From 2fece2fceac9dbedd1b206dbce5980493e8a06db Mon Sep 17 00:00:00 2001 From: tiennm99 Date: Mon, 21 Sep 2026 16:17:03 +0700 Subject: [PATCH] build(docker): track the moving golang and alpine majors golang:1.25-alpine and alpine:3.22 were exact-minor pins generating the churn the moving-major house rule exists to avoid; node:24-alpine and the distroless base already followed it. dependabot.yml needs no change: it still covers the same four ecosystems, and will simply have less to propose now that these two also float. --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 153b1d7..ad787ad 100644 --- a/Dockerfile +++ b/Dockerfile @@ -16,7 +16,7 @@ COPY web/ ./ RUN npm run build # --- the binary ------------------------------------------------------------- -FROM golang:1.25-alpine AS build +FROM golang:1-alpine AS build # What GET /version answers and the startup log line carries. .dockerignore # deliberately keeps .git out of the build context — a stale copy should @@ -35,7 +35,7 @@ RUN CGO_ENABLED=0 go build -trimpath -ldflags="-s -w -X main.version=${VERSION}" RUN CGO_ENABLED=0 go build -trimpath -o /out/build-dictionary ./cmd/build-dictionary # --- the dictionary --------------------------------------------------------- -FROM alpine:3.22 AS dict +FROM alpine:3 AS dict # Fetched fresh, not pinned: Wikimedia regenerates the dump monthly and # repoints `latest/`. The derived dictionary is the one thing in this image