From d5d9f92fa233026067cd3e7c7dcabcdc36b3932a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 6 Sep 2026 11:26:20 +0000 Subject: [PATCH] build(deps): bump nginx from 1.29-alpine to 1.31-alpine in /frontend Bumps nginx from 1.29-alpine to 1.31-alpine. --- updated-dependencies: - dependency-name: nginx dependency-version: 1.31-alpine dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- frontend/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/frontend/Dockerfile b/frontend/Dockerfile index 240e651..b5dfd78 100644 --- a/frontend/Dockerfile +++ b/frontend/Dockerfile @@ -13,7 +13,7 @@ RUN npm ci COPY . . RUN npm run build -FROM nginx:1.29-alpine AS runtime +FROM nginx:1.31-alpine AS runtime # Alpine's own package repo ships CVE fixes faster than the upstream nginx image gets rebuilt -- # confirmed the hard way (the pinned tag alone still failed CI's Trivy scan with 34 HIGH findings