From c71ad400589cf28440088567e63de80c786bba69 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Nov 2026 07:02:33 +0000 Subject: [PATCH] deps: bump chainguard/node from `37ea42c` to `6a066f8` Bumps chainguard/node from `37ea42c` to `6a066f8`. --- updated-dependencies: - dependency-name: chainguard/node dependency-version: 6a066f8decea77c67ef2772a78fad81df7a78a346d0b22a05fc9dac14537f2b0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index e352b8920..7e80b42c5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -289,7 +289,7 @@ CMD ["node", "dev/run-standalone.mjs"] # artifacts remain ABI-compatible. The dev image intentionally retains npm and # a POSIX shell because AgentProxy invokes npm at runtime and has a shell # entrypoint. Trivy v0.69.3 reports 0 HIGH/CRITICAL on this exact index digest. -FROM cgr.dev/chainguard/node@sha256:37ea42c0860729767b090a7c700c836eac660eb4bcfee3b5fe63eb85acd63df4 AS runner-base +FROM cgr.dev/chainguard/node@sha256:6a066f8decea77c67ef2772a78fad81df7a78a346d0b22a05fc9dac14537f2b0 AS runner-base USER root WORKDIR /app # Chainguard Node already provides the non-root node user/group.