From 97