chore(docker): bump node from 22-alpine to 26-alpine - #15
Conversation
Bumps node from 22-alpine to 26-alpine. --- updated-dependencies: - dependency-name: node dependency-version: 26-alpine dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![naudit-codereview[bot]](https://avatars.githubusercontent.com/in/4262657?s=60&v=4){kind=small}
There was a problem hiding this comment.
Bumps Node base image to 26-alpine; low-risk version bump with no code changes to review.
Verdict: ✅ approve · 1 inline, 0 ohne Position
Gate: blockt ab High + Medium-Confidence.
🤖 Naudit-Kommandos
Antworte im Thread eines Inline-Kommentars — erste Zeile der Antwort:
@naudit fp <grund>— Fehlalarm. Naudit merkt sich das für dieses Projekt und meidet den Fund künftig.@naudit ok <text>— Finding angenommen/umgesetzt.
Nur Repo-Mitglieder (Developer/Collaborator aufwärts) sind autorisiert. Ein neuer Top-Level-Kommentar wird nicht ausgewertet, es muss eine Antwort auf den Kommentar sein.
|
|
||
| # --- Frontend bauen --- | ||
| FROM node:22-alpine AS frontend | ||
| FROM node:26-alpine AS frontend |
There was a problem hiding this comment.
🟡 Medium · confidence medium
Node 26 is a very new/odd major version (Node's release cadence is even-numbered LTS; 26 would be a future/unreleased or non-LTS line as of this date). Verify this image tag actually exists and is intended (e.g. LTS vs current) before merging, otherwise the build will fail.
Bumps node from 22-alpine to 26-alpine.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)