chore: upgrade Alpine and Deno versions (RocketChat#39837)

d-gubert · web-flow · commit 610cc035e613 · 2026-03-25T21:03:13.000Z
diff --git a/.github/workflows/ci-deploy-gh-pages.yml b/.github/workflows/ci-deploy-gh-pages.yml
@@ -18,7 +18,7 @@ jobs:
         uses: ./.github/actions/setup-node
         with:
           node-version: 22.16.0
-          deno-version: 1.43.5
+          deno-version: 2.3.1
           cache-modules: true
           install: true
 
diff --git a/.github/workflows/new-release.yml b/.github/workflows/new-release.yml
@@ -35,7 +35,7 @@ jobs:
         uses: ./.github/actions/setup-node
         with:
           node-version: 22.16.0
-          deno-version: 1.43.5
+          deno-version: 2.3.1
           cache-modules: true
           install: true
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/.github/workflows/pr-update-description.yml b/.github/workflows/pr-update-description.yml
@@ -22,7 +22,7 @@ jobs:
         uses: ./.github/actions/setup-node
         with:
           node-version: 22.16.0
-          deno-version: 1.43.5
+          deno-version: 2.3.1
           cache-modules: true
           install: true
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
@@ -25,7 +25,7 @@ jobs:
         uses: ./.github/actions/setup-node
         with:
           node-version: 22.16.0
-          deno-version: 1.43.5
+          deno-version: 2.3.1
           cache-modules: true
           install: true
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/.github/workflows/release-candidate.yml b/.github/workflows/release-candidate.yml
@@ -16,7 +16,7 @@ jobs:
         uses: ./.github/actions/setup-node
         with:
           node-version: 22.16.0
-          deno-version: 1.43.5
+          deno-version: 2.3.1
           cache-modules: true
           install: true
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/.tool-versions b/.tool-versions
@@ -1 +1 @@
-deno 1.43.5
+deno 2.3.1
diff --git a/apps/meteor/.docker/Dockerfile.alpine b/apps/meteor/.docker/Dockerfile.alpine
@@ -1,4 +1,4 @@
-FROM node:22.16.0-alpine3.20 AS builder
+FROM node:22.16.0-alpine3.22 AS builder
 
 ENV LANG=C.UTF-8
 
@@ -11,7 +11,7 @@ ENV NODE_ENV=production
 RUN cd /app/bundle/programs/server \
     && npm install --omit=dev
 
-FROM node:22.16.0-alpine3.20
+FROM node:22.16.0-alpine3.22
 
 LABEL maintainer="buildmaster@rocket.chat"
 
@@ -31,7 +31,7 @@ ENV LANG=C.UTF-8
 # """
 RUN apk add --no-cache shadow deno ttf-dejavu \
     # Update OpenSSL
-    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.21
+    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.22
     && apk upgrade --no-cache openssl \
     && groupmod -n rocketchat nogroup \
     && useradd -u 65533 -r -g rocketchat rocketchat
diff --git a/apps/meteor/ee/server/services/Dockerfile b/apps/meteor/ee/server/services/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22.16.0-alpine3.21 as build
+FROM node:22.16.0-alpine3.22 as build
 
 WORKDIR /app
 
@@ -28,7 +28,7 @@ RUN yarn install
 RUN yarn workspace @rocket.chat/core-typings run build \
     && yarn workspace @rocket.chat/rest-typings run build
 
-FROM node:22.16.0-alpine3.21
+FROM node:22.16.0-alpine3.22
 
 ARG SERVICE
 
@@ -74,7 +74,7 @@ WORKDIR /app/apps/meteor/ee/server/services
 RUN apk update && \
     apk --no-cache --virtual build-dependencies add g++ python3 make py3-setuptools && \
     # Update OpenSSL
-    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.21
+    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.22
     apk upgrade --no-cache openssl && \
     yarn workspaces focus --production && \
     rm -rf /var/cache/apk/* && \
diff --git a/ee/apps/account-service/Dockerfile b/ee/apps/account-service/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22.16.0-alpine3.21 AS builder
+FROM node:22.16.0-alpine3.22 AS builder
 
 ARG SERVICE
 
@@ -88,7 +88,7 @@ WORKDIR /app/ee/apps/${SERVICE}
 
 RUN yarn workspaces focus --production
 
-FROM node:22.16.0-alpine3.21
+FROM node:22.16.0-alpine3.22
 
 ARG SERVICE
 
@@ -98,7 +98,7 @@ ENV NODE_ENV=production \
 RUN apk update && \
     apk --no-cache --virtual deps add shadow && \
     # Update OpenSSL
-    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.21
+    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.22
     apk upgrade --no-cache openssl && \
     rm -rf /var/cache/apk/* && \
     groupmod -n rocketchat nogroup && \
diff --git a/ee/apps/authorization-service/Dockerfile b/ee/apps/authorization-service/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22.16.0-alpine3.21 AS builder
+FROM node:22.16.0-alpine3.22 AS builder
 
 ARG SERVICE
 
@@ -88,7 +88,7 @@ WORKDIR /app/ee/apps/${SERVICE}
 
 RUN yarn workspaces focus --production
 
-FROM node:22.16.0-alpine3.21
+FROM node:22.16.0-alpine3.22
 
 ARG SERVICE
 
@@ -98,7 +98,7 @@ ENV NODE_ENV=production \
 RUN apk update && \
     apk --no-cache --virtual deps add shadow && \
     # Update OpenSSL
-    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.21
+    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.22
     apk upgrade --no-cache openssl && \
     rm -rf /var/cache/apk/* && \
     groupmod -n rocketchat nogroup && \
diff --git a/ee/apps/ddp-streamer/Dockerfile b/ee/apps/ddp-streamer/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22.16.0-alpine3.21 AS builder
+FROM node:22.16.0-alpine3.22 AS builder
 
