fix(deps): pin urllib3>=2.7.0 and idna>=3.15; apk upgrade in nginx stage; form-data override

2026-06-25 13:26:06 +02:00
parent 6e29c7081f
commit 070b402358
3 changed files with 8 additions and 0 deletions
@@ -34,6 +34,9 @@ RUN npm run build
 # ── Production Stage ───────────────────────────────────────────────────────
 FROM nginx:1.31.1-alpine3.23-slim AS production

+# Patch Alpine system packages (resolves openssl CVEs in base image)
+RUN apk update && apk upgrade --no-cache
+
 # Copy built files to nginx
 COPY --from=build /app/dist /usr/share/nginx/html

@@ -20,6 +20,9 @@
    "recharts": "^2.15.4",
    "remark-gfm": "^4.0.1"
  },
+  "overrides": {
+    "form-data": "^4.0.6"
+  },
  "devDependencies": {
    "@tailwindcss/vite": "^4.1.18",
    "@types/react": "^19.2.13",