Skip to content

build(deps): Bump node from 24-alpine to 25-alpine in /docker in the docker-dependencies group across 1 directory#352

Merged
neilime merged 1 commit into
mainfrom
dependabot/docker/docker/docker-dependencies-cddebfc9ff
Jul 10, 2026
Merged

build(deps): Bump node from 24-alpine to 25-alpine in /docker in the docker-dependencies group across 1 directory#352
neilime merged 1 commit into
mainfrom
dependabot/docker/docker/docker-dependencies-cddebfc9ff

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the docker-dependencies group with 1 update in the /docker directory: node.

Updates node from 24-alpine to 25-alpine

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Jul 10, 2026
@github-actions

Copy link
Copy Markdown

Hi, thank you for creating your PR, we will check it out very soon

@github-actions

Copy link
Copy Markdown

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
DOCKERFILE_HADOLINT Pass ✅
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY

Report Summary

┌───────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│      Target       │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├───────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ pnpm-lock.yaml    │    pnpm    │        2        │         -         │    -    │
├───────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile        │ dockerfile │        -        │         0         │    -    │
├───────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ docker/Dockerfile │ dockerfile │        -        │         0         │    -    │
└───────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


pnpm-lock.yaml (pnpm)
=====================
Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 2, HIGH: 0, CRITICAL: 0)

┌───────────────────────┬────────────────┬──────────┬────────┬───────────────────┬──────────────────────┬────────────────────────────────────────────────────────────┐
│        Library        │ Vulnerability  │ Severity │ Status │ Installed Version │    Fixed Version     │                           Title                            │
├───────────────────────┼────────────────┼──────────┼────────┼───────────────────┼──────────────────────┼────────────────────────────────────────────────────────────┤
│ http-proxy-middleware │ CVE-2026-55602 │ MEDIUM   │ fixed  │ 2.0.9             │ 3.0.6, 4.1.0, 2.0.10 │ http-proxy-middleware: http-proxy-middleware: Unintended   │
│                       │                │          │        │                   │                      │ backend routing due to crafted Host header                 │
│                       │                │          │        │                   │                      │ https://avd.aquasec.com/nvd/cve-2026-55602                 │
├───────────────────────┼────────────────┤          │        ├───────────────────┼──────────────────────┼────────────────────────────────────────────────────────────┤
│ js-yaml               │ CVE-2026-53550 │          │        │ 3.14.2            │ 4.2.0, 3.15.0        │ js-yaml: js-yaml: Denial of Service via crafted YAML merge │
│                       │                │          │        │                   │                      │ keys                                                       │
│                       │                │          │        │                   │                      │ https://avd.aquasec.com/nvd/cve-2026-53550                 │
└───────────────────────┴────────────────┴──────────┴────────┴───────────────────┴──────────────────────┴────────────────────────────────────────────────────────────┘

@codecov-commenter

codecov-commenter commented Jul 10, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.52%. Comparing base (024fd1c) to head (1031814).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #352   +/-   ##
=======================================
  Coverage   88.52%   88.52%           
=======================================
  Files          99       99           
  Lines        3600     3600           
  Branches      935      936    +1     
=======================================
  Hits         3187     3187           
  Misses        373      373           
  Partials       40       40           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Bumps the docker-dependencies group with 1 update in the /docker directory: node.

Updates `node` from 24-alpine to 25-alpine

---
updated-dependencies:
- dependency-name: node
  dependency-version: 25-alpine
  dependency-type: direct:production
  dependency-group: docker-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Emilien Escalle <emilien.escalle@escemi.com>
@neilime
neilime force-pushed the dependabot/docker/docker/docker-dependencies-cddebfc9ff branch from 39b4d1a to 1031814 Compare July 10, 2026 08:10
@github-actions

Copy link
Copy Markdown

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
DOCKERFILE_HADOLINT Pass ✅
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅
YAML Pass ✅
YAML_PRETTIER Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

@neilime
neilime merged commit 3e5de83 into main Jul 10, 2026
33 checks passed
@neilime
neilime deleted the dependabot/docker/docker/docker-dependencies-cddebfc9ff branch July 10, 2026 08:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants