fix(docker): rebuild kepubify with Go 1.26.3, fix read-only fs chmod

Browse Source

Replaced pre-compiled kepubify binaries (built with Go 1.17.8, 53
HIGH/CRITICAL CVEs) with binaries rebuilt from source using Go 1.26.3
and golang.org/x/text upgraded to v0.3.8, resolving all fixable CVEs.

Also fixed KepubifyBinaryService incorrectly falling back to downloading
the binary on every startup in read-only containers. chmod() was throwing
EROFS, and the single catch block treated it as a missing file. Split
stat and chmod into separate try/catch so only a missing-file error
triggers the download fallback.

...

This commit is contained in:

neon

2026-05-11 18:42:18 +00:00

parent 6e68937944

commit 6b650981da

9 changed files with 229 additions and 76 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

server/bin/kepubify/kepubify-linux-64bit

Executable

BIN

Binary file not shown.