/tailscale.com/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "tailscale.com",
     "id": "tailscale.com",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"tailscale\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/tailscale.com",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Currently unused."
         }
-    }
-}
\ No newline at end of file
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
+}
diff --git a/src/taskwarrior.org/devcontainer-feature.json b/src/taskwarrior.org/devcontainer-feature.json
index 2b31021..095ee03 100644
--- a/src/taskwarrior.org/devcontainer-feature.json
+++ b/src/taskwarrior.org/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "taskwarrior.org",
     "id": "taskwarrior.org",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"task\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/taskwarrior.org",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Currently unused. taskwarrior is installed via the system package manager."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/tree-sitter/devcontainer-feature.json b/src/tree-sitter/devcontainer-feature.json
index 79c1b56..11500e2 100644
--- a/src/tree-sitter/devcontainer-feature.json
+++ b/src/tree-sitter/devcontainer-feature.json
@@ -1,15 +1,20 @@
 {
     "name": "tree-sitter",
     "id": "tree-sitter",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"tree-sitter\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/tree-sitter",
     "options": {
         "version": {
             "type": "string",
             "default": "latest",
-            "proposals": ["latest"],
+            "proposals": [
+                "latest"
+            ],
             "description": "Version of \"tree-sitter\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/turso.tech/devcontainer-feature.json b/src/turso.tech/devcontainer-feature.json
index f5ce439..ca469eb 100644
--- a/src/turso.tech/devcontainer-feature.json
+++ b/src/turso.tech/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "turso.tech",
     "id": "turso.tech",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"tursodb\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/turso.tech",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"tursodb\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/valgrind.org/devcontainer-feature.json b/src/valgrind.org/devcontainer-feature.json
index 255c496..f02c8c7 100644
--- a/src/valgrind.org/devcontainer-feature.json
+++ b/src/valgrind.org/devcontainer-feature.json
@@ -1,7 +1,10 @@
 {
     "name": "valgrind.org",
     "id": "valgrind.org",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"valgrind\" binary",
-    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/valgrind.org"
+    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/valgrind.org",
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/vcpkg.io/devcontainer-feature.json b/src/vcpkg.io/devcontainer-feature.json
index 62018bd..6a6fdc3 100644
--- a/src/vcpkg.io/devcontainer-feature.json
+++ b/src/vcpkg.io/devcontainer-feature.json
@@ -1,7 +1,10 @@
 {
     "name": "vcpkg.io",
     "id": "vcpkg.io",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install vcpkg C/C++ package manager",
-    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/vcpkg.io"
+    "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/vcpkg.io",
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/webinstall.dev/devcontainer-feature.json b/src/webinstall.dev/devcontainer-feature.json
index cf26ab4..cce2b7f 100644
--- a/src/webinstall.dev/devcontainer-feature.json
+++ b/src/webinstall.dev/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "webinstall.dev",
     "id": "webinstall.dev",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"webi\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/webinstall.dev",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"webi\" to install."
         }
-    }
-}
\ No newline at end of file
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
+}
diff --git a/src/yakitrak-notesmd-cli/devcontainer-feature.json b/src/yakitrak-notesmd-cli/devcontainer-feature.json
index b943c99..ddf834a 100644
--- a/src/yakitrak-notesmd-cli/devcontainer-feature.json
+++ b/src/yakitrak-notesmd-cli/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "yakitrak/notesmd-cli",
     "id": "yakitrak-notesmd-cli",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"notesmd-cli\" binary - Interact with Obsidian vaults from the terminal",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/yakitrak-notesmd-cli",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"notesmd-cli\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/yoctoproject.org-bitbake/devcontainer-feature.json b/src/yoctoproject.org-bitbake/devcontainer-feature.json
index 866b1c7..c3bc47c 100644
--- a/src/yoctoproject.org-bitbake/devcontainer-feature.json
+++ b/src/yoctoproject.org-bitbake/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "yoctoproject.org/bitbake",
     "id": "yoctoproject.org-bitbake",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"bitbake\" build tool for the Yocto Project",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/yoctoproject.org-bitbake",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"bitbake\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/yoctoproject.org/devcontainer-feature.json b/src/yoctoproject.org/devcontainer-feature.json
index fe2b330..4b2c9be 100644
--- a/src/yoctoproject.org/devcontainer-feature.json
+++ b/src/yoctoproject.org/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "yoctoproject.org",
     "id": "yoctoproject.org",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Install \"bitbake\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/yoctoproject.org",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"bitbake\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/yq/devcontainer-feature.json b/src/yq/devcontainer-feature.json
index 95e384d..ddd187e 100644
--- a/src/yq/devcontainer-feature.json
+++ b/src/yq/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "yq",
     "id": "yq",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "description": "Install \"yq\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/yq",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"yq\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/zellij.dev/devcontainer-feature.json b/src/zellij.dev/devcontainer-feature.json
index 408d94a..8e4bc09 100644
--- a/src/zellij.dev/devcontainer-feature.json
+++ b/src/zellij.dev/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "zellij.dev",
     "id": "zellij.dev",
-    "version": "1.0.2",
+    "version": "1.0.3",
     "description": "Install \"zellij\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/zellij.dev",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"zellij\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }
diff --git a/src/zyedidia-eget/devcontainer-feature.json b/src/zyedidia-eget/devcontainer-feature.json
index ddbbb92..ebb3c7c 100644
--- a/src/zyedidia-eget/devcontainer-feature.json
+++ b/src/zyedidia-eget/devcontainer-feature.json
@@ -1,7 +1,7 @@
 {
     "name": "zyedidia/eget",
     "id": "zyedidia-eget",
-    "version": "1.0.2",
+    "version": "1.0.3",
     "description": "Install \"eget\" binary",
     "documentationURL": "https://github.com/devcontainer-community/devcontainer-features/tree/main/src/zyedidia-eget",
     "options": {
@@ -13,5 +13,8 @@
             ],
             "description": "Version of \"eget\" to install."
         }
-    }
+    },
+    "installsAfter": [
+        "ghcr.io/devcontainer-community/features/ca-certificates:latest"
+    ]
 }