lebaudantoine e3deb37fbe 🔒️(frontend) upgrade base image to 1.30.4-alpine3.24 ...

Bump the frontend base image to `1.30.4-alpine3.24`, which picks up
fixes for the CVEs listed below and lets us drop the individual
dependency pins that were only there to address earlier known CVEs.

Address the following HIGH severity CVEs in libuuid / util-linux,
reported by Trivy. Bumping to 2.41.6-r1 (bundled in the new base
image) covers all of them:

* CVE-2026-53612 — TOCTOU in mount post-mount ownership/mode
  changes.
* CVE-2026-53613 — TOCTOU in mount via ancestor directory swap.
* CVE-2026-53614 — SUID mount(8) nosuid/noexec bypass via
  LIBMOUNT_FORCE_MOUNT2.
* CVE-2026-76642 — failed external mount helper still runs
  privileged X-mount post-hooks.
* CVE-2026-78408 — nsenter --join-cgroup leaks root cgroup
  migration authority (fixed in 2.41.6-r1).
* CVE-2026-78410 — restricted bind mounts do not pin the source,
  allowing X-mount.owner/group/mode escalation.

2026-09-07 16:40:03 +02:00

..

auth

🔨(tilt) improve local stack

2024-12-16 23:41:09 +01:00

dinum-frontend

🔒️(frontend) upgrade base image to 1.30.4-alpine3.24

2026-09-07 16:40:03 +02:00

files

✨(backend) add file upload feature & tests

2026-03-06 11:31:39 +01:00

livekit

⬆️(docker) upgrade LiveKit server to v1.13.6

2026-09-03 00:16:04 +02:00

resource-server

🔧(backend) add Docker network for shared Keycloak OIDC authentication

2025-11-24 18:23:38 +01:00