TDvorak/Containr
1
0 Fork 0
mirror of https://github.com/Dvorinka/Containr.git synced 2026-10-28 15:51:26 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(deps): patch fixable Go vulns, build on go 1.26

Browse Source 
- golang-jwt/v5 5.0.0->5.2.2 (CVE-2025-30204), x/crypto, x/net,
  x/text, otel -> latest; go.mod now requires go 1.26
- builder golang:1.24-alpine -> 1.26-alpine, clearing the stdlib
  HIGH batch (crypto/tls, net/http, x509, net/mail DoS)
- npm-side findings (tar, brace-expansion, pacote, sigstore, ...)
  are npm-CLI internals inside the node base image, inert at
  runtime - no overrides; fixed by base image updates

Authored By: TDvorak <[email protected]>

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
This commit is contained in:
Tomas DvorakandDevin committed 2026-09-21 14:36:28 +02:00
1 parent a083c30d76
commit 479eeb021b
3 files changed
+36 -36
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

app/backend/Dockerfile
+1 -1
View File
@@ -1,5 +1,5 @@
# Build Go API binary
FROM golang:1.24-alpine AS go-builder
FROM golang:1.26-alpine AS go-builder
RUN apk add --no-cache git ca-certificates tzdata