Re-pin Docker base image in Dockerfile

[atomist]

This pull request re-pins the Docker base image node:lts in Dockerfile to the current digest.

https://github.com/atomist-skills/npm-build-skill/blob/4a35d57ee6f534848695b5782b9c33dcdf5c39ef/Dockerfile#L2-L2

Digest sha256:e38c052a64b1ee35b554a1d582639bf8f523b89dfae1d479bba5e1b8f184fbe1 references a multi-CPU architecture image manifest. This image supports the following architectures:

• sha256:9b8eb61072127e898d8d2682f28508937fc21a853c6cb5587fa14d8b05ab4455 linux/amd64

Changelog for node:lts

Commit

New image build caused by commit docker-library/official-images@c91b1a4 to library/node:

Node: feat: Node.js 18.1.0

---

Comparison

Comparing Docker image node:lts at digests

Current sha256:a6c217d7c8f001dc6fc081d55c2dd7fb3fefe871d5aa7be9c0c16bd62bea8e0c (866mb) and
Proposed sha256:e38c052a64b1ee35b554a1d582639bf8f523b89dfae1d479bba5e1b8f184fbe1 (866mb):

Packages

The following package differences were detected:

Name	Current	Proposed	Type
gzip	1.9-3	1.9-3 deb10u1	Apt

Files

The following file modifications were detected:

Name	Current	Proposed	Diff
/bin/gzexe	6.2kb	6.3kb	71b
/bin/gzip	96kb	96kb	0b
/bin/zdiff	5.7kb	5.8kb	18b
/bin/zgrep	7.4kb	7.9kb	464b
/bin/znew	4.4kb	4.5kb	24b
/etc/apt/sources.list	421b	421b	0b
/etc/shadow	527b	527b	0b
/etc/shadow-	501b	501b	0b
/root/.gnupg/pubring.kbx	44kb	44kb	0b
/root/.gnupg/pubring.kbx~	34kb	34kb	0b
/root/.gnupg/random_seed	600b	600b	0b
/root/.gnupg/trustdb.gpg	1.2kb	1.2kb	0b
/root/.npm/_logs/2022-04-27T20_21_28_850Z-debug-0.log		-	0b
/root/.npm/_logs/2022-05-11T05_16_20_271Z-debug-0.log		+	1.4kb
/tmp/v8-compile-cache-0/9.4.146.24-node.20/zSoptzSyarn-v1.22.18zSbinzSyarn.js.BLOB	2.1mb	2.1mb	0b
/usr/lib/python3.7/__pycache__/_markupbase.cpython-37.pyc	7.6kb	7.6kb	0b
/usr/lib/python3.7/__pycache__/ftplib.cpython-37.pyc	27kb	27kb	0b
/usr/lib/python3.7/__pycache__/hashlib.cpython-37.pyc	6.4kb	6.4kb	0b
/usr/lib/python3.7/__pycache__/netrc.cpython-37.pyc	3.7kb	3.7kb	0b
/usr/lib/python3.7/__pycache__/pydoc.cpython-37.pyc	83kb	83kb	0b
/usr/lib/python3.7/__pycache__/rlcompleter.cpython-37.pyc	5.6kb	5.6kb	0b
/usr/local/share/fonts/.uuid	36b	36b	0b
/usr/share/doc/gzip/changelog.Debian.gz	8.4kb	8.5kb	124b
/usr/share/fonts/.uuid	36b	36b	0b
/usr/share/fonts/truetype/.uuid	36b	36b	0b
/usr/share/fonts/truetype/dejavu/.uuid	36b	36b	0b
/var/cache/fontconfig/0f57837b-29c7-49d9-8fe5-f58a343b9ee7-le64.cache-7		-	0b
/var/cache/fontconfig/192e2bf6-c34a-4f4d-ae48-2d9e6c6ad999-le64.cache-7		-	0b
/var/cache/fontconfig/3dc58ca2-d549-449a-8b65-abd3e50cd84c-le64.cache-7		-	0b
/var/cache/fontconfig/751b0369-cbcc-4320-83f7-821711147ef9-le64.cache-7		-	0b
/var/cache/fontconfig/7a1d3359-82c4-4f0c-a582-485edd273441-le64.cache-7		+	160b
/var/cache/fontconfig/7ec69eaa-3a31-46de-9fb1-94c043bd376e-le64.cache-7		+	144b
/var/cache/fontconfig/b41750ea-d6ff-4fcf-8ee6-dd55d52b7e51-le64.cache-7		+	15kb
/var/cache/fontconfig/dc803dd6-4196-4122-ad7b-9f4e165dd06e-le64.cache-7		+	104b
/var/cache/ldconfig/aux-cache	16kb	16kb	0b
/var/lib/dpkg/info/gzip.md5sums	1.5kb	1.5kb	0b
/var/lib/dpkg/status	377kb	377kb	8b
/var/lib/dpkg/status-old	377kb	377kb	8b
/var/log/alternatives.log	12kb	12kb	0b
/var/log/apt/eipp.log.xz	19kb	19kb	-24b
/var/log/apt/history.log	15kb	15kb	-51b
/var/log/apt/term.log	83kb	82kb	-775b
/var/log/dpkg.log	159kb	158kb	-692b

History

The following differences in docker history were detected:

-/bin/sh -c #(nop) ADD file:7c5789fb822bda2652d7addee832c5a3d71733f0f94f97d89b0c5570c0840829 in /
+/bin/sh -c #(nop) ADD file:54d60144d251caa916ff50606bc2364131d47d6b10ed83d08c81c647ab56cc40 in /
 /bin/sh -c #(nop)  CMD ["bash"]
 /bin/sh -c set -eux; 	apt-get update; 	apt-get install -y --no-install-recommends 		ca-certificates 		curl 		netbase 		wget 	; 	rm -rf /var/lib/apt/lists/*
 /bin/sh -c set -ex; 	if ! command -v gpg > /dev/null; then 		apt-get update; 		apt-get install -y --no-install-recommends 			gnupg 			dirmngr 		; 		rm -rf /var/lib/apt/lists/*; 	fi

Ports

No different exposed ports detected

Environment Variables

No different environment variables detected

---

Pinning FROM lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.

---

File changed:

• Dockerfile

[atomist]

Pull request auto merged:

• No reviews
• 1 successful check