From 75ba2ff146eebc747cad32997f1bc53308e6e8f4 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 7 Jul 2026 21:25:31 +0000 Subject: [PATCH] =?UTF-8?q?=F0=9F=94=92=EF=B8=8F(frontend)=20update=20dock?= =?UTF-8?q?er=20image=20to=20nginx-unprivileged:1.30.3-alpine3.23?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE323-EXPAT-17675120 - https://snyk.io/vuln/SNYK-ALPINE323-EXPAT-17675112 - https://snyk.io/vuln/SNYK-ALPINE323-EXPAT-17675114 - https://snyk.io/vuln/SNYK-ALPINE323-EXPAT-17675124 - https://snyk.io/vuln/SNYK-ALPINE323-EXPAT-17675125 --- CHANGELOG.md | 1 + docker/dinum-frontend/Dockerfile | 2 +- src/frontend/Dockerfile | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index b711f806..38e87612 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -27,6 +27,7 @@ and this project adheres to - ⬆️(frontend) upgrade posthog-js from 1.386.5 to 1.387.0 - ⬆️(frontend) upgrade @tanstack/react-query from 5.100.14 to 5.101.0 - ⬆️(frontend) update the frontend build image to Node 22 +- 🔒️(frontend) update docker image to nginx-unprivileged:1.30.3-alpine3.23 ### Fixed diff --git a/docker/dinum-frontend/Dockerfile b/docker/dinum-frontend/Dockerfile index c8cbe46b..8320af2f 100644 --- a/docker/dinum-frontend/Dockerfile +++ b/docker/dinum-frontend/Dockerfile @@ -54,7 +54,7 @@ RUN npx webpack --mode production # ---- Front-end image ---- -FROM nginxinc/nginx-unprivileged:alpine3.23 AS frontend-production +FROM nginxinc/nginx-unprivileged:1.30.3-alpine3.23 AS frontend-production USER root diff --git a/src/frontend/Dockerfile b/src/frontend/Dockerfile index 44d35b2b..b3cf9874 100644 --- a/src/frontend/Dockerfile +++ b/src/frontend/Dockerfile @@ -39,7 +39,7 @@ ENV VITE_API_BASE_URL=${VITE_API_BASE_URL} RUN npm run build # ---- Front-end image ---- -FROM nginxinc/nginx-unprivileged:alpine3.23 AS frontend-production +FROM nginxinc/nginx-unprivileged:1.30.3-alpine3.23 AS frontend-production USER root