diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml index fad10f06625..0588c737b0e 100644 --- a/.github/workflows/checks.yml +++ b/.github/workflows/checks.yml @@ -16,10 +16,10 @@ name: Checks on: push: - branches: [main, v2] + branches: [main, v1] pull_request: # The branches below must be a subset of the branches above - branches: [main, v2] + branches: [main, v1] concurrency: # Pushing new changes to a branch will cancel any in-progress CI runs diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 9fec7b9e2d8..c12837d8189 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -13,10 +13,10 @@ name: "CodeQL" on: push: - branches: [main, v2] + branches: [main, v1] pull_request: # The branches below must be a subset of the branches above - branches: [main, v2] + branches: [main, v1] # Restrict jobs in this workflow to have no permissions by default; permissions # should be granted per job as needed using a dedicated `permissions` block diff --git a/.github/workflows/osv-scanner-unified-action.yml b/.github/workflows/osv-scanner-unified-action.yml index 140e6feabbc..fbd2c77f24e 100644 --- a/.github/workflows/osv-scanner-unified-action.yml +++ b/.github/workflows/osv-scanner-unified-action.yml @@ -16,11 +16,11 @@ name: OSV-Scanner Scheduled Scan on: pull_request: - branches: ["main", "v2"] + branches: ["main", "v1"] schedule: - cron: "12 12 * * 1" push: - branches: ["main", "v2"] + branches: ["main", "v1"] # Restrict jobs in this workflow to have no permissions by default; permissions # should be granted per job as needed using a dedicated `permissions` block diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 5514c606e19..fd6973f98e6 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -12,7 +12,7 @@ on: schedule: - cron: "32 22 * * 6" push: - branches: ["main", "v2"] + branches: ["main", "v1"] # Restrict jobs in this workflow to have no permissions by default; permissions # should be granted per job as needed using a dedicated `permissions` block diff --git a/CHANGELOG.md b/CHANGELOG.md index 832a18f53c3..e0e8e653859 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,16 @@ +# v1.9.2 + +### Fixes: + +- [Bug #1327](https://github.com/google/osv-scanner/pull/1327) Parsing crash on malformed pnpm lockfile. +- [Bug #1377](https://github.com/google/osv-scanner/pull/1377) Warn if a vulnerability is ignored multiple times in the same config. +- [Bug #1394](https://github.com/google/osv-scanner/pull/1394) Guided remediation: handle extraneous/missing packages in package-lock.json more leniently. +- [Bug #1443](https://github.com/google/osv-scanner/issues/1443) Go call analysis now works with Go version up to v1.23.4. +- [Bug #1436](https://github.com/google/osv-scanner/pull/1436) Only fetch Maven snapshots and releases when enabled. +- [Bug #1456](https://github.com/google/osv-scanner/pull/1456) Remove redundant calls from PreFetch. + +# v1.9.1 + OSV-Scanner v2 is coming soon! The next release will start with version `v2.0.0-alpha1`. Here's a peek at some of the exciting upcoming features: @@ -16,8 +29,6 @@ Most breaking changes will only be in the API. More details in the upcoming alph This is the final feature v1 release of osv-scanner, future releases for v1 will only contain bug fixes. -# v1.9.1 - ### Features: - [Feature #1295](https://github.com/google/osv-scanner/pull/1295) Support offline database in fix subcommand. diff --git a/cmd/osv-scanner/__snapshots__/main_test.snap b/cmd/osv-scanner/__snapshots__/main_test.snap index 4b3410a1cae..90f74023d8f 100755 --- a/cmd/osv-scanner/__snapshots__/main_test.snap +++ b/cmd/osv-scanner/__snapshots__/main_test.snap @@ -80,7 +80,7 @@ Loaded filter from: /fixtures/locks-many/osv-scanner.toml "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -234,7 +234,7 @@ Loaded Alpine local db from /osv-scanner/Alpine/all.zip } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -868,7 +868,7 @@ No issues found --- [TestRun/version - 1] -osv-scanner version: 1.9.1 +osv-scanner version: 1.9.2 commit: n/a built at: n/a @@ -991,7 +991,7 @@ Scanned /fixtures/locks-insecure/osv-scanner-flutter-deps.json file as } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -2522,24 +2522,6 @@ No issues found --- -[TestRun_MavenTransitive/resolve_transitive_dependencies_with_native_datda_source - 1] -Scanned /fixtures/maven-transitive/registry.xml file as a pom.xml and found 59 packages -+-------------------------------------+------+-----------+-----------------------------------------------+---------+----------------------------------------+ -| OSV URL | CVSS | ECOSYSTEM | PACKAGE | VERSION | SOURCE | -+-------------------------------------+------+-----------+-----------------------------------------------+---------+----------------------------------------+ -| https://osv.dev/GHSA-cm6r-892j-jv2g | 6.1 | Maven | com.google.android.gms:play-services-basement | 10.0.0 | fixtures/maven-transitive/registry.xml | -| https://osv.dev/GHSA-7rjr-3q55-vv33 | 9.0 | Maven | org.apache.logging.log4j:log4j-core | 2.14.1 | fixtures/maven-transitive/registry.xml | -| https://osv.dev/GHSA-8489-44mv-ggj8 | 6.6 | Maven | org.apache.logging.log4j:log4j-core | 2.14.1 | fixtures/maven-transitive/registry.xml | -| https://osv.dev/GHSA-jfh8-c2jp-5v3q | 10.0 | Maven | org.apache.logging.log4j:log4j-core | 2.14.1 | fixtures/maven-transitive/registry.xml | -| https://osv.dev/GHSA-p6xc-xr62-6r2g | 8.6 | Maven | org.apache.logging.log4j:log4j-core | 2.14.1 | fixtures/maven-transitive/registry.xml | -+-------------------------------------+------+-----------+-----------------------------------------------+---------+----------------------------------------+ - ---- - -[TestRun_MavenTransitive/resolve_transitive_dependencies_with_native_datda_source - 2] - ---- - [TestRun_MavenTransitive/scans_dependencies_from_multiple_registries - 1] Scanned /fixtures/maven-transitive/registry.xml file as a pom.xml and found 59 packages +-------------------------------------+------+-----------+-----------------------------------------------+---------+----------------------------------------+ @@ -2643,21 +2625,7 @@ failed to load image ./fixtures/oci-image/no-file-here.tar: open ./fixtures/oci- [TestRun_OCIImage/scanning_node_modules_using_npm_with_no_packages - 1] Scanning image ../../internal/image/fixtures/test-node_modules-npm-empty.tar -Total 1 packages affected by 4 vulnerabilities (0 Critical, 0 High, 4 Medium, 0 Low, 0 Unknown) from 1 ecosystems. -4 vulnerabilities have fixes available. - -Alpine:v3.19 -+----------------------------------------------------------+ -| Source:docker:../../internal/image/fixtures/test-node_mo | -| dules-npm-empty.tar:/lib/apk/db/installed | -+---------+-------------------+---------------+------------+ -| PACKAGE | INSTALLED VERSION | FIX AVAILABLE | VULN COUNT | -+---------+-------------------+---------------+------------+ -| busybox | 1.36.1-r15 | Fix Available | 4 | -+---------+-------------------+---------------+------------+ - -For the most comprehensive scan results, we recommend using the HTML output: `osv-scanner --format html --output results.html`. -You can also view the full vulnerability list in your terminal with: `osv-scanner --format vertical`. +No issues found --- @@ -2667,8 +2635,8 @@ You can also view the full vulnerability list in your terminal with: `osv-scanne [TestRun_OCIImage/scanning_node_modules_using_npm_with_some_packages - 1] Scanning image ../../internal/image/fixtures/test-node_modules-npm-full.tar -Total 3 packages affected by 6 vulnerabilities (2 Critical, 0 High, 4 Medium, 0 Low, 0 Unknown) from 2 ecosystems. -5 vulnerabilities have fixes available. +Total 2 packages affected by 2 vulnerabilities (2 Critical, 0 High, 0 Medium, 0 Low, 0 Unknown) from 1 ecosystems. +1 vulnerabilities have fixes available. npm +--------------------------------------------------------------+ @@ -2680,15 +2648,6 @@ npm | cryo | 0.0.6 | No fix available | 1 | | minimist | 0.0.8 | Fix Available | 1 | +----------+-------------------+------------------+------------+ -Alpine:v3.19 -+----------------------------------------------------------+ -| Source:docker:../../internal/image/fixtures/test-node_mo | -| dules-npm-full.tar:/lib/apk/db/installed | -+---------+-------------------+---------------+------------+ -| PACKAGE | INSTALLED VERSION | FIX AVAILABLE | VULN COUNT | -+---------+-------------------+---------------+------------+ -| busybox | 1.36.1-r15 | Fix Available | 4 | -+---------+-------------------+---------------+------------+ For the most comprehensive scan results, we recommend using the HTML output: `osv-scanner --format html --output results.html`. You can also view the full vulnerability list in your terminal with: `osv-scanner --format vertical`. @@ -2701,21 +2660,7 @@ You can also view the full vulnerability list in your terminal with: `osv-scanne [TestRun_OCIImage/scanning_node_modules_using_pnpm_with_no_packages - 1] Scanning image ../../internal/image/fixtures/test-node_modules-pnpm-empty.tar -Total 1 packages affected by 4 vulnerabilities (0 Critical, 0 High, 4 Medium, 0 Low, 0 Unknown) from 1 ecosystems. -4 vulnerabilities have fixes available. - -Alpine:v3.19 -+----------------------------------------------------------+ -| Source:docker:../../internal/image/fixtures/test-node_mo | -| dules-pnpm-empty.tar:/lib/apk/db/installed | -+---------+-------------------+---------------+------------+ -| PACKAGE | INSTALLED VERSION | FIX AVAILABLE | VULN COUNT | -+---------+-------------------+---------------+------------+ -| busybox | 1.36.1-r15 | Fix Available | 4 | -+---------+-------------------+---------------+------------+ - -For the most comprehensive scan results, we recommend using the HTML output: `osv-scanner --format html --output results.html`. -You can also view the full vulnerability list in your terminal with: `osv-scanner --format vertical`. +No issues found --- @@ -2725,21 +2670,7 @@ You can also view the full vulnerability list in your terminal with: `osv-scanne [TestRun_OCIImage/scanning_node_modules_using_pnpm_with_some_packages - 1] Scanning image ../../internal/image/fixtures/test-node_modules-pnpm-full.tar -Total 1 packages affected by 4 vulnerabilities (0 Critical, 0 High, 4 Medium, 0 Low, 0 Unknown) from 1 ecosystems. -4 vulnerabilities have fixes available. - -Alpine:v3.19 -+----------------------------------------------------------+ -| Source:docker:../../internal/image/fixtures/test-node_mo | -| dules-pnpm-full.tar:/lib/apk/db/installed | -+---------+-------------------+---------------+------------+ -| PACKAGE | INSTALLED VERSION | FIX AVAILABLE | VULN COUNT | -+---------+-------------------+---------------+------------+ -| busybox | 1.36.1-r15 | Fix Available | 4 | -+---------+-------------------+---------------+------------+ - -For the most comprehensive scan results, we recommend using the HTML output: `osv-scanner --format html --output results.html`. -You can also view the full vulnerability list in your terminal with: `osv-scanner --format vertical`. +No issues found --- @@ -2749,21 +2680,7 @@ You can also view the full vulnerability list in your terminal with: `osv-scanne [TestRun_OCIImage/scanning_node_modules_using_yarn_with_no_packages - 1] Scanning image ../../internal/image/fixtures/test-node_modules-yarn-empty.tar -Total 1 packages affected by 4 vulnerabilities (0 Critical, 0 High, 4 Medium, 0 Low, 0 Unknown) from 1 ecosystems. -4 vulnerabilities have fixes available. - -Alpine:v3.19 -+----------------------------------------------------------+ -| Source:docker:../../internal/image/fixtures/test-node_mo | -| dules-yarn-empty.tar:/lib/apk/db/installed | -+---------+-------------------+---------------+------------+ -| PACKAGE | INSTALLED VERSION | FIX AVAILABLE | VULN COUNT | -+---------+-------------------+---------------+------------+ -| busybox | 1.36.1-r15 | Fix Available | 4 | -+---------+-------------------+---------------+------------+ - -For the most comprehensive scan results, we recommend using the HTML output: `osv-scanner --format html --output results.html`. -You can also view the full vulnerability list in your terminal with: `osv-scanner --format vertical`. +No issues found --- @@ -2773,21 +2690,7 @@ You can also view the full vulnerability list in your terminal with: `osv-scanne [TestRun_OCIImage/scanning_node_modules_using_yarn_with_some_packages - 1] Scanning image ../../internal/image/fixtures/test-node_modules-yarn-full.tar -Total 1 packages affected by 4 vulnerabilities (0 Critical, 0 High, 4 Medium, 0 Low, 0 Unknown) from 1 ecosystems. -4 vulnerabilities have fixes available. - -Alpine:v3.19 -+----------------------------------------------------------+ -| Source:docker:../../internal/image/fixtures/test-node_mo | -| dules-yarn-full.tar:/lib/apk/db/installed | -+---------+-------------------+---------------+------------+ -| PACKAGE | INSTALLED VERSION | FIX AVAILABLE | VULN COUNT | -+---------+-------------------+---------------+------------+ -| busybox | 1.36.1-r15 | Fix Available | 4 | -+---------+-------------------+---------------+------------+ - -For the most comprehensive scan results, we recommend using the HTML output: `osv-scanner --format html --output results.html`. -You can also view the full vulnerability list in your terminal with: `osv-scanner --format vertical`. +No issues found --- diff --git a/cmd/osv-scanner/main_test.go b/cmd/osv-scanner/main_test.go index 1e25da3c03e..eaa4e86bf3c 100644 --- a/cmd/osv-scanner/main_test.go +++ b/cmd/osv-scanner/main_test.go @@ -763,7 +763,7 @@ func TestRun_OCIImage(t *testing.T) { { name: "scanning node_modules using npm with no packages", args: []string{"", "--experimental-oci-image", "../../internal/image/fixtures/test-node_modules-npm-empty.tar"}, - exit: 1, + exit: 0, }, { name: "scanning node_modules using npm with some packages", @@ -773,22 +773,22 @@ func TestRun_OCIImage(t *testing.T) { { name: "scanning node_modules using yarn with no packages", args: []string{"", "--experimental-oci-image", "../../internal/image/fixtures/test-node_modules-yarn-empty.tar"}, - exit: 1, + exit: 0, }, { name: "scanning node_modules using yarn with some packages", args: []string{"", "--experimental-oci-image", "../../internal/image/fixtures/test-node_modules-yarn-full.tar"}, - exit: 1, + exit: 0, }, { name: "scanning node_modules using pnpm with no packages", args: []string{"", "--experimental-oci-image", "../../internal/image/fixtures/test-node_modules-pnpm-empty.tar"}, - exit: 1, + exit: 0, }, { name: "scanning node_modules using pnpm with some packages", args: []string{"", "--experimental-oci-image", "../../internal/image/fixtures/test-node_modules-pnpm-full.tar"}, - exit: 1, + exit: 0, }, } for _, tt := range tests { diff --git a/docs/github-action.md b/docs/github-action.md index c28acdffd09..a70a643713c 100644 --- a/docs/github-action.md +++ b/docs/github-action.md @@ -55,7 +55,7 @@ permissions: jobs: scan-pr: - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.1" + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.2" ``` ### View results @@ -98,7 +98,7 @@ permissions: jobs: scan-scheduled: - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.1" + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.2" ``` As written, the scanner will run on 12:30 pm UTC every Monday, and also on every push to the main branch. You can change the schedule by following the instructions [here](https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#schedule). @@ -133,7 +133,7 @@ permissions: jobs: osv-scan: - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.1" + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.2" with: # Only scan the top level go.mod file without recursively scanning directories since # this is pipeline is about releasing the go module and binary @@ -186,7 +186,7 @@ Examples ```yml jobs: scan-pr: - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.1" + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.2" with: scan-args: |- --lockfile=./path/to/lockfile1 @@ -198,7 +198,7 @@ jobs: ```yml jobs: scan-pr: - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.1" + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.2" with: scan-args: |- --recursive @@ -225,7 +225,7 @@ jobs: name: Vulnerability scanning # makes sure the extraction step is completed before running the scanner needs: extract-deps - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.1" + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.9.2" with: # Download the artifact uploaded in extract-deps step download-artifact: converted-OSV-Scanner-deps diff --git a/docs/installation.md b/docs/installation.md index f50714f7933..c9c18447ce8 100644 --- a/docs/installation.md +++ b/docs/installation.md @@ -77,7 +77,7 @@ Alternatively, you can install this from source by running: go install github.com/google/osv-scanner/cmd/osv-scanner@v1 ``` -This requires Go 1.22.7+ to be installed. +This requires Go 1.22.10+ to be installed. ## Build from source diff --git a/go.mod b/go.mod index d7d6f97a41a..5cf31094794 100644 --- a/go.mod +++ b/go.mod @@ -1,11 +1,11 @@ module github.com/google/osv-scanner -go 1.23 +go 1.22.10 require ( deps.dev/api/v3 v3.0.0-20241010035105-b3ba03369df1 - deps.dev/util/maven v0.0.0-20241218032130-b9621a417c93 - deps.dev/util/resolve v0.0.0-20241218032130-b9621a417c93 + deps.dev/util/maven v0.0.0-20241218001045-3890182485f3 + deps.dev/util/resolve v0.0.0-20241218001045-3890182485f3 deps.dev/util/semver v0.0.0-20241010035105-b3ba03369df1 github.com/BurntSushi/toml v1.4.0 github.com/CycloneDX/cyclonedx-go v0.9.1 @@ -32,9 +32,9 @@ require ( github.com/urfave/cli/v2 v2.27.5 golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f golang.org/x/mod v0.22.0 - golang.org/x/net v0.31.0 - golang.org/x/sync v0.9.0 - golang.org/x/term v0.26.0 + golang.org/x/net v0.33.0 + golang.org/x/sync v0.10.0 + golang.org/x/term v0.27.0 golang.org/x/vuln v1.0.4 google.golang.org/grpc v1.69.0 google.golang.org/protobuf v1.35.2 @@ -99,9 +99,9 @@ require ( github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1 // indirect github.com/yuin/goldmark v1.7.4 // indirect github.com/yuin/goldmark-emoji v1.0.3 // indirect - golang.org/x/crypto v0.29.0 // indirect - golang.org/x/sys v0.27.0 // indirect - golang.org/x/text v0.20.0 // indirect + golang.org/x/crypto v0.31.0 // indirect + golang.org/x/sys v0.28.0 // indirect + golang.org/x/text v0.21.0 // indirect golang.org/x/tools v0.27.0 // indirect google.golang.org/genproto/googleapis/api v0.0.0-20241015192408-796eee8c2d53 // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53 // indirect diff --git a/go.sum b/go.sum index 99d41986ca4..5aaa36d7322 100644 --- a/go.sum +++ b/go.sum @@ -4,12 +4,8 @@ deps.dev/api/v3 v3.0.0-20241010035105-b3ba03369df1 h1:qvrLinmQrkOLmguTE9FpRfC/e2 deps.dev/api/v3 v3.0.0-20241010035105-b3ba03369df1/go.mod