From e7917aeccbd6d7e05c0a531444b7640eefca4bd5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 29 Aug 2026 13:42:20 +0000 Subject: [PATCH] build(deps): bump oven/bun in the docker-minor-patch group Bumps the docker-minor-patch group with 1 update: oven/bun. Updates `oven/bun` from 1.3.14-alpine to 1.4.0-alpine --- updated-dependencies: - dependency-name: oven/bun dependency-version: 1.4.0-alpine dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker-minor-patch ... Signed-off-by: dependabot[bot] --- Dockerfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index 7843d04..afe2963 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM oven/bun:1.3.14-alpine AS build +FROM oven/bun:1.4.0-alpine AS build WORKDIR /app COPY package.json bun.lock ./ RUN bun install --frozen-lockfile @@ -6,12 +6,12 @@ COPY . . RUN bun run build # Production dependencies only (excludes svelte, vite, tailwindcss, etc.) -FROM oven/bun:1.3.14-alpine AS deps +FROM oven/bun:1.4.0-alpine AS deps WORKDIR /app COPY package.json bun.lock ./ RUN bun install --frozen-lockfile --production -FROM oven/bun:1.3.14-alpine +FROM oven/bun:1.4.0-alpine WORKDIR /app # Patch OS packages (e.g. the base image's openssl) before installing su-exec, # so the shipped runtime image carries Alpine's latest security fixes and clears