From d05b205ebf3e2dd7e821d9d286ae8b3bf201684b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 6 Oct 2026 19:45:49 +0300 Subject: [PATCH] deps(docker): bump alpine from `28bd5fe` to `294b683` in /docker/prod (#187) Bumps alpine from `28bd5fe` to `294b683`. --- updated-dependencies: - dependency-name: alpine dependency-version: '3.24' dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- docker/prod/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/prod/Dockerfile b/docker/prod/Dockerfile index 70c94cf0..2fd954c2 100644 --- a/docker/prod/Dockerfile +++ b/docker/prod/Dockerfile @@ -124,7 +124,7 @@ RUN case "${TARGETARCH}" in \ # system libraries, roughly half the size of the official node binary. # The base is digest-pinned; nodejs then tracks alpine 3.24's package # repo, which only ships security bumps within the branch. -FROM alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b +FROM alpine:3.24@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 # the exact pins make the build fail — instead of silently shifting — # when alpine's branch rotates a package (they keep only the newest build