From e499ef95c7ce64552f4f0ced3d3793ea48ddfbda Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 10 Oct 2026 18:06:50 +0000 Subject: [PATCH] chore(deps): Bump the docker-patch-and-minor group Bumps the docker-patch-and-minor group in /docker with 2 updates: node and distroless/nodejs24-debian13. Updates `node` from `d1b3b4d` to `ebfe2f9` Updates `distroless/nodejs24-debian13` from `bb6b03d` to `9eeb7f5` --- updated-dependencies: - dependency-name: node dependency-version: 24-slim dependency-type: direct:production dependency-group: docker-patch-and-minor - dependency-name: distroless/nodejs24-debian13 dependency-version: nonroot dependency-type: direct:production dependency-group: docker-patch-and-minor ... Signed-off-by: dependabot[bot] --- docker/Dockerfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docker/Dockerfile b/docker/Dockerfile index 079b0a9e..361894a6 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -7,7 +7,7 @@ # pinned by digest. # Stage 1: Install all dependencies (including dev deps) for the build. -FROM node:24-alpine@sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f AS deps +FROM node:24-alpine@sha256:ebfe2f90462722a7a4de65e91990e97fe0d401c70e0e762c5b53302f905ec1c1 AS deps WORKDIR /app COPY package.json package-lock.json turbo.json ./ COPY packages/shared/package.json packages/shared/ @@ -34,7 +34,7 @@ RUN npx turbo build --filter=manifest-backend --filter=manifest-frontend --filte # optionalDependencies; without it, npm hoists @esbuild/linux-x64 (a Go # binary) into node_modules even though `--omit=dev` strips its parent, # and CVE scanners then flag the embedded Go stdlib. -FROM node:24-slim@sha256:24dc26ef1e3c3690f27ebc4136c9c186c3133b25563ae4d7f0692e4d1fe5db0e AS prod-deps +FROM node:24-slim@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 AS prod-deps WORKDIR /app RUN mkdir -p /app/request-recordings COPY package.json package-lock.json ./ @@ -61,7 +61,7 @@ RUN --mount=type=cache,target=/root/.npm \ # Stage 4: Distroless runtime. Runs as the built-in `nonroot` user (UID # 65532) by default. No shell, no apk/apt, minimal CVE surface. -FROM gcr.io/distroless/nodejs24-debian13:nonroot@sha256:bb6b03d81066993293a10feda7250e8e1cc034035fe9b61cfceededa7c8bf04d AS runtime +FROM gcr.io/distroless/nodejs24-debian13:nonroot@sha256:9eeb7f5887d0e239e78264b06f7f11d2e14be534050481803a9e4728fcdd278e AS runtime WORKDIR /app LABEL org.opencontainers.image.title="Manifest" \