From b8d1ed0ff185e2a5c439f2919438957df31ca07a Mon Sep 17 00:00:00 2001
From: JOJO <ca02962@cartahd.com>
Date: Thu, 29 Oct 2026 18:08:28 +0900
Subject: [PATCH] =?UTF-8?q?=F0=9F=92=89=20chore:=20Upgrade=20Bun=20to=20Se?=
 =?UTF-8?q?curity=20Release=201.4.4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bun 1.4.4 patches the bundled Brotli decoder's out-of-bounds write (CVE-2026-111497, GHSA-663w-cv8g-jj2p). The Dockerfile is the only Bun pin; CI already installs the latest Bun via setup-bun.
---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 5fe6f5ae..77ff37e7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # --- Base ---
-FROM oven/bun:1.4.3-alpine AS base
+FROM oven/bun:1.4.4-alpine AS base
 WORKDIR /app
 
 # --- Install ---