chore: fix docker image scans (#3272)

mkurapov · sanducb · web-flow · commit aa5a17db72a7 · 2025-02-05T16:04:53.000+02:00
* chore: fix path-to-regexp lib

* chore: update base node image version in Dockerfiles

---------

Co-authored-by: bsanduc &lt;bogdan.sandu@breakpointit.eu&gt;
diff --git a/localenv/mock-account-servicing-entity/Dockerfile b/localenv/mock-account-servicing-entity/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.19 AS base
+FROM node:20-alpine3.20 AS base
 
 WORKDIR /home/rafiki
 
@@ -42,7 +42,7 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     --frozen-lockfile
 RUN pnpm --filter mock-account-servicing-entity build
 
-FROM node:20-alpine3.19 AS runner
+FROM node:20-alpine3.20 AS runner
 
 WORKDIR /home/rafiki
 
diff --git a/package.json b/package.json
@@ -79,7 +79,9 @@
       "braces@<3.0.3": ">=3.0.3",
       "@grpc/grpc-js@>=1.10.0 <1.10.9": ">=1.10.9",
       "dset@<3.1.4": ">=3.1.4",
-      "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.5"
+      "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.5",
+      "path-to-regexp@>=0.1.7": "^0.1.12",
+      "path-to-regexp@>=6.3.0": "^6.3.0"
     }
   }
 }
diff --git a/packages/auth/Dockerfile.dev b/packages/auth/Dockerfile.dev
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.19
+FROM node:20-alpine3.20
 
 WORKDIR /home/rafiki
 
diff --git a/packages/auth/Dockerfile.prod b/packages/auth/Dockerfile.prod
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.19 AS base
+FROM node:20-alpine3.20 AS base
 
 WORKDIR /home/rafiki
 
@@ -43,7 +43,7 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     --frozen-lockfile
 RUN pnpm --filter auth build
 
-FROM node:20-alpine3.19 AS runner
+FROM node:20-alpine3.20 AS runner
 
 WORKDIR /home/rafiki
 
diff --git a/packages/backend/Dockerfile.dev b/packages/backend/Dockerfile.dev
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.19
+FROM node:20-alpine3.20
 
 WORKDIR /home/rafiki
 
diff --git a/packages/backend/Dockerfile.prod b/packages/backend/Dockerfile.prod
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.19 AS base
+FROM node:20-alpine3.20 AS base
 
 WORKDIR /home/rafiki
 
@@ -43,7 +43,7 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     --frozen-lockfile
 RUN pnpm --filter backend build
 
-FROM node:20-alpine3.19 AS runner
+FROM node:20-alpine3.20 AS runner
 
 WORKDIR /home/rafiki
 
diff --git a/packages/frontend/Dockerfile.dev b/packages/frontend/Dockerfile.dev
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.19 AS base
+FROM node:20-alpine3.20 AS base
 
 WORKDIR /home/rafiki
 
diff --git a/packages/frontend/Dockerfile.prod b/packages/frontend/Dockerfile.prod
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.19 AS base
+FROM node:20-alpine3.20 AS base
 
 WORKDIR /home/rafiki
 
@@ -40,7 +40,7 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     --frozen-lockfile
 RUN pnpm --filter frontend build
 
-FROM node:20-alpine3.19 AS runner
+FROM node:20-alpine3.20 AS runner
 
 WORKDIR /home/rafiki
 
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

Original file line number	Diff line number	Diff line change
`@@ -79,7 +79,9 @@`
`79`	`79`	`"braces@<3.0.3": ">=3.0.3",`
`80`	`80`	`"@grpc/grpc-js@>=1.10.0 <1.10.9": ">=1.10.9",`
`81`	`81`	`"dset@<3.1.4": ">=3.1.4",`
`82`		`- "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.5"`
	`82`	`+ "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.5",`
	`83`	`+ "path-to-regexp@>=0.1.7": "^0.1.12",`
	`84`	`+ "path-to-regexp@>=6.3.0": "^6.3.0"`
`83`	`85`	`}`
`84`	`86`	`}`
`85`	`87`	`}`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM node:20-alpine3.19`
	`1`	`+FROM node:20-alpine3.20`
`2`	`2`
`3`	`3`	`WORKDIR /home/rafiki`
`4`	`4`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM node:20-alpine3.19 AS base`
	`1`	`+FROM node:20-alpine3.20 AS base`
`2`	`2`
`3`	`3`	`WORKDIR /home/rafiki`
`4`	`4`