Skip to content

Update image to fix vulnerabilities#41

Merged
bmblb merged 2 commits intomainfrom
fix/cve-issues
Jan 28, 2026
Merged

Update image to fix vulnerabilities#41
bmblb merged 2 commits intomainfrom
fix/cve-issues

Conversation

@bmblb
Copy link
Collaborator

@bmblb bmblb commented Jan 28, 2026

No description provided.

bmblb added 2 commits January 28, 2026 18:47
update packages
add run configuration to run local container with external volume
@bmblb bmblb requested a review from Copilot January 28, 2026 15:01
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the Docker base image and several dependencies to address security vulnerabilities. The changes include upgrading Node.js, express, puppeteer, and other packages to newer versions, along with corresponding code adjustments to maintain compatibility.

Changes:

  • Updated Node.js base image from 24.9.0 to 25 in Dockerfile
  • Upgraded multiple npm packages including express, puppeteer, express-request-id, and muhammara
  • Modified WebServer.js to accommodate breaking changes in express-request-id v3
  • Added tar version override to address security vulnerabilities

Reviewed changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated no comments.

File Description
Dockerfile Updates Node.js base image from 24.9.0-bookworm-slim to 25-slim
package.json Bumps version to 2.3.0 and updates dependencies with security fixes, adds tar override
src/server/WebServer.js Adjusts express-request-id usage for v3 API changes and improves resource path handling
.run/Build pdf server image.run.xml Adds new Docker run configuration for building and testing the server image

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@bmblb bmblb linked an issue Jan 28, 2026 that may be closed by this pull request
@bmblb bmblb merged commit 0ade983 into main Jan 28, 2026
4 of 5 checks passed
@bmblb bmblb deleted the fix/cve-issues branch January 28, 2026 15:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Upgrade docker image to get rid of CVEs

1 participant