chore(deps): update alpine docker tag to v3.24

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
alpine	final	minor	3.21 → 3.24

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

🔧 Changed

• Updated the healthcheck-build stage base image in the Dockerfile from Alpine 3.21@sha256:c3f8e73fdb79deaebaa2037150150191b9dcbfba68b4a46d70103204c53f4709 to 3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

Concerns:

• Verify the Alpine 3.24 upgrade doesn’t break the healthcheck build (compiler/toolchain assumptions, libc/musl behavior)
• Reassess security/patch changes introduced by the Alpine version bump and confirm no dependency drift is expected

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
drydock-website	Ready	Preview, Comment	Jul 11, 2026 3:54pm
drydockdemo-website	Ready	Preview, Comment	Jul 11, 2026 3:54pm

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 7c472065-57f3-40c8-b4e9-d2840fecd977

📥 Commits

Reviewing files that changed from the base of the PR and between 89d1e84 and b552124.

📒 Files selected for processing (1)

• Dockerfile

🚧 Files skipped from review as they are similar to previous changes (1)

• Dockerfile

---

📝 Walkthrough

Walkthrough

The Dockerfile’s healthcheck-build stage base image was updated from Alpine 3.21 to Alpine 3.24, including its pinned digest. Subsequent build steps remain unchanged, and no exported or public entities were modified.

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/non-major-dockerfile

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@Dockerfile`:
- Around line 41-42: The healthcheck-build stage is pinning Alpine packages to
versions that are not available in the Alpine 3.24 repository, causing the apk
add step to fail. Update the package installation in the Dockerfile’s
healthcheck-build stage by removing the exact version pins or replacing them
with versions compatible with Alpine 3.24, keeping the FROM alpine:3.24 base
unchanged.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 473f9585-a618-4273-9f16-22104ef745c7

📥 Commits

Reviewing files that changed from the base of the PR and between 1badc49 and eec681f.

📒 Files selected for processing (1)

• Dockerfile

[coderabbitai]

🎯 Functional Correctness | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check whether gcc=14.2.0-r4 and musl-dev=1.2.5-r11 exist in the alpine v3.24 main repo.
curl -s "https://pkgs.alpinelinux.org/package/v3.24/main/x86_64/gcc" | grep -oE 'gcc-[0-9][^<]*' | head -5
curl -s "https://pkgs.alpinelinux.org/package/v3.24/main/x86_64/musl-dev" | grep -oE 'musl-dev-[0-9][^<]*' | head -5

Repository: CodesWhat/drydock

Length of output: 195

---

🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Show the relevant Dockerfile section with line numbers.
sed -n '1,80p' Dockerfile | nl -ba | sed -n '1,80p'

# Check Alpine v3.24 package pages for the pinned packages and current versions.
for pkg in gcc musl-dev; do
  echo "== $pkg =="
  curl -fsSL "https://pkgs.alpinelinux.org/package/v3.24/main/x86_64/$pkg" \
    | tr '\n' ' ' \
    | grep -oE "${pkg}-[0-9][^< ]*" \
    | head -5
done

Repository: CodesWhat/drydock

Length of output: 195

---

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== Dockerfile context =="
awk 'NR>=1 && NR<=80 { printf "%4d  %s\n", NR, $0 }' Dockerfile

echo
echo "== Alpine v3.24 package pages =="
for pkg in gcc musl-dev; do
  echo "--- $pkg ---"
  html="$(curl -fsSL "https://pkgs.alpinelinux.org/package/v3.24/main/x86_64/$pkg")"
  printf '%s\n' "$html" | grep -oE "${pkg}-[0-9][^< ]*" | head -10 || true
done

Repository: CodesWhat/drydock

Length of output: 3550

---

🏁 Script executed:

#!/bin/bash
set -euo pipefail

tmpdir="$(mktemp -d)"
trap 'rm -rf "$tmpdir"' EXIT

curl -fsSL "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/x86_64/APKINDEX.tar.gz" -o "$tmpdir/APKINDEX.tar.gz"
tar -xzf "$tmpdir/APKINDEX.tar.gz" -C "$tmpdir"

echo "== gcc entries =="
awk '
  /^P:gcc$/ { pkg=1 }
  pkg && /^V:/ { print; pkg=0 }
' "$tmpdir/APKINDEX" | head -5

echo "== musl-dev entries =="
awk '
  /^P:musl-dev$/ { pkg=1 }
  pkg && /^V:/ { print; pkg=0 }
' "$tmpdir/APKINDEX" | head -5

echo "== exact pins present? =="
grep -q "^P:gcc$" "$tmpdir/APKINDEX" && grep -q "^V:14.2.0-r4$" "$tmpdir/APKINDEX" && echo "gcc 14.2.0-r4 present" || echo "gcc 14.2.0-r4 absent"
grep -q "^P:musl-dev$" "$tmpdir/APKINDEX" && grep -q "^V:1.2.5-r11$" "$tmpdir/APKINDEX" && echo "musl-dev 1.2.5-r11 present" || echo "musl-dev 1.2.5-r11 absent"

Repository: CodesWhat/drydock

Length of output: 292

---

Update the Alpine 3.24 package pins in Dockerfile:41-42
gcc=14.2.0-r4 and musl-dev=1.2.5-r11 are not in Alpine 3.24’s repo, so this apk add will fail and stop the healthcheck-build stage. Drop the pins here or bump them to the 3.24 versions.

Fix

-RUN apk add --no-cache gcc=14.2.0-r4 musl-dev=1.2.5-r11
+RUN apk add --no-cache gcc=15.2.0-r5 musl-dev=1.2.6-r2

📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

	FROM alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b AS healthcheck-build
	RUN apk add --no-cache gcc=14.2.0-r4 musl-dev=1.2.5-r11
	FROM alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b AS healthcheck-build
	RUN apk add --no-cache gcc=15.2.0-r5 musl-dev=1.2.6-r2

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@Dockerfile` around lines 41 - 42, The healthcheck-build stage is pinning
Alpine packages to versions that are not available in the Alpine 3.24
repository, causing the apk add step to fail. Update the package installation in
the Dockerfile’s healthcheck-build stage by removing the exact version pins or
replacing them with versions compatible with Alpine 3.24, keeping the FROM
alpine:3.24 base unchanged.