Update ghcr.io/codize-dev/piston Docker digest to c8a33a5

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/codize-dev/piston	digest	bb9ae8a → c8a33a5

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

This PR updates the Docker digest for ghcr.io/codize-dev/piston from bb9ae8a to c8a33a5. The new digest represents a freshly built API Docker image that incorporates two recent merged changes:

Included Changes:

• PR Update dependency body-parser to v2.2.2 #34: body-parser dependency update (2.2.1 → 2.2.2)

  • Updated qs dependency from ^6.14.0 to ^6.14.1
  • Refactored strict mode error string construction in JSON parsing
  • Minor patch version update with dependency improvements

• PR Update buildpack-deps:bookworm Docker digest to c35adcb #35: buildpack-deps:bookworm base image digest update

  • Updated base image digest from 95d2832 to c35adcb in api/Dockerfile:1
  • Routine security and maintenance updates to the Debian Bookworm base image

Security Fixes:

• No specific CVEs mentioned, but includes latest patches from buildpack-deps and body-parser updates

Breaking Changes:

• None identified - both updates are backward compatible patch/digest updates

🎯 Impact Scope Investigation

Usage Location Analysis:
The ghcr.io/codize-dev/piston Docker image is referenced in the following locations:

1. docker-compose.yaml:5 - Primary deployment configuration (this PR's target)
2. builder/build.sh:31 - Package builder script (uses :latest tag without digest)
3. builder/Dockerfile:1 - Uses pinned commit SHA and older digest (separate configuration)
4. GitHub Actions workflows - Multiple workflows build and push this image

Dependency Impact:

• No code-level API changes required
• No configuration file modifications needed beyond docker-compose.yaml
• The update only affects the Docker image digest in docker-compose.yaml
• All references use the same image source, so version consistency is maintained

Compatibility Assessment:

• body-parser 2.2.1 → 2.2.2 is a patch release maintaining backward compatibility
• buildpack-deps digest update is a routine base image update
• No changes to Express.js API endpoints or runtime behavior
• No changes to Piston's core functionality or supported languages

💡 Recommended Actions

Immediate Actions:

1. ✅ Merge this PR - The update is safe and contains only minor dependency patches
2. No code modifications required
3. No migration scripts needed
4. No configuration changes needed

Post-Merge Verification:

1. Verify the API starts successfully with ./piston restart
2. Run basic smoke tests to ensure code execution endpoints work
3. Monitor logs for any unexpected errors with ./piston logs

Optional Testing (if desired):

# Pull the new image and test locally
docker pull ghcr.io/codize-dev/piston@sha256:c8a33a56fe24fa23145f14de3013a96656cbd105d7b0e19655f526ec03d6151e

# Test with docker-compose
./piston restart
./piston logs

🔗 Reference Links

• body-parser v2.2.2 Release Notes
• PR #34: Update dependency body-parser to v2.2.2
• PR #35: Update buildpack-deps:bookworm Docker digest
• Piston API Workflow - Latest Build

Generated by koki-develop/claude-renovate-review