build(deps): bump node from 22-alpine to 26-alpine #12

Merged
dependabot[bot] merged 3 commits from dependabot/docker/node-26-alpine into main 2026-06-02 15:16:20 -05:00
dependabot[bot] commented 2026-06-02 14:38:05 -05:00 (Migrated from github.com)

Bumps node from 22-alpine to 26-alpine.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps node from 22-alpine to 26-alpine. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=node&package-manager=docker&previous-version=22-alpine&new-version=26-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
github-advanced-security[bot] (Migrated from github.com) reviewed 2026-06-02 14:38:32 -05:00
@ -1,4 +1,4 @@
FROM node:22-alpine AS base
FROM node:26-alpine AS base
github-advanced-security[bot] (Migrated from github.com) commented 2026-06-02 14:38:32 -05:00

Trivy / Image user should not be 'root'

Artifact: Dockerfile
Type: dockerfile
Vulnerability DS-0002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS-0002

Show more details

## Trivy / Image user should not be 'root' Artifact: Dockerfile Type: dockerfile Vulnerability DS-0002 Severity: HIGH Message: Specify at least 1 USER command in Dockerfile with non-root user as argument Link: [DS-0002](https://avd.aquasec.com/misconfig/ds-0002) [Show more details](https://github.com/Gitchegumi/multi-stream-alerts/security/code-scanning/10)
github-advanced-security[bot] (Migrated from github.com) commented 2026-06-02 14:38:32 -05:00

Trivy / No HEALTHCHECK defined

Artifact: Dockerfile
Type: dockerfile
Vulnerability DS-0026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS-0026

Show more details

## Trivy / No HEALTHCHECK defined Artifact: Dockerfile Type: dockerfile Vulnerability DS-0026 Severity: LOW Message: Add HEALTHCHECK instruction in your Dockerfile Link: [DS-0026](https://avd.aquasec.com/misconfig/ds-0026) [Show more details](https://github.com/Gitchegumi/multi-stream-alerts/security/code-scanning/11)
Gitchegumi (Migrated from github.com) approved these changes 2026-06-02 15:07:03 -05:00
Sign in to join this conversation.
No description provided.