chore(docker): update docker deps - #6011
Merged
Merged
Conversation
…alpine Updates the runtime base image to the floating node:22-alpine tag, which currently resolves to Alpine 3.23. Per docker scout, this clears the critical openssl CVE plus the high-severity musl, curl, c-ares, and nghttp2 vulnerabilities that ship with Alpine 3.20. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Rebuilds the in-image litestream binary against a current Go toolchain. This clears the critical Go stdlib CVE-2025-68121 (present in 1.23.12) and the five high-severity stdlib CVEs in 1.25.9, all fixed by 1.25.10+. Note: this only refreshes the Go stdlib in the binary. The grpc, x/crypto, x/net, x/oauth2, and filippo.io/age CVEs are pinned by the rocicorp/litestream fork's go.mod and need to be addressed in that repository. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Had Claude update our docker deps to increase our security rating