From 86d4d577a9656dac4933410e339f0850e3c0aa42 Mon Sep 17 00:00:00 2001 From: Nick Boldt Date: Fri, 29 Sep 2023 12:40:47 -0300 Subject: [PATCH] chore: use fresher images as CVE releases for :1 are newer than for :1-zz (#576) * chore: use fresher images as CVE releases for :1 are newer than for :1-zz * revert to lowercase doctype because new prettier Signed-off-by: Nick Boldt * use strict version instead of unpatched cve version or floating tag that makes renovate bot angry Signed-off-by: Nick Boldt * add empty changeset Signed-off-by: Nick Boldt --------- Signed-off-by: Nick Boldt --- .changeset/rotten-olives-flow.md | 2 ++ docker/Dockerfile | 4 ++-- packages/app/public/index.html | 2 +- 3 files changed, 5 insertions(+), 3 deletions(-) create mode 100644 .changeset/rotten-olives-flow.md diff --git a/.changeset/rotten-olives-flow.md b/.changeset/rotten-olives-flow.md new file mode 100644 index 000000000..a845151cc --- /dev/null +++ b/.changeset/rotten-olives-flow.md @@ -0,0 +1,2 @@ +--- +--- diff --git a/docker/Dockerfile b/docker/Dockerfile index 5e1cb0c36..4401e56a1 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -20,7 +20,7 @@ # 5. add Brew metadata # Stage 1 - Build nodejs skeleton -FROM registry.access.redhat.com/ubi9/nodejs-18:1-70 AS skeleton +FROM registry.access.redhat.com/ubi9/nodejs-18:1-70.1695740477 AS skeleton # hadolint ignore=DL3002 USER 0 @@ -87,7 +87,7 @@ COPY $EXTERNAL_SOURCE_NESTED/app-config*.yaml ./ RUN $YARN install --frozen-lockfile --production --network-timeout 600000 # Stage 5 - Build the runner image -FROM registry.access.redhat.com/ubi9/nodejs-18-minimal:1-74 AS runner +FROM registry.access.redhat.com/ubi9/nodejs-18-minimal:1-74.1695740475 AS runner USER 0 # Upstream only - install techdocs dependencies diff --git a/packages/app/public/index.html b/packages/app/public/index.html index bf736d240..e20960af4 100644 --- a/packages/app/public/index.html +++ b/packages/app/public/index.html @@ -1,4 +1,4 @@ - +