From c322c284c2ff21c91b3d46494b3409fce5063ece Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 26 Feb 2024 14:37:57 -0500 Subject: [PATCH] Bump alpine from 3.13 to 3.19 in /dockerfiles (#101) Bumps alpine from 3.13 to 3.19. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=alpine&package-manager=docker&previous-version=3.13&new-version=3.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- dockerfiles/Dockerfile.cart | 2 +- dockerfiles/Dockerfile.collector | 4 ++-- dockerfiles/Dockerfile.interrupter | 2 +- dockerfiles/Dockerfile.trafficgen | 2 +- dockerfiles/Dockerfile.users | 2 +- 5 files changed, 6 insertions(+), 6 deletions(-) diff --git a/dockerfiles/Dockerfile.cart b/dockerfiles/Dockerfile.cart index e4e2682..44ee91c 100644 --- a/dockerfiles/Dockerfile.cart +++ b/dockerfiles/Dockerfile.cart @@ -4,6 +4,6 @@ COPY . /var/app WORKDIR /var/app RUN CGO_ENABLED=0 go build -o cart ./cmd/cart -FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911 +FROM alpine:3.19@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b COPY --from=builder /var/app/cart /var/app/cart ENTRYPOINT ["/var/app/cart"] diff --git a/dockerfiles/Dockerfile.collector b/dockerfiles/Dockerfile.collector index fc6e4fa..8e38380 100644 --- a/dockerfiles/Dockerfile.collector +++ b/dockerfiles/Dockerfile.collector @@ -1,7 +1,7 @@ -FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911 AS certs +FROM alpine:3.19@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b AS certs RUN apk --update add ca-certificates -FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911 AS collector-build +FROM alpine:3.19@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b AS collector-build COPY ./collector/dist/otel-shopping-cart-collector /otel-shopping-cart-collector RUN chmod 755 /otel-shopping-cart-collector diff --git a/dockerfiles/Dockerfile.interrupter b/dockerfiles/Dockerfile.interrupter index 908b4f0..edc1817 100644 --- a/dockerfiles/Dockerfile.interrupter +++ b/dockerfiles/Dockerfile.interrupter @@ -3,7 +3,7 @@ COPY . /var/app WORKDIR /var/app RUN CGO_ENABLED=0 go build -o interrupter ./cmd/interrupter -FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911 +FROM alpine:3.19@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b LABEL org.opencontainers.image.source https://github.com/trstringer/manual-approval COPY --from=builder /var/app/interrupter /var/app/interrupter ENTRYPOINT ["/var/app/interrupter"] diff --git a/dockerfiles/Dockerfile.trafficgen b/dockerfiles/Dockerfile.trafficgen index aaf4f91..e1be903 100644 --- a/dockerfiles/Dockerfile.trafficgen +++ b/dockerfiles/Dockerfile.trafficgen @@ -3,7 +3,7 @@ COPY . /var/app WORKDIR /var/app RUN CGO_ENABLED=0 go build -o trafficgen ./cmd/trafficgen -FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911 +FROM alpine:3.19@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b LABEL org.opencontainers.image.source https://github.com/trstringer/manual-approval COPY --from=builder /var/app/trafficgen /var/app/trafficgen ENTRYPOINT ["/var/app/trafficgen"] diff --git a/dockerfiles/Dockerfile.users b/dockerfiles/Dockerfile.users index 6a42213..b9b4441 100644 --- a/dockerfiles/Dockerfile.users +++ b/dockerfiles/Dockerfile.users @@ -4,6 +4,6 @@ COPY . /var/app WORKDIR /var/app RUN CGO_ENABLED=0 go build -o users ./cmd/users -FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911 +FROM alpine:3.19@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b COPY --from=builder /var/app/users /var/app/users ENTRYPOINT ["/var/app/users"]