chore(deps): update pinned Debian package versions to latest - #371
Merged
Conversation
- ca-certificates (bookworm): 20230311+deb12u1 → 20250419~deb12u1 - dnsutils (bookworm): 1:9.18.49-1~deb12u1 → 1:9.18.49-1~deb12u2 - libssl-dev (trixie): 3.5.6-1~deb13u2 → 3.5.7-1~deb13u2 - openssl (trixie): 3.5.6-1~deb13u2 → 3.5.7-1~deb13u2 - libtiff5-dev (trixie): 4.7.0-3+deb13u2 → 4.7.0-3+deb13u3 Co-authored-by: bdossantos <245284+bdossantos@users.noreply.github.com>
Copilot created this pull request from a session on behalf of
bdossantos
August 30, 2026 12:14
View session
bdossantos
marked this pull request as ready for review
August 30, 2026 12:14
Contributor
There was a problem hiding this comment.
🟢 Approval recommended
The changes are limited to package-version pin bumps and appear consistent with the stated goal of keeping Debian package pins current.
Pull request overview
This PR updates pinned Debian apt package versions in several Dockerfiles to the latest available releases for Debian 12 (bookworm) and Debian 13 (trixie), keeping images reproducible while picking up security/maintenance updates.
Changes:
- Bump
ca-certificatespins in bookworm-based images anddnsutilsindnscrypt-proxy. - Bump
openssl/libssl-devpins in trixie-based images (tor,thumbor). - Bump
libtiff5-devpin inthumbor(trixie).
File summaries
| File | Description |
|---|---|
| dockerfiles/tor/Dockerfile | Updates openssl/libssl-dev pins in both build and runtime stages for Debian 13. |
| dockerfiles/thumbor/Dockerfile | Updates libssl-dev and libtiff5-dev pins for Debian 13 build dependencies. |
| dockerfiles/pint/Dockerfile | Updates bookworm ca-certificates pin. |
| dockerfiles/pingdom-exporter/Dockerfile | Updates bookworm ca-certificates pin. |
| dockerfiles/dnscrypt-proxy/Dockerfile | Updates bookworm ca-certificates and dnsutils pins. |
Review details
- Files reviewed: 5/5 changed files
- Comments generated: 1
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| libtorsocks=2.5.0-1+deb13u1 \ | ||
| libssl-dev=3.5.6-1~deb13u2 \ | ||
| openssl=3.5.6-1~deb13u2 \ | ||
| libssl-dev=3.5.7-1~deb13u2 \ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps outdated pinned apt package versions across Dockerfiles to their latest available in bookworm and trixie.
Changes
bookworm (
dnscrypt-proxy,pingdom-exporter,pint):ca-certificates:20230311+deb12u1→20250419~deb12u1dnsutils:1:9.18.49-1~deb12u1→1:9.18.49-1~deb12u2trixie (
thumbor,tor):libssl-dev/openssl:3.5.6-1~deb13u2→3.5.7-1~deb13u2libtiff5-dev:4.7.0-3+deb13u2→4.7.0-3+deb13u3tor/Dockerfileupdated in both build and run stagesAll other pinned packages were already at their latest available versions. Versions verified via
apt-cache showagainst the officialdebian:12-slimanddebian:13-slimimages.