Skip to content

ShokoBridge v5.1.0 - Security & Maintainability Release

Choose a tag to compare

@r33Cy r33Cy released this 30 Aug 09:50
· 2 commits to main since this release

This release focuses on significantly improving the security and maintainability of the Docker image. It includes critical security patches by updating the base image and implements best practices by running the container as a non-root user by default.

✨ Features & Enhancements

  • 🛡️ Security Hardening (Non-Root User): The Docker container now runs as a dedicated, unprivileged user (appuser) by default. This is a major security enhancement that reduces the potential attack surface and aligns with containerization best practices.
    • Note for Docker Compose users: This change reinforces the importance of setting PUID and PGID in your environment to ensure the container has the correct permissions to write to your data volume.
  • 🔒 Base Image Security Update: The Python base image has been updated to 3.13.7-alpine to incorporate upstream patches for high and medium-tier security vulnerabilities.
  • 🔧 Improved Dockerfile Maintainability: The Dockerfile has been refactored to use ARG variables for the Python version, making future updates simpler and less error-prone.