security(deps): patch container vulnerabilities

Use the supported Alpine 3.23 Node image to avoid vulnerable util-linux packages in Alpine 3.24. Force fast-uri 3.1.6 to resolve the SSRF advisories reported by the image scan.
This commit is contained in:
neon
2026-09-05 10:06:56 +00:00
parent d8f87d8dd1
commit e3241eea3d
3 changed files with 5 additions and 10 deletions
+1 -1
View File
@@ -1,4 +1,4 @@
ARG NODE_IMAGE=node:26.7.0-alpine@sha256:aadf416b2cdce311a8811ba3f0608a61b77dbf997500e2eafe781b51f6a0b019
ARG NODE_IMAGE=node:26.8.1-alpine3.23@sha256:871eb674ad6e692c91330a8959f1ce2f80ba3f445cdc54e306869d2ea265e42d
FROM ${NODE_IMAGE} AS base
RUN npm install -g pnpm@11.22.0