Merge pull request #1878 from shlinkio/develop

Release 4.7.1

Author: acelaya

.github/workflows/ci.yml

@@ -11,6 +11,6 @@ jobs:
   ci:
     uses: shlinkio/github-actions/.github/workflows/web-app-ci.yml@main
     with:
-      node-version: 22.x
+      node-version: 24.x
       publish-coverage: true
       install-playwright: true

.github/workflows/deploy-preview.yml

@@ -9,14 +9,14 @@ jobs:
     continue-on-error: true
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           ref: ${{ github.event.pull_request.head.ref }}
       - name: Use node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22.10
+          node-version: 24.14
       - name: Build
         run: |
           npm ci && \

.github/workflows/publish-release.yml

@@ -10,11 +10,11 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Use node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22.10
+          node-version: 24.14
       - name: Generate release assets
         run: npm ci && VERSION=${GITHUB_REF#refs/tags/v} npm run build:dist
       - name: Publish release with assets

CHANGELOG.md

@@ -4,6 +4,23 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org).
 
+## [4.7.1] - 2026-05-15
+### Added
+* *Nothing*
+
+### Changed
+* Update dependencies
+
+### Deprecated
+* *Nothing*
+
+### Removed
+* *Nothing*
+
+### Fixed
+* [#1876](https://github.com/shlinkio/shlink-web-client/issues/1876) Upgrade docker image to nginx 1.30.1 to address [CVE-2026-42945](https://www.cve.org/CVERecord?id=CVE-2026-42945).
+
+
 ## [4.7.0] - 2026-02-04
 ### Added
 * [shlink-web-component] Add support for Shlink 5.0.0, by supporting date-based redirect conditions.

Dockerfile

@@ -1,10 +1,10 @@
-FROM node:25.5-alpine AS node
+FROM node:26.1-alpine AS node
 COPY . /shlink-web-client
 ARG VERSION="latest"
 ENV VERSION=${VERSION}
 RUN cd /shlink-web-client && npm ci && node --run build
 
-FROM nginxinc/nginx-unprivileged:1.29-alpine
+FROM nginxinc/nginx-unprivileged:1.30.1-alpine
 ARG UID=101
 LABEL maintainer="Alejandro Celaya <alejandro@alejandrocelaya.com>"
 

dev.Dockerfile

@@ -1,6 +1,6 @@
-FROM mcr.microsoft.com/playwright:v1.58.1-noble
+FROM mcr.microsoft.com/playwright:v1.59.1-noble
 
-ENV NODE_VERSION 22.14
+ENV NODE_VERSION 24.14
 ENV TINI_VERSION v0.19.0
 
 # Install Node.js