 ARG SERVICE
 
@@ -91,7 +91,7 @@ WORKDIR /app/ee/apps/${SERVICE}
 
 RUN yarn workspaces focus --production
 
-FROM node:22.16.0-alpine3.21
+FROM node:22.16.0-alpine3.22
 
 ARG SERVICE
 
@@ -101,7 +101,7 @@ ENV NODE_ENV=production \
 RUN apk update && \
     apk --no-cache --virtual deps add shadow && \
     # Update OpenSSL
-    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.21
+    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.22
     apk upgrade --no-cache openssl && \
     rm -rf /var/cache/apk/* && \
     groupmod -n rocketchat nogroup && \
diff --git a/ee/apps/omnichannel-transcript/Dockerfile b/ee/apps/omnichannel-transcript/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22.16.0-alpine3.21 AS builder
+FROM node:22.16.0-alpine3.22 AS builder
 
 ARG SERVICE
 
@@ -101,7 +101,7 @@ WORKDIR /app/ee/apps/${SERVICE}
 
 RUN yarn workspaces focus --production
 
-FROM node:22.16.0-alpine3.21
+FROM node:22.16.0-alpine3.22
 
 ARG SERVICE
 
@@ -111,7 +111,7 @@ ENV NODE_ENV=production \
 RUN apk update && \
     apk --no-cache --virtual deps add shadow && \
     # Update OpenSSL
-    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.21
+    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.22
     apk upgrade --no-cache openssl && \
     rm -rf /var/cache/apk/* && \
     groupmod -n rocketchat nogroup && \
diff --git a/ee/apps/presence-service/Dockerfile b/ee/apps/presence-service/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22.16.0-alpine3.21 AS builder
+FROM node:22.16.0-alpine3.22 AS builder
 
 ARG SERVICE
 
@@ -89,7 +89,7 @@ WORKDIR /app/ee/apps/${SERVICE}
 
 RUN yarn workspaces focus --production
 
-FROM node:22.16.0-alpine3.21
+FROM node:22.16.0-alpine3.22
 
 ARG SERVICE
 
@@ -99,7 +99,7 @@ ENV NODE_ENV=production \
 RUN apk update && \
     apk --no-cache --virtual deps add shadow && \
     # Update OpenSSL
-    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.21
+    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.22
     apk upgrade --no-cache openssl && \
     rm -rf /var/cache/apk/* && \
     groupmod -n rocketchat nogroup && \
diff --git a/ee/apps/queue-worker/Dockerfile b/ee/apps/queue-worker/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22.16.0-alpine3.21 AS builder
+FROM node:22.16.0-alpine3.22 AS builder
 
 ARG SERVICE
 
@@ -101,7 +101,7 @@ WORKDIR /app/ee/apps/${SERVICE}
 
 RUN yarn workspaces focus --production
 
-FROM node:22.16.0-alpine3.21
+FROM node:22.16.0-alpine3.22
 
 ARG SERVICE
 
@@ -111,7 +111,7 @@ ENV NODE_ENV=production \
 RUN apk update && \
     apk --no-cache --virtual deps add shadow && \
     # Update OpenSSL
-    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.21
+    # CVE -> https://scout.docker.com/vulnerabilities/id/CVE-2025-9230?s=alpine&n=openssl&ns=alpine&t=apk&osn=alpine&osv=3.22
     apk upgrade --no-cache openssl && \
     rm -rf /var/cache/apk/* && \
     groupmod -n rocketchat nogroup && \
diff --git a/packages/apps-engine/deno-runtime/deno.jsonc b/packages/apps-engine/deno-runtime/deno.jsonc
@@ -4,6 +4,7 @@
 		"@rocket.chat/apps-engine/": "./../src/",
 		"@rocket.chat/ui-kit": "npm:@rocket.chat/ui-kit@^0.31.22",
 		"@std/cli": "jsr:@std/cli@^1.0.9",
+		"@std/io": "jsr:@std/io@^0.225.3",
 		"@std/streams": "jsr:@std/streams@^1.0.16",
 		"acorn": "npm:acorn@8.10.0",
 		"acorn-walk": "npm:acorn-walk@8.2.0",
diff --git a/packages/apps-engine/deno-runtime/deno.lock b/packages/apps-engine/deno-runtime/deno.lock
diff --git a/packages/apps-engine/deno-runtime/lib/messenger.ts b/packages/apps-engine/deno-runtime/lib/messenger.ts
@@ -1,4 +1,4 @@
-import { writeAll } from 'https://deno.land/std@0.216.0/io/write_all.ts';
+import { writeAll } from '@std/io';
 
 import * as jsonrpc from 'jsonrpc-lite';
 
diff --git a/packages/apps-engine/deno-runtime/lib/metricsCollector.ts b/packages/apps-engine/deno-runtime/lib/metricsCollector.ts
@@ -1,4 +1,4 @@
-import { writeAll } from 'https://deno.land/std@0.216.0/io/write_all.ts';
+import { writeAll } from '@std/io';
 import { Queue } from './messenger.ts';
 
 export function collectMetrics() {
