From 80021df617a635828d4409c970fe1970089dedde Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 6 Sep 2026 22:21:56 +0000 Subject: [PATCH] chore(deps): update docker images --- Dockerfile | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Dockerfile b/Dockerfile index 5b33488..c3ba71c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,8 +1,8 @@ -# syntax=docker/dockerfile:1.25 +# syntax=docker/dockerfile:1.27 ######################################### # Base stage - minimal runtime dependencies # Pin to digest for supply chain security (renovate will update) -FROM php:8.5-alpine@sha256:8d7090ce03736b6ecfd739d87a46ab59b5d1d0d837f1ac7c5d2702f1d312f5a0 AS base +FROM php:8.5-alpine@sha256:aa66ee4275e0472bafcd18e35142499fcbda6ac90e641e751418e052e6a0d812 AS base # Security: Create non-root user early RUN addgroup -g 1000 phpbu && \ @@ -49,7 +49,7 @@ ENV COMPOSER_ALLOW_SUPERUSER=1 \ COMPOSER_HOME=/tmp/composer # Install Composer from official image (pinned for reproducibility) -COPY --from=composer:2@sha256:5946476338742b200bb9ff88f8be56275ddae4b3949c72305cb0dbf10cfcb760 /usr/bin/composer /usr/bin/composer +COPY --from=composer:2@sha256:d8f6343d3fae98107426bc49163ccad46ef85aabd4a27d80a74401fab4aba332 /usr/bin/composer /usr/bin/composer # Copy dependency files first (layer caching) COPY --chown=phpbu:phpbu app/composer.json app/composer.lock ./ @@ -77,7 +77,7 @@ ENV COMPOSER_ALLOW_SUPERUSER=1 \ # Note: PHP FTP extension already installed in base-full stage # Install Composer from official image (pinned for reproducibility) -COPY --from=composer:2@sha256:5946476338742b200bb9ff88f8be56275ddae4b3949c72305cb0dbf10cfcb760 /usr/bin/composer /usr/bin/composer +COPY --from=composer:2@sha256:d8f6343d3fae98107426bc49163ccad46ef85aabd4a27d80a74401fab4aba332 /usr/bin/composer /usr/bin/composer # Copy full variant dependency files COPY --chown=phpbu:phpbu app/full/composer.json ./composer.json