h1:DyBY3wNVqRCwvb4tLvz6LL/FupH3FMflEROyQAv2Vi0= deps.dev/util/maven v0.0.0-20241218001045-3890182485f3 h1:2Zjbnw7OgDGr3vM7Epwxgv2cMyeBps4X9AHF1SD82ao= deps.dev/util/maven v0.0.0-20241218001045-3890182485f3/go.mod h1:SBW3EribdkZYk6zxi5oVn/ZECvi4ixb7EGgEWfSimNk= -deps.dev/util/maven v0.0.0-20241218032130-b9621a417c93 h1:D+SVetQOkGNkoLmv+YCKqRswjk9FVnoFLu5dfpNsgfY= -deps.dev/util/maven v0.0.0-20241218032130-b9621a417c93/go.mod h1:gUgWDjJO1XcAzxnS2lqzG3oy74zuKIAQpHwFow7Amb0= -deps.dev/util/resolve v0.0.0-20241010035105-b3ba03369df1 h1:nHefSxxfjdmo+zn/8fEcfSUkTXi+LKnBNvul21ZI9qw= -deps.dev/util/resolve v0.0.0-20241010035105-b3ba03369df1/go.mod h1:XXi6yRYqhtxw5DvGX/mbG6fHSLn8OgoPowNd8EAxDgk= -deps.dev/util/resolve v0.0.0-20241218032130-b9621a417c93 h1:Sshi1EnW++rslYSVyWRnYyRMMFYwCYw7s4uSySLxI9A= -deps.dev/util/resolve v0.0.0-20241218032130-b9621a417c93/go.mod h1:6AvyUZc8710/zuSpCSs0ugtxP1fR+yUOaqjQvXYR8M4= +deps.dev/util/resolve v0.0.0-20241218001045-3890182485f3 h1:9mtMNCV9XDN689ukjYBSKjqQXaqwC666BOP6fV2plBQ= +deps.dev/util/resolve v0.0.0-20241218001045-3890182485f3/go.mod h1:XXi6yRYqhtxw5DvGX/mbG6fHSLn8OgoPowNd8EAxDgk= deps.dev/util/semver v0.0.0-20241010035105-b3ba03369df1 h1:t4P0dCCNIrV84B5d7kOIAzji+HrO303Nrw9BB4ktBy0= deps.dev/util/semver v0.0.0-20241010035105-b3ba03369df1/go.mod h1:jkcH+k02gWHBiZ7G4OnUOkSZ6WDq54Pt5DrOA8FN8Uo= github.com/BurntSushi/toml v1.4.0 h1:kuoIxZQy2WRRk1pttg9asf+WVv6tWQuBNVmK8+nqPr0= @@ -105,6 +101,10 @@ github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399 h1:eMj github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399/go.mod h1:1OCfN199q1Jm3HZlxleg+Dw/mwps2Wbk9frAWm+4FII= github.com/go-git/go-git/v5 v5.12.0 h1:7Md+ndsjrzZxbddRDZjF14qK+NN56sy6wkqaVrjZtys= github.com/go-git/go-git/v5 v5.12.0/go.mod h1:FTM9VKtnI2m65hNI/TenDDDnUf2Q9FHnXYjuz9i5OEY= +github.com/go-logr/logr v1.4.2 h1:6pFjapn8bFcIbiKo3XT4j/BhANplGihG6tvd+8rYgrY= +github.com/go-logr/logr v1.4.2/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= +github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag= +github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE= github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da h1:oI5xCqsCo564l8iNU+DwB5epxmsaqB+rhGL0m5jtYqE= github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc= github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= @@ -117,6 +117,8 @@ github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI= github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= github.com/google/go-containerregistry v0.20.2 h1:B1wPJ1SN/S7pB+ZAimcciVD+r+yV/l/DSArMxlbwseo= github.com/google/go-containerregistry v0.20.2/go.mod h1:z38EKdKh4h7IP2gSfUUqEvalZBqs6AoLeWfUy34nQC8= +github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= +github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/gorilla/css v1.0.1 h1:ntNaBIghp6JmvWnxbZKANoLyuXTPZ4cAMlo6RyhlbO8= github.com/gorilla/css v1.0.1/go.mod h1:BvnYkspnSzMmwRK+b8/xgNPLiIuNZr6vbZBTPQ2A3b0= github.com/hexops/gotextdiff v1.0.3 h1:gitA9+qJrrTCsiCl7+kh75nPqQt1cx4ZkudSTLoUqJM= @@ -253,13 +255,23 @@ github.com/yuin/goldmark v1.7.4/go.mod h1:uzxRWxtg69N339t3louHJ7+O03ezfj6PlliRla github.com/yuin/goldmark-emoji v1.0.3 h1:aLRkLHOuBR2czCY4R8olwMjID+tENfhyFDMCRhbIQY4= github.com/yuin/goldmark-emoji v1.0.3/go.mod h1:tTkZEbwu5wkPmgTcitqddVxY9osFZiavD+r4AzQrh1U= github.com/zclconf/go-cty v1.10.0/go.mod h1:vVKLxnk3puL4qRAv72AO+W99LUD4da90g3uUAzyuvAk= +go.opentelemetry.io/otel v1.31.0 h1:NsJcKPIW0D0H3NgzPDHmo0WW6SptzPdqg/L1zsIm2hY= +go.opentelemetry.io/otel v1.31.0/go.mod h1:O0C14Yl9FgkjqcCZAsE053C13OaddMYr/hz6clDkEJE= +go.opentelemetry.io/otel/metric v1.31.0 h1:FSErL0ATQAmYHUIzSezZibnyVlft1ybhy4ozRPcF2fE= +go.opentelemetry.io/otel/metric v1.31.0/go.mod h1:C3dEloVbLuYoX41KpmAhOqNriGbA+qqH6PQ5E5mUfnY= +go.opentelemetry.io/otel/sdk v1.31.0 h1:xLY3abVHYZ5HSfOg3l2E5LUj2Cwva5Y7yGxnSW9H5Gk= +go.opentelemetry.io/otel/sdk v1.31.0/go.mod h1:TfRbMdhvxIIr/B2N2LQW2S5v9m3gOQ/08KsbbO5BPT0= +go.opentelemetry.io/otel/sdk/metric v1.31.0 h1:i9hxxLJF/9kkvfHppyLL55aW7iIJz4JjxTeYusH7zMc= +go.opentelemetry.io/otel/sdk/metric v1.31.0/go.mod h1:CRInTMVvNhUKgSAMbKyTMxqOBC0zgyxzW55lZzX43Y8= +go.opentelemetry.io/otel/trace v1.31.0 h1:ffjsj1aRouKewfr85U2aGagJ46+MvodynlQ1HYdmJys= +go.opentelemetry.io/otel/trace v1.31.0/go.mod h1:TXZkRk7SM2ZQLtR6eoAWQFIHPvzQ06FJAsO1tJg480A= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4= golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4= golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU= -golang.org/x/crypto v0.29.0 h1:L5SG1JTTXupVV3n6sUqMTeWbjAyfPwoda2DLX8J8FrQ= -golang.org/x/crypto v0.29.0/go.mod h1:+F4F4N5hv6v38hfeYwTdx20oUvLLc+QfrE9Ax9HtgRg= +golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U= +golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk= golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f h1:XdNn9LlyWAhLVp6P/i8QYBW+hlyhrhei9uErw2B5GJo= golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f/go.mod h1:D5SMRVC3C2/4+F/DB1wZsLRnSNimn2Sp/NPsCrsv8ak= golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4= @@ -275,13 +287,13 @@ golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY= golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs= golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc= -golang.org/x/net v0.31.0 h1:68CPQngjLL0r2AlUKiSxtQFKvzRVbnzLwMUn5SzcLHo= -golang.org/x/net v0.31.0/go.mod h1:P4fl1q7dY2hnZFxEk4pPSkDHF+QqjitcnDjUQyMM+pM= +golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I= +golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4= golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.9.0 h1:fEo0HyrW1GIgZdpbhCRO0PkJajUS5H9IFUztCgEo2jQ= -golang.org/x/sync v0.9.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ= +golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -296,15 +308,15 @@ golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.3.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.27.0 h1:wBqf8DvsY9Y/2P8gAfPDEYNuS30J4lPHJxXSb/nJZ+s= -golang.org/x/sys v0.27.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA= +golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc= golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U= -golang.org/x/term v0.26.0 h1:WEQa6V3Gja/BhNxg540hBip/kkaYtRg3cxg4oXSw4AU= -golang.org/x/term v0.26.0/go.mod h1:Si5m1o57C5nBNQo5z1iq+XDijt21BDBDp2bK0QI8e3E= +golang.org/x/term v0.27.0 h1:WP60Sv1nlK1T6SupCHbXzSaN0b9wUmsPoRS9b61A23Q= +golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= @@ -314,8 +326,8 @@ golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8= -golang.org/x/text v0.20.0 h1:gK/Kv2otX8gz+wn7Rmb3vT96ZwuoxnQlY+HlJVj7Qug= -golang.org/x/text v0.20.0/go.mod h1:D4IsuqiFMhST5bX19pQ9ikHC2GsaKyk/oF+pn3ducp4= +golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo= +golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= @@ -326,16 +338,10 @@ golang.org/x/vuln v1.0.4 h1:SP0mPeg2PmGCu03V+61EcQiOjmpri2XijexKdzv8Z1I= golang.org/x/vuln v1.0.4/go.mod h1:NbJdUQhX8jY++FtuhrXs2Eyx0yePo9pF7nPlIjo9aaQ= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= google.golang.org/appengine v1.6.5/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc= -google.golang.org/genproto/googleapis/api v0.0.0-20241007155032-5fefd90f89a9 h1:T6rh4haD3GVYsgEfWExoCZA2o2FmbNyKpTuAxbEFPTg= -google.golang.org/genproto/googleapis/api v0.0.0-20241007155032-5fefd90f89a9/go.mod h1:wp2WsuBYj6j8wUdo3ToZsdxxixbvQNAHqVJrTgi5E5M= google.golang.org/genproto/googleapis/api v0.0.0-20241015192408-796eee8c2d53 h1:fVoAXEKA4+yufmbdVYv+SE73+cPZbbbe8paLsHfkK+U= google.golang.org/genproto/googleapis/api v0.0.0-20241015192408-796eee8c2d53/go.mod h1:riSXTwQ4+nqmPGtobMFyW5FqVAmIs0St6VPp4Ug7CE4= -google.golang.org/genproto/googleapis/rpc v0.0.0-20241007155032-5fefd90f89a9 h1:QCqS/PdaHTSWGvupk2F/ehwHtGc0/GYkT+3GAcR1CCc= -google.golang.org/genproto/googleapis/rpc v0.0.0-20241007155032-5fefd90f89a9/go.mod h1:GX3210XPVPUjJbTUbvwI8f2IpZDMZuPJWDzDuebbviI= google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53 h1:X58yt85/IXCx0Y3ZwN6sEIKZzQtDEYaBWrDvErdXrRE= google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53/go.mod h1:GX3210XPVPUjJbTUbvwI8f2IpZDMZuPJWDzDuebbviI= -google.golang.org/grpc v1.68.0 h1:aHQeeJbo8zAkAa3pRzrVjZlbz6uSfeOXlJNQM0RAbz0= -google.golang.org/grpc v1.68.0/go.mod h1:fmSPC5AsjSBCK54MyHRx48kpOti1/jRfOlwEWywNjWA= google.golang.org/grpc v1.69.0 h1:quSiOM1GJPmPH5XtU+BCoVXcDVJJAzNcoyfC2cCjGkI= google.golang.org/grpc v1.69.0/go.mod h1:vyjdE6jLBI76dgpDojsFGNaHlxdjXN9ghpnd2o7JGZ4= google.golang.org/protobuf v1.35.2 h1:8Ar7bF+apOIoThw1EdZl0p1oWvMqTHmpA2fRTyZO8io= diff --git a/internal/image/__snapshots__/image_test.snap b/internal/image/__snapshots__/image_test.snap index 9d957ad396f..3b4aee77834 100755 --- a/internal/image/__snapshots__/image_test.snap +++ b/internal/image/__snapshots__/image_test.snap @@ -540,205 +540,205 @@ "packages": [ { "name": "alpine-baselayout", - "version": "3.4.3-r2", - "commit": "7749273fed55f6e1df7c9ee6a127f18099f98a94", - "ecosystem": "Alpine:v3.19", + "version": "3.6.8-r0", + "commit": "82d6c06a6d6e8de20a4db05994da6046f0623af3", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "alpine-baselayout-data", - "version": "3.4.3-r2", - "commit": "7749273fed55f6e1df7c9ee6a127f18099f98a94", - "ecosystem": "Alpine:v3.19", + "version": "3.6.8-r0", + "commit": "82d6c06a6d6e8de20a4db05994da6046f0623af3", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "alpine-keys", - "version": "2.4-r1", - "commit": "aab68f8c9ab434a46710de8e12fb3206e2930a59", - "ecosystem": "Alpine:v3.19", + "version": "2.5-r0", + "commit": "6d473fb38effb2389f567b29fb7eb27039b3a279", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "apk-tools", - "version": "2.14.0-r5", - "commit": "33283848034c9885d984c8e8697c645c57324938", - "ecosystem": "Alpine:v3.19", + "name": "alpine-release", + "version": "3.21.0-r0", + "commit": "59962f87e4603deb5bb4d237927fd7eb84c7c9c9", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "busybox", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "name": "apk-tools", + "version": "2.14.6-r2", + "commit": "85fce5ac38cd9990b8910637d750591e3ef55a6c", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "busybox-binsh", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "name": "busybox", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "ca-certificates-bundle", - "version": "20230506-r0", - "commit": "59534a02716a92a10d177a118c34066162eff4a6", - "ecosystem": "Alpine:v3.19", + "name": "busybox-binsh", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "libc-utils", - "version": "0.7.2-r5", - "commit": "988f183cc9d6699930c3e18ccf4a9e36010afb56", - "ecosystem": "Alpine:v3.19", + "name": "ca-certificates-bundle", + "version": "20241010-r0", + "commit": "537f890454d2213fd05cde5e458dfa9c8ef1977f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libcrypto3", - "version": "3.1.4-r5", - "commit": "b784a22cad0c452586b438cb7a597d846fc09ff4", - "ecosystem": "Alpine:v3.19", + "version": "3.3.2-r4", + "commit": "e18f4d0c2080542ef5c4fd329a5be584064658aa", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libgcc", - "version": "13.2.1_git20231014-r0", - "commit": "090e168783a86e5c2ba31fc65921b9715bac62ff", - "ecosystem": "Alpine:v3.19", + "version": "14.2.0-r4", + "commit": "1a03a2a9c9e77f1a07d48b6f6805e72c8c63c03f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5da733c21c3b51193a4fe9fc5be6cfa9a694d13b8d766eb02dbe4b8996547050\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 4ED778F539E3634C779C87C6D7062848A1AB005C 141F07595B7B3FFE74309A937405533BE57C7D57 74F12602B6F1C4E913FAA37AD3A89613643B6201 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 61FC681DFB92A079F1685E77973F295594EC4689 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version", + "originCommand": "RUN /bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5ebbebaf673652c1868a05b442e82ed5b3f536aa03231f285e739d35b912dc5d\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in C0D6248439F1D5604AAFFB4021D900FFDB233756 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version # buildkit", "inBaseImage": true } }, { "name": "libssl3", - "version": "3.1.4-r5", - "commit": "b784a22cad0c452586b438cb7a597d846fc09ff4", - "ecosystem": "Alpine:v3.19", + "version": "3.3.2-r4", + "commit": "e18f4d0c2080542ef5c4fd329a5be584064658aa", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libstdc++", - "version": "13.2.1_git20231014-r0", - "commit": "090e168783a86e5c2ba31fc65921b9715bac62ff", - "ecosystem": "Alpine:v3.19", + "version": "14.2.0-r4", + "commit": "1a03a2a9c9e77f1a07d48b6f6805e72c8c63c03f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5da733c21c3b51193a4fe9fc5be6cfa9a694d13b8d766eb02dbe4b8996547050\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 4ED778F539E3634C779C87C6D7062848A1AB005C 141F07595B7B3FFE74309A937405533BE57C7D57 74F12602B6F1C4E913FAA37AD3A89613643B6201 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 61FC681DFB92A079F1685E77973F295594EC4689 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version", + "originCommand": "RUN /bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5ebbebaf673652c1868a05b442e82ed5b3f536aa03231f285e739d35b912dc5d\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in C0D6248439F1D5604AAFFB4021D900FFDB233756 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version # buildkit", "inBaseImage": true } }, { "name": "musl", - "version": "1.2.4_git20230717-r4", - "commit": "ca7f2ab5e88794e4e654b40776f8a92256f50639", - "ecosystem": "Alpine:v3.19", + "version": "1.2.5-r8", + "commit": "c1ab9dfcb36751c3e9097f0f67e01ad12b2e1f5f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "musl-utils", - "version": "1.2.4_git20230717-r4", - "commit": "ca7f2ab5e88794e4e654b40776f8a92256f50639", - "ecosystem": "Alpine:v3.19", + "version": "1.2.5-r8", + "commit": "c1ab9dfcb36751c3e9097f0f67e01ad12b2e1f5f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "scanelf", - "version": "1.3.7-r2", - "commit": "e65a4f2d0470e70d862ef2b5c412ecf2cb9ad0a6", - "ecosystem": "Alpine:v3.19", + "version": "1.3.8-r1", + "commit": "398a5aee3025ec8a4d0d761e448dc86ac777fa09", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "ssl_client", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "zlib", - "version": "1.3.1-r0", - "commit": "9406f6fc5fca057d990eb0d260d75839eeb34d83", - "ecosystem": "Alpine:v3.19", + "version": "1.3.1-r2", + "commit": "4c2722e7ecc1c5e3ba882429044a101497121223", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } } @@ -758,205 +758,205 @@ "packages": [ { "name": "alpine-baselayout", - "version": "3.4.3-r2", - "commit": "7749273fed55f6e1df7c9ee6a127f18099f98a94", - "ecosystem": "Alpine:v3.19", + "version": "3.6.8-r0", + "commit": "82d6c06a6d6e8de20a4db05994da6046f0623af3", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "alpine-baselayout-data", - "version": "3.4.3-r2", - "commit": "7749273fed55f6e1df7c9ee6a127f18099f98a94", - "ecosystem": "Alpine:v3.19", + "version": "3.6.8-r0", + "commit": "82d6c06a6d6e8de20a4db05994da6046f0623af3", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "alpine-keys", - "version": "2.4-r1", - "commit": "aab68f8c9ab434a46710de8e12fb3206e2930a59", - "ecosystem": "Alpine:v3.19", + "version": "2.5-r0", + "commit": "6d473fb38effb2389f567b29fb7eb27039b3a279", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "apk-tools", - "version": "2.14.0-r5", - "commit": "33283848034c9885d984c8e8697c645c57324938", - "ecosystem": "Alpine:v3.19", + "name": "alpine-release", + "version": "3.21.0-r0", + "commit": "59962f87e4603deb5bb4d237927fd7eb84c7c9c9", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "busybox", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "name": "apk-tools", + "version": "2.14.6-r2", + "commit": "85fce5ac38cd9990b8910637d750591e3ef55a6c", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "busybox-binsh", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "name": "busybox", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "ca-certificates-bundle", - "version": "20230506-r0", - "commit": "59534a02716a92a10d177a118c34066162eff4a6", - "ecosystem": "Alpine:v3.19", + "name": "busybox-binsh", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "libc-utils", - "version": "0.7.2-r5", - "commit": "988f183cc9d6699930c3e18ccf4a9e36010afb56", - "ecosystem": "Alpine:v3.19", + "name": "ca-certificates-bundle", + "version": "20241010-r0", + "commit": "537f890454d2213fd05cde5e458dfa9c8ef1977f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libcrypto3", - "version": "3.1.4-r5", - "commit": "b784a22cad0c452586b438cb7a597d846fc09ff4", - "ecosystem": "Alpine:v3.19", + "version": "3.3.2-r4", + "commit": "e18f4d0c2080542ef5c4fd329a5be584064658aa", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libgcc", - "version": "13.2.1_git20231014-r0", - "commit": "090e168783a86e5c2ba31fc65921b9715bac62ff", - "ecosystem": "Alpine:v3.19", + "version": "14.2.0-r4", + "commit": "1a03a2a9c9e77f1a07d48b6f6805e72c8c63c03f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5da733c21c3b51193a4fe9fc5be6cfa9a694d13b8d766eb02dbe4b8996547050\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 4ED778F539E3634C779C87C6D7062848A1AB005C 141F07595B7B3FFE74309A937405533BE57C7D57 74F12602B6F1C4E913FAA37AD3A89613643B6201 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 61FC681DFB92A079F1685E77973F295594EC4689 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version", + "originCommand": "RUN /bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5ebbebaf673652c1868a05b442e82ed5b3f536aa03231f285e739d35b912dc5d\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in C0D6248439F1D5604AAFFB4021D900FFDB233756 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version # buildkit", "inBaseImage": true } }, { "name": "libssl3", - "version": "3.1.4-r5", - "commit": "b784a22cad0c452586b438cb7a597d846fc09ff4", - "ecosystem": "Alpine:v3.19", + "version": "3.3.2-r4", + "commit": "e18f4d0c2080542ef5c4fd329a5be584064658aa", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libstdc++", - "version": "13.2.1_git20231014-r0", - "commit": "090e168783a86e5c2ba31fc65921b9715bac62ff", - "ecosystem": "Alpine:v3.19", + "version": "14.2.0-r4", + "commit": "1a03a2a9c9e77f1a07d48b6f6805e72c8c63c03f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5da733c21c3b51193a4fe9fc5be6cfa9a694d13b8d766eb02dbe4b8996547050\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 4ED778F539E3634C779C87C6D7062848A1AB005C 141F07595B7B3FFE74309A937405533BE57C7D57 74F12602B6F1C4E913FAA37AD3A89613643B6201 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 61FC681DFB92A079F1685E77973F295594EC4689 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version", + "originCommand": "RUN /bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5ebbebaf673652c1868a05b442e82ed5b3f536aa03231f285e739d35b912dc5d\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in C0D6248439F1D5604AAFFB4021D900FFDB233756 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version # buildkit", "inBaseImage": true } }, { "name": "musl", - "version": "1.2.4_git20230717-r4", - "commit": "ca7f2ab5e88794e4e654b40776f8a92256f50639", - "ecosystem": "Alpine:v3.19", + "version": "1.2.5-r8", + "commit": "c1ab9dfcb36751c3e9097f0f67e01ad12b2e1f5f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "musl-utils", - "version": "1.2.4_git20230717-r4", - "commit": "ca7f2ab5e88794e4e654b40776f8a92256f50639", - "ecosystem": "Alpine:v3.19", + "version": "1.2.5-r8", + "commit": "c1ab9dfcb36751c3e9097f0f67e01ad12b2e1f5f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "scanelf", - "version": "1.3.7-r2", - "commit": "e65a4f2d0470e70d862ef2b5c412ecf2cb9ad0a6", - "ecosystem": "Alpine:v3.19", + "version": "1.3.8-r1", + "commit": "398a5aee3025ec8a4d0d761e448dc86ac777fa09", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "ssl_client", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "zlib", - "version": "1.3.1-r0", - "commit": "9406f6fc5fca057d990eb0d260d75839eeb34d83", - "ecosystem": "Alpine:v3.19", + "version": "1.3.1-r2", + "commit": "4c2722e7ecc1c5e3ba882429044a101497121223", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } } @@ -1015,205 +1015,205 @@ "packages": [ { "name": "alpine-baselayout", - "version": "3.4.3-r2", - "commit": "7749273fed55f6e1df7c9ee6a127f18099f98a94", - "ecosystem": "Alpine:v3.19", + "version": "3.6.8-r0", + "commit": "82d6c06a6d6e8de20a4db05994da6046f0623af3", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "alpine-baselayout-data", - "version": "3.4.3-r2", - "commit": "7749273fed55f6e1df7c9ee6a127f18099f98a94", - "ecosystem": "Alpine:v3.19", + "version": "3.6.8-r0", + "commit": "82d6c06a6d6e8de20a4db05994da6046f0623af3", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "alpine-keys", - "version": "2.4-r1", - "commit": "aab68f8c9ab434a46710de8e12fb3206e2930a59", - "ecosystem": "Alpine:v3.19", + "version": "2.5-r0", + "commit": "6d473fb38effb2389f567b29fb7eb27039b3a279", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "apk-tools", - "version": "2.14.0-r5", - "commit": "33283848034c9885d984c8e8697c645c57324938", - "ecosystem": "Alpine:v3.19", + "name": "alpine-release", + "version": "3.21.0-r0", + "commit": "59962f87e4603deb5bb4d237927fd7eb84c7c9c9", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "busybox", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "name": "apk-tools", + "version": "2.14.6-r2", + "commit": "85fce5ac38cd9990b8910637d750591e3ef55a6c", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "busybox-binsh", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "name": "busybox", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "ca-certificates-bundle", - "version": "20230506-r0", - "commit": "59534a02716a92a10d177a118c34066162eff4a6", - "ecosystem": "Alpine:v3.19", + "name": "busybox-binsh", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "libc-utils", - "version": "0.7.2-r5", - "commit": "988f183cc9d6699930c3e18ccf4a9e36010afb56", - "ecosystem": "Alpine:v3.19", + "name": "ca-certificates-bundle", + "version": "20241010-r0", + "commit": "537f890454d2213fd05cde5e458dfa9c8ef1977f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libcrypto3", - "version": "3.1.4-r5", - "commit": "b784a22cad0c452586b438cb7a597d846fc09ff4", - "ecosystem": "Alpine:v3.19", + "version": "3.3.2-r4", + "commit": "e18f4d0c2080542ef5c4fd329a5be584064658aa", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libgcc", - "version": "13.2.1_git20231014-r0", - "commit": "090e168783a86e5c2ba31fc65921b9715bac62ff", - "ecosystem": "Alpine:v3.19", + "version": "14.2.0-r4", + "commit": "1a03a2a9c9e77f1a07d48b6f6805e72c8c63c03f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5da733c21c3b51193a4fe9fc5be6cfa9a694d13b8d766eb02dbe4b8996547050\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 4ED778F539E3634C779C87C6D7062848A1AB005C 141F07595B7B3FFE74309A937405533BE57C7D57 74F12602B6F1C4E913FAA37AD3A89613643B6201 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 61FC681DFB92A079F1685E77973F295594EC4689 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version", + "originCommand": "RUN /bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5ebbebaf673652c1868a05b442e82ed5b3f536aa03231f285e739d35b912dc5d\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in C0D6248439F1D5604AAFFB4021D900FFDB233756 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version # buildkit", "inBaseImage": true } }, { "name": "libssl3", - "version": "3.1.4-r5", - "commit": "b784a22cad0c452586b438cb7a597d846fc09ff4", - "ecosystem": "Alpine:v3.19", + "version": "3.3.2-r4", + "commit": "e18f4d0c2080542ef5c4fd329a5be584064658aa", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libstdc++", - "version": "13.2.1_git20231014-r0", - "commit": "090e168783a86e5c2ba31fc65921b9715bac62ff", - "ecosystem": "Alpine:v3.19", + "version": "14.2.0-r4", + "commit": "1a03a2a9c9e77f1a07d48b6f6805e72c8c63c03f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5da733c21c3b51193a4fe9fc5be6cfa9a694d13b8d766eb02dbe4b8996547050\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 4ED778F539E3634C779C87C6D7062848A1AB005C 141F07595B7B3FFE74309A937405533BE57C7D57 74F12602B6F1C4E913FAA37AD3A89613643B6201 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 61FC681DFB92A079F1685E77973F295594EC4689 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version", + "originCommand": "RUN /bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5ebbebaf673652c1868a05b442e82ed5b3f536aa03231f285e739d35b912dc5d\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in C0D6248439F1D5604AAFFB4021D900FFDB233756 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version # buildkit", "inBaseImage": true } }, { "name": "musl", - "version": "1.2.4_git20230717-r4", - "commit": "ca7f2ab5e88794e4e654b40776f8a92256f50639", - "ecosystem": "Alpine:v3.19", + "version": "1.2.5-r8", + "commit": "c1ab9dfcb36751c3e9097f0f67e01ad12b2e1f5f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "musl-utils", - "version": "1.2.4_git20230717-r4", - "commit": "ca7f2ab5e88794e4e654b40776f8a92256f50639", - "ecosystem": "Alpine:v3.19", + "version": "1.2.5-r8", + "commit": "c1ab9dfcb36751c3e9097f0f67e01ad12b2e1f5f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "scanelf", - "version": "1.3.7-r2", - "commit": "e65a4f2d0470e70d862ef2b5c412ecf2cb9ad0a6", - "ecosystem": "Alpine:v3.19", + "version": "1.3.8-r1", + "commit": "398a5aee3025ec8a4d0d761e448dc86ac777fa09", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "ssl_client", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "zlib", - "version": "1.3.1-r0", - "commit": "9406f6fc5fca057d990eb0d260d75839eeb34d83", - "ecosystem": "Alpine:v3.19", + "version": "1.3.1-r2", + "commit": "4c2722e7ecc1c5e3ba882429044a101497121223", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } } @@ -1233,205 +1233,205 @@ "packages": [ { "name": "alpine-baselayout", - "version": "3.4.3-r2", - "commit": "7749273fed55f6e1df7c9ee6a127f18099f98a94", - "ecosystem": "Alpine:v3.19", + "version": "3.6.8-r0", + "commit": "82d6c06a6d6e8de20a4db05994da6046f0623af3", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "alpine-baselayout-data", - "version": "3.4.3-r2", - "commit": "7749273fed55f6e1df7c9ee6a127f18099f98a94", - "ecosystem": "Alpine:v3.19", + "version": "3.6.8-r0", + "commit": "82d6c06a6d6e8de20a4db05994da6046f0623af3", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "alpine-keys", - "version": "2.4-r1", - "commit": "aab68f8c9ab434a46710de8e12fb3206e2930a59", - "ecosystem": "Alpine:v3.19", + "version": "2.5-r0", + "commit": "6d473fb38effb2389f567b29fb7eb27039b3a279", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "apk-tools", - "version": "2.14.0-r5", - "commit": "33283848034c9885d984c8e8697c645c57324938", - "ecosystem": "Alpine:v3.19", + "name": "alpine-release", + "version": "3.21.0-r0", + "commit": "59962f87e4603deb5bb4d237927fd7eb84c7c9c9", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "busybox", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "name": "apk-tools", + "version": "2.14.6-r2", + "commit": "85fce5ac38cd9990b8910637d750591e3ef55a6c", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "busybox-binsh", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "name": "busybox", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "ca-certificates-bundle", - "version": "20230506-r0", - "commit": "59534a02716a92a10d177a118c34066162eff4a6", - "ecosystem": "Alpine:v3.19", + "name": "busybox-binsh", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "libc-utils", - "version": "0.7.2-r5", - "commit": "988f183cc9d6699930c3e18ccf4a9e36010afb56", - "ecosystem": "Alpine:v3.19", + "name": "ca-certificates-bundle", + "version": "20241010-r0", + "commit": "537f890454d2213fd05cde5e458dfa9c8ef1977f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libcrypto3", - "version": "3.1.4-r5", - "commit": "b784a22cad0c452586b438cb7a597d846fc09ff4", - "ecosystem": "Alpine:v3.19", + "version": "3.3.2-r4", + "commit": "e18f4d0c2080542ef5c4fd329a5be584064658aa", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libgcc", - "version": "13.2.1_git20231014-r0", - "commit": "090e168783a86e5c2ba31fc65921b9715bac62ff", - "ecosystem": "Alpine:v3.19", + "version": "14.2.0-r4", + "commit": "1a03a2a9c9e77f1a07d48b6f6805e72c8c63c03f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5da733c21c3b51193a4fe9fc5be6cfa9a694d13b8d766eb02dbe4b8996547050\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 4ED778F539E3634C779C87C6D7062848A1AB005C 141F07595B7B3FFE74309A937405533BE57C7D57 74F12602B6F1C4E913FAA37AD3A89613643B6201 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 61FC681DFB92A079F1685E77973F295594EC4689 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version", + "originCommand": "RUN /bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5ebbebaf673652c1868a05b442e82ed5b3f536aa03231f285e739d35b912dc5d\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in C0D6248439F1D5604AAFFB4021D900FFDB233756 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version # buildkit", "inBaseImage": true } }, { "name": "libssl3", - "version": "3.1.4-r5", - "commit": "b784a22cad0c452586b438cb7a597d846fc09ff4", - "ecosystem": "Alpine:v3.19", + "version": "3.3.2-r4", + "commit": "e18f4d0c2080542ef5c4fd329a5be584064658aa", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libstdc++", - "version": "13.2.1_git20231014-r0", - "commit": "090e168783a86e5c2ba31fc65921b9715bac62ff", - "ecosystem": "Alpine:v3.19", + "version": "14.2.0-r4", + "commit": "1a03a2a9c9e77f1a07d48b6f6805e72c8c63c03f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5da733c21c3b51193a4fe9fc5be6cfa9a694d13b8d766eb02dbe4b8996547050\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 4ED778F539E3634C779C87C6D7062848A1AB005C 141F07595B7B3FFE74309A937405533BE57C7D57 74F12602B6F1C4E913FAA37AD3A89613643B6201 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 61FC681DFB92A079F1685E77973F295594EC4689 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version", + "originCommand": "RUN /bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5ebbebaf673652c1868a05b442e82ed5b3f536aa03231f285e739d35b912dc5d\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in C0D6248439F1D5604AAFFB4021D900FFDB233756 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version # buildkit", "inBaseImage": true } }, { "name": "musl", - "version": "1.2.4_git20230717-r4", - "commit": "ca7f2ab5e88794e4e654b40776f8a92256f50639", - "ecosystem": "Alpine:v3.19", + "version": "1.2.5-r8", + "commit": "c1ab9dfcb36751c3e9097f0f67e01ad12b2e1f5f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "musl-utils", - "version": "1.2.4_git20230717-r4", - "commit": "ca7f2ab5e88794e4e654b40776f8a92256f50639", - "ecosystem": "Alpine:v3.19", + "version": "1.2.5-r8", + "commit": "c1ab9dfcb36751c3e9097f0f67e01ad12b2e1f5f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "scanelf", - "version": "1.3.7-r2", - "commit": "e65a4f2d0470e70d862ef2b5c412ecf2cb9ad0a6", - "ecosystem": "Alpine:v3.19", + "version": "1.3.8-r1", + "commit": "398a5aee3025ec8a4d0d761e448dc86ac777fa09", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "ssl_client", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "zlib", - "version": "1.3.1-r0", - "commit": "9406f6fc5fca057d990eb0d260d75839eeb34d83", - "ecosystem": "Alpine:v3.19", + "version": "1.3.1-r2", + "commit": "4c2722e7ecc1c5e3ba882429044a101497121223", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } } @@ -1451,205 +1451,205 @@ "packages": [ { "name": "alpine-baselayout", - "version": "3.4.3-r2", - "commit": "7749273fed55f6e1df7c9ee6a127f18099f98a94", - "ecosystem": "Alpine:v3.19", + "version": "3.6.8-r0", + "commit": "82d6c06a6d6e8de20a4db05994da6046f0623af3", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "alpine-baselayout-data", - "version": "3.4.3-r2", - "commit": "7749273fed55f6e1df7c9ee6a127f18099f98a94", - "ecosystem": "Alpine:v3.19", + "version": "3.6.8-r0", + "commit": "82d6c06a6d6e8de20a4db05994da6046f0623af3", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "alpine-keys", - "version": "2.4-r1", - "commit": "aab68f8c9ab434a46710de8e12fb3206e2930a59", - "ecosystem": "Alpine:v3.19", + "version": "2.5-r0", + "commit": "6d473fb38effb2389f567b29fb7eb27039b3a279", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "apk-tools", - "version": "2.14.0-r5", - "commit": "33283848034c9885d984c8e8697c645c57324938", - "ecosystem": "Alpine:v3.19", + "name": "alpine-release", + "version": "3.21.0-r0", + "commit": "59962f87e4603deb5bb4d237927fd7eb84c7c9c9", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "busybox", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "name": "apk-tools", + "version": "2.14.6-r2", + "commit": "85fce5ac38cd9990b8910637d750591e3ef55a6c", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "busybox-binsh", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "name": "busybox", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "ca-certificates-bundle", - "version": "20230506-r0", - "commit": "59534a02716a92a10d177a118c34066162eff4a6", - "ecosystem": "Alpine:v3.19", + "name": "busybox-binsh", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "libc-utils", - "version": "0.7.2-r5", - "commit": "988f183cc9d6699930c3e18ccf4a9e36010afb56", - "ecosystem": "Alpine:v3.19", + "name": "ca-certificates-bundle", + "version": "20241010-r0", + "commit": "537f890454d2213fd05cde5e458dfa9c8ef1977f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libcrypto3", - "version": "3.1.4-r5", - "commit": "b784a22cad0c452586b438cb7a597d846fc09ff4", - "ecosystem": "Alpine:v3.19", + "version": "3.3.2-r4", + "commit": "e18f4d0c2080542ef5c4fd329a5be584064658aa", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libgcc", - "version": "13.2.1_git20231014-r0", - "commit": "090e168783a86e5c2ba31fc65921b9715bac62ff", - "ecosystem": "Alpine:v3.19", + "version": "14.2.0-r4", + "commit": "1a03a2a9c9e77f1a07d48b6f6805e72c8c63c03f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5da733c21c3b51193a4fe9fc5be6cfa9a694d13b8d766eb02dbe4b8996547050\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 4ED778F539E3634C779C87C6D7062848A1AB005C 141F07595B7B3FFE74309A937405533BE57C7D57 74F12602B6F1C4E913FAA37AD3A89613643B6201 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 61FC681DFB92A079F1685E77973F295594EC4689 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version", + "originCommand": "RUN /bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5ebbebaf673652c1868a05b442e82ed5b3f536aa03231f285e739d35b912dc5d\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in C0D6248439F1D5604AAFFB4021D900FFDB233756 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version # buildkit", "inBaseImage": true } }, { "name": "libssl3", - "version": "3.1.4-r5", - "commit": "b784a22cad0c452586b438cb7a597d846fc09ff4", - "ecosystem": "Alpine:v3.19", + "version": "3.3.2-r4", + "commit": "e18f4d0c2080542ef5c4fd329a5be584064658aa", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libstdc++", - "version": "13.2.1_git20231014-r0", - "commit": "090e168783a86e5c2ba31fc65921b9715bac62ff", - "ecosystem": "Alpine:v3.19", + "version": "14.2.0-r4", + "commit": "1a03a2a9c9e77f1a07d48b6f6805e72c8c63c03f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5da733c21c3b51193a4fe9fc5be6cfa9a694d13b8d766eb02dbe4b8996547050\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 4ED778F539E3634C779C87C6D7062848A1AB005C 141F07595B7B3FFE74309A937405533BE57C7D57 74F12602B6F1C4E913FAA37AD3A89613643B6201 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 61FC681DFB92A079F1685E77973F295594EC4689 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version", + "originCommand": "RUN /bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5ebbebaf673652c1868a05b442e82ed5b3f536aa03231f285e739d35b912dc5d\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in C0D6248439F1D5604AAFFB4021D900FFDB233756 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version # buildkit", "inBaseImage": true } }, { "name": "musl", - "version": "1.2.4_git20230717-r4", - "commit": "ca7f2ab5e88794e4e654b40776f8a92256f50639", - "ecosystem": "Alpine:v3.19", + "version": "1.2.5-r8", + "commit": "c1ab9dfcb36751c3e9097f0f67e01ad12b2e1f5f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "musl-utils", - "version": "1.2.4_git20230717-r4", - "commit": "ca7f2ab5e88794e4e654b40776f8a92256f50639", - "ecosystem": "Alpine:v3.19", + "version": "1.2.5-r8", + "commit": "c1ab9dfcb36751c3e9097f0f67e01ad12b2e1f5f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "scanelf", - "version": "1.3.7-r2", - "commit": "e65a4f2d0470e70d862ef2b5c412ecf2cb9ad0a6", - "ecosystem": "Alpine:v3.19", + "version": "1.3.8-r1", + "commit": "398a5aee3025ec8a4d0d761e448dc86ac777fa09", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "ssl_client", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "zlib", - "version": "1.3.1-r0", - "commit": "9406f6fc5fca057d990eb0d260d75839eeb34d83", - "ecosystem": "Alpine:v3.19", + "version": "1.3.1-r2", + "commit": "4c2722e7ecc1c5e3ba882429044a101497121223", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } } @@ -1669,205 +1669,205 @@ "packages": [ { "name": "alpine-baselayout", - "version": "3.4.3-r2", - "commit": "7749273fed55f6e1df7c9ee6a127f18099f98a94", - "ecosystem": "Alpine:v3.19", + "version": "3.6.8-r0", + "commit": "82d6c06a6d6e8de20a4db05994da6046f0623af3", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "alpine-baselayout-data", - "version": "3.4.3-r2", - "commit": "7749273fed55f6e1df7c9ee6a127f18099f98a94", - "ecosystem": "Alpine:v3.19", + "version": "3.6.8-r0", + "commit": "82d6c06a6d6e8de20a4db05994da6046f0623af3", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "alpine-keys", - "version": "2.4-r1", - "commit": "aab68f8c9ab434a46710de8e12fb3206e2930a59", - "ecosystem": "Alpine:v3.19", + "version": "2.5-r0", + "commit": "6d473fb38effb2389f567b29fb7eb27039b3a279", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "apk-tools", - "version": "2.14.0-r5", - "commit": "33283848034c9885d984c8e8697c645c57324938", - "ecosystem": "Alpine:v3.19", + "name": "alpine-release", + "version": "3.21.0-r0", + "commit": "59962f87e4603deb5bb4d237927fd7eb84c7c9c9", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "busybox", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "name": "apk-tools", + "version": "2.14.6-r2", + "commit": "85fce5ac38cd9990b8910637d750591e3ef55a6c", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "busybox-binsh", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "name": "busybox", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "ca-certificates-bundle", - "version": "20230506-r0", - "commit": "59534a02716a92a10d177a118c34066162eff4a6", - "ecosystem": "Alpine:v3.19", + "name": "busybox-binsh", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { - "name": "libc-utils", - "version": "0.7.2-r5", - "commit": "988f183cc9d6699930c3e18ccf4a9e36010afb56", - "ecosystem": "Alpine:v3.19", + "name": "ca-certificates-bundle", + "version": "20241010-r0", + "commit": "537f890454d2213fd05cde5e458dfa9c8ef1977f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libcrypto3", - "version": "3.1.4-r5", - "commit": "b784a22cad0c452586b438cb7a597d846fc09ff4", - "ecosystem": "Alpine:v3.19", + "version": "3.3.2-r4", + "commit": "e18f4d0c2080542ef5c4fd329a5be584064658aa", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libgcc", - "version": "13.2.1_git20231014-r0", - "commit": "090e168783a86e5c2ba31fc65921b9715bac62ff", - "ecosystem": "Alpine:v3.19", + "version": "14.2.0-r4", + "commit": "1a03a2a9c9e77f1a07d48b6f6805e72c8c63c03f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5da733c21c3b51193a4fe9fc5be6cfa9a694d13b8d766eb02dbe4b8996547050\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 4ED778F539E3634C779C87C6D7062848A1AB005C 141F07595B7B3FFE74309A937405533BE57C7D57 74F12602B6F1C4E913FAA37AD3A89613643B6201 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 61FC681DFB92A079F1685E77973F295594EC4689 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version", + "originCommand": "RUN /bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5ebbebaf673652c1868a05b442e82ed5b3f536aa03231f285e739d35b912dc5d\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in C0D6248439F1D5604AAFFB4021D900FFDB233756 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version # buildkit", "inBaseImage": true } }, { "name": "libssl3", - "version": "3.1.4-r5", - "commit": "b784a22cad0c452586b438cb7a597d846fc09ff4", - "ecosystem": "Alpine:v3.19", + "version": "3.3.2-r4", + "commit": "e18f4d0c2080542ef5c4fd329a5be584064658aa", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "libstdc++", - "version": "13.2.1_git20231014-r0", - "commit": "090e168783a86e5c2ba31fc65921b9715bac62ff", - "ecosystem": "Alpine:v3.19", + "version": "14.2.0-r4", + "commit": "1a03a2a9c9e77f1a07d48b6f6805e72c8c63c03f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5da733c21c3b51193a4fe9fc5be6cfa9a694d13b8d766eb02dbe4b8996547050\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 4ED778F539E3634C779C87C6D7062848A1AB005C 141F07595B7B3FFE74309A937405533BE57C7D57 74F12602B6F1C4E913FAA37AD3A89613643B6201 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 61FC681DFB92A079F1685E77973F295594EC4689 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version", + "originCommand": "RUN /bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' CHECKSUM=\"5ebbebaf673652c1868a05b442e82ed5b3f536aa03231f285e739d35b912dc5d\" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac \u0026\u0026 if [ -n \"${CHECKSUM}\" ]; then set -eu; curl -fsSLO --compressed \"https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\"; echo \"$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in C0D6248439F1D5604AAFFB4021D900FFDB233756 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 rm -f \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version # buildkit", "inBaseImage": true } }, { "name": "musl", - "version": "1.2.4_git20230717-r4", - "commit": "ca7f2ab5e88794e4e654b40776f8a92256f50639", - "ecosystem": "Alpine:v3.19", + "version": "1.2.5-r8", + "commit": "c1ab9dfcb36751c3e9097f0f67e01ad12b2e1f5f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "musl-utils", - "version": "1.2.4_git20230717-r4", - "commit": "ca7f2ab5e88794e4e654b40776f8a92256f50639", - "ecosystem": "Alpine:v3.19", + "version": "1.2.5-r8", + "commit": "c1ab9dfcb36751c3e9097f0f67e01ad12b2e1f5f", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "scanelf", - "version": "1.3.7-r2", - "commit": "e65a4f2d0470e70d862ef2b5c412ecf2cb9ad0a6", - "ecosystem": "Alpine:v3.19", + "version": "1.3.8-r1", + "commit": "398a5aee3025ec8a4d0d761e448dc86ac777fa09", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "ssl_client", - "version": "1.36.1-r15", - "commit": "d1b6f274f29076967826e0ecf6ebcaa5d360272f", - "ecosystem": "Alpine:v3.19", + "version": "1.37.0-r8", + "commit": "79fddc2aa9c64c47fb3da6edeae9570b4e9caa7e", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } }, { "name": "zlib", - "version": "1.3.1-r0", - "commit": "9406f6fc5fca057d990eb0d260d75839eeb34d83", - "ecosystem": "Alpine:v3.19", + "version": "1.3.1-r2", + "commit": "4c2722e7ecc1c5e3ba882429044a101497121223", + "ecosystem": "Alpine:v3.21", "compareAs": "Alpine", "imageOrigin": { "layerID": "\u003cAny value\u003e", - "originCommand": "/bin/sh -c #(nop) ADD file:37a76ec18f9887751cd8473744917d08b7431fc4085097bb6a09d81b41775473 in / ", + "originCommand": "ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit", "inBaseImage": true } } diff --git a/internal/output/__snapshots__/sarif_test.snap b/internal/output/__snapshots__/sarif_test.snap index ec9062ba3e4..475858dca50 100755 --- a/internal/output/__snapshots__/sarif_test.snap +++ b/internal/output/__snapshots__/sarif_test.snap @@ -62,7 +62,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -149,7 +149,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -170,7 +170,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -191,7 +191,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -212,7 +212,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -233,7 +233,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -254,7 +254,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -275,7 +275,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -296,7 +296,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -317,7 +317,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -338,7 +338,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -359,7 +359,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -380,7 +380,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -401,7 +401,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -422,7 +422,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -443,7 +443,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -501,7 +501,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -631,7 +631,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -743,7 +743,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -809,7 +809,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -875,7 +875,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -941,7 +941,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -1061,7 +1061,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -1272,7 +1272,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -1410,7 +1410,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -1468,7 +1468,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -1634,7 +1634,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -1845,7 +1845,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -1983,7 +1983,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -2004,7 +2004,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -2025,7 +2025,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -2046,7 +2046,7 @@ "informationUri": "https://github.com/google/osv-scanner", "name": "osv-scanner", "rules": [], - "version": "1.9.1" + "version": "1.9.2" } }, "results": [] @@ -2104,7 +2104,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -2187,7 +2187,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -2253,7 +2253,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -2319,7 +2319,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -2385,7 +2385,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -2452,7 +2452,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -2536,7 +2536,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -2637,7 +2637,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -2720,7 +2720,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ @@ -2786,7 +2786,7 @@ } } ], - "version": "1.9.1" + "version": "1.9.2" } }, "artifacts": [ diff --git a/internal/spdx/licenses.go b/internal/spdx/licenses.go index 07e0396c521..fed163459b6 100644 --- a/internal/spdx/licenses.go +++ b/internal/spdx/licenses.go @@ -3,6 +3,7 @@ package spdx var IDs = map[string]bool{ "0bsd": true, + "3d-slicer-1.0": true, "aal": true, "abstyles": true, "adacore-doc": true, @@ -24,12 +25,15 @@ var IDs = map[string]bool{ "agpl-3.0-only": true, "agpl-3.0-or-later": true, "aladdin": true, + "amd-newlib": true, "amdplpa": true, "aml": true, "aml-glslang": true, "ampas": true, "antlr-pd": true, "antlr-pd-fallback": true, + "any-osi": true, + "any-osi-perl-modules": true, "apache-1.0": true, "apache-1.1": true, "apache-2.0": true, @@ -50,6 +54,7 @@ var IDs = map[string]bool{ "baekmuk": true, "bahyph": true, "barr": true, + "bcrypt-solar-designer": true, "beerware": true, "bitstream-charter": true, "bitstream-vera": true, @@ -58,11 +63,14 @@ var IDs = map[string]bool{ "blessing": true, "blueoak-1.0.0": true, "boehm-gc": true, + "boehm-gc-without-fee": true, "borceux": true, + "brian-gladman-2-clause": true, "brian-gladman-3-clause": true, "bsd-1-clause": true, "bsd-2-clause": true, "bsd-2-clause-darwin": true, + "bsd-2-clause-first-lines": true, "bsd-2-clause-freebsd": true, "bsd-2-clause-netbsd": true, "bsd-2-clause-patent": true, @@ -103,6 +111,7 @@ var IDs = map[string]bool{ "cal-1.0-combined-work-exception": true, "caldera": true, "caldera-no-preamble": true, + "catharon": true, "catosl-1.1": true, "cc-by-1.0": true, "cc-by-2.0": true, @@ -156,6 +165,8 @@ var IDs = map[string]bool{ "cc-by-sa-3.0-igo": true, "cc-by-sa-4.0": true, "cc-pddc": true, + "cc-pdm-1.0": true, + "cc-sa-1.0": true, "cc0-1.0": true, "cddl-1.0": true, "cddl-1.1": true, @@ -180,6 +191,7 @@ var IDs = map[string]bool{ "clartistic": true, "clips": true, "cmu-mach": true, + "cmu-mach-nodoc": true, "cnri-jython": true, "cnri-python": true, "cnri-python-gpl-compatible": true, @@ -198,12 +210,16 @@ var IDs = map[string]bool{ "cua-opl-1.0": true, "cube": true, "curl": true, + "cve-tou": true, "d-fsl-1.0": true, "dec-3-clause": true, "diffmark": true, "dl-de-by-2.0": true, "dl-de-zero-2.0": true, "doc": true, + "docbook-schema": true, + "docbook-stylesheet": true, + "docbook-xml": true, "dotseqn": true, "drl-1.0": true, "drl-1.1": true, @@ -245,6 +261,7 @@ var IDs = map[string]bool{ "fwlw": true, "gcr-docs": true, "gd": true, + "generic-xts": true, "gfdl-1.1": true, "gfdl-1.1-invariants-only": true, "gfdl-1.1-invariants-or-later": true, @@ -293,8 +310,11 @@ var IDs = map[string]bool{ "gpl-3.0-with-gcc-exception": true, "graphics-gems": true, "gsoap-1.3b": true, + "gtkbook": true, + "gutmann": true, "haskellreport": true, "hdparm": true, + "hidapi": true, "hippocratic-2.1": true, "hp-1986": true, "hp-1989": true, @@ -303,16 +323,25 @@ var IDs = map[string]bool{ "hpnd-doc": true, "hpnd-doc-sell": true, "hpnd-export-us": true, + "hpnd-export-us-acknowledgement": true, "hpnd-export-us-modify": true, + "hpnd-export2-us": true, + "hpnd-fenneberg-livingston": true, + "hpnd-inria-imag": true, + "hpnd-intel": true, "hpnd-kevlin-henney": true, "hpnd-markus-kuhn": true, + "hpnd-merchantability-variant": true, "hpnd-mit-disclaimer": true, + "hpnd-netrek": true, "hpnd-pbmplus": true, "hpnd-sell-mit-disclaimer-xserver": true, "hpnd-sell-regexpr": true, "hpnd-sell-variant": true, "hpnd-sell-variant-mit-disclaimer": true, + "hpnd-sell-variant-mit-disclaimer-rev": true, "hpnd-uc": true, + "hpnd-uc-export-us": true, "htmltidy": true, "ibm-pibs": true, "icu": true, @@ -324,6 +353,7 @@ var IDs = map[string]bool{ "imlib2": true, "info-zip": true, "inner-net-2.0": true, + "innosetup": true, "intel": true, "intel-acpi": true, "interbase-1.0": true, @@ -383,6 +413,8 @@ var IDs = map[string]bool{ "lucida-bitmap-fonts": true, "lzma-sdk-9.11-to-9.20": true, "lzma-sdk-9.22": true, + "mackerras-3-clause": true, + "mackerras-3-clause-acknowledgment": true, "magaz": true, "mailprio": true, "makeindex": true, @@ -390,14 +422,17 @@ var IDs = map[string]bool{ "mcphee-slideshow": true, "metamail": true, "minpack": true, + "mips": true, "miros": true, "mit": true, "mit-0": true, "mit-advertising": true, + "mit-click": true, "mit-cmu": true, "mit-enna": true, "mit-feh": true, "mit-festival": true, + "mit-khronos-old": true, "mit-modern-variant": true, "mit-open-group": true, "mit-testregex": true, @@ -425,7 +460,9 @@ var IDs = map[string]bool{ "nasa-1.3": true, "naumen": true, "nbpl-1.0": true, + "ncbi-pd": true, "ncgl-uk-2.0": true, + "ncl": true, "ncsa": true, "net-snmp": true, "netcdf": true, @@ -449,6 +486,7 @@ var IDs = map[string]bool{ "ntp-0": true, "nunit": true, "o-uda-1.0": true, + "oar": true, "occt-pl": true, "oclc-2.0": true, "odbl-1.0": true, @@ -488,6 +526,7 @@ var IDs = map[string]bool{ "openpbs-2.3": true, "openssl": true, "openssl-standalone": true, + "openvision": true, "opl-1.0": true, "opl-uk-3.0": true, "opubl-1.0": true, @@ -504,11 +543,13 @@ var IDs = map[string]bool{ "php-3.0": true, "php-3.01": true, "pixar": true, + "pkgconf": true, "plexus": true, "pnmstitch": true, "polyform-noncommercial-1.0.0": true, "polyform-small-business-1.0.0": true, "postgresql": true, + "ppl": true, "psf-2.0": true, "psfrag": true, "psutils": true, @@ -527,6 +568,7 @@ var IDs = map[string]bool{ "rsa-md": true, "rscpl": true, "ruby": true, + "ruby-pty": true, "sax-pd": true, "sax-pd-2.0": true, "saxpath": true, @@ -534,6 +576,7 @@ var IDs = map[string]bool{ "schemereport": true, "sendmail": true, "sendmail-8.23": true, + "sendmail-open-source-1.1": true, "sgi-b-1.0": true, "sgi-b-1.1": true, "sgi-b-2.0": true, @@ -546,10 +589,12 @@ var IDs = map[string]bool{ "sissl-1.2": true, "sl": true, "sleepycat": true, + "smail-gpl": true, "smlnj": true, "smppl": true, "snia": true, "snprintf": true, + "softsurfer": true, "soundex": true, "spencer-86": true, "spencer-94": true, @@ -562,6 +607,8 @@ var IDs = map[string]bool{ "sspl-1.0": true, "standardml-nj": true, "sugarcrm-1.1.3": true, + "sun-ppp": true, + "sun-ppp-2000": true, "sunpro": true, "swl": true, "swrule": true, @@ -571,18 +618,23 @@ var IDs = map[string]bool{ "tcp-wrappers": true, "termreadkey": true, "tgppl-1.0": true, + "thirdeye": true, + "threeparttable": true, "tmate": true, "torque-1.1": true, "tosl": true, "tpdl": true, "tpl-1.0": true, + "trustedqsl": true, "ttwl": true, "ttyp0": true, "tu-berlin-1.0": true, "tu-berlin-2.0": true, + "ubuntu-font-1.0": true, "ucar": true, "ucl-1.0": true, "ulem": true, + "umich-merit": true, "unicode-3.0": true, "unicode-dfs-2015": true, "unicode-dfs-2016": true, @@ -602,9 +654,11 @@ var IDs = map[string]bool{ "widget-workshop": true, "wsuipa": true, "wtfpl": true, + "wwl": true, "wxwindows": true, "x11": true, "x11-distribute-modifications-variant": true, + "x11-swapped": true, "xdebug-1.03": true, "xerox": true, "xfig": true, @@ -615,6 +669,7 @@ var IDs = map[string]bool{ "xnet": true, "xpp": true, "xskat": true, + "xzoom": true, "ypl-1.0": true, "ypl-1.1": true, "zed": true, diff --git a/internal/version/version.go b/internal/version/version.go index 995b31d6ea7..802f205dee8 100644 --- a/internal/version/version.go +++ b/internal/version/version.go @@ -1,4 +1,4 @@ package version // OSVVersion is the current release version, you should update this variable when doing a release -var OSVVersion = "1.9.1" +var OSVVersion = "1.9.2" diff --git a/pkg/spdx/licenses.go b/pkg/spdx/licenses.go index c389b690864..8fa375b2893 100644 --- a/pkg/spdx/licenses.go +++ b/pkg/spdx/licenses.go @@ -36,6 +36,7 @@ var IDs = map[string]bool{ "antlr-pd": true, "antlr-pd-fallback": true, "any-osi": true, + "any-osi-perl-modules": true, "apache-1.0": true, "apache-1.1": true, "apache-2.0": true, @@ -167,6 +168,8 @@ var IDs = map[string]bool{ "cc-by-sa-3.0-igo": true, "cc-by-sa-4.0": true, "cc-pddc": true, + "cc-pdm-1.0": true, + "cc-sa-1.0": true, "cc0-1.0": true, "cddl-1.0": true, "cddl-1.1": true, @@ -261,6 +264,7 @@ var IDs = map[string]bool{ "fwlw": true, "gcr-docs": true, "gd": true, + "generic-xts": true, "gfdl-1.1": true, "gfdl-1.1-invariants-only": true, "gfdl-1.1-invariants-or-later": true, @@ -352,6 +356,7 @@ var IDs = map[string]bool{ "imlib2": true, "info-zip": true, "inner-net-2.0": true, + "innosetup": true, "intel": true, "intel-acpi": true, "interbase-1.0": true, @@ -420,6 +425,7 @@ var IDs = map[string]bool{ "mcphee-slideshow": true, "metamail": true, "minpack": true, + "mips": true, "miros": true, "mit": true, "mit-0": true, @@ -586,6 +592,7 @@ var IDs = map[string]bool{ "sissl-1.2": true, "sl": true, "sleepycat": true, + "smail-gpl": true, "smlnj": true, "smppl": true, "snia": true, @@ -614,6 +621,7 @@ var IDs = map[string]bool{ "tcp-wrappers": true, "termreadkey": true, "tgppl-1.0": true, + "thirdeye": true, "threeparttable": true, "tmate": true, "torque-1.1": true, @@ -649,6 +657,7 @@ var IDs = map[string]bool{ "widget-workshop": true, "wsuipa": true, "wtfpl": true, + "wwl": true, "wxwindows": true, "x11": true, "x11-distribute-modifications-variant": true, diff --git a/renovate.json b/renovate.json index 3e42801e6c6..ef69de55080 100644 --- a/renovate.json +++ b/renovate.json @@ -27,7 +27,7 @@ } ], "constraints": { - "go": "1.22.7" + "go": "1.22.10" }, "ignorePaths": ["**/fixtures/**", "**/fixtures-go/**"], "ignoreDeps": ["golang.org/x/vuln"] diff --git a/scripts/build_test_images.sh b/scripts/build_test_images.sh index dcbadb5c5eb..4b1cc30baa4 100755 --- a/scripts/build_test_images.sh +++ b/scripts/build_test_images.sh @@ -7,7 +7,7 @@ function build_docker_image_fixture { output_tar="internal/image/fixtures/$image_name.tar" if [ ! -f "$output_tar" ]; then - docker build internal/image/fixtures/ -f "internal/image/fixtures/$image_name.Dockerfile" -t "osv-scanner/$image_name:latest" + docker buildx build internal/image/fixtures/ -f "internal/image/fixtures/$image_name.Dockerfile" -t "osv-scanner/$image_name:latest" docker image save "osv-scanner/$image_name:latest" -o "$output_tar" echo "finished building $output_tar (did not exist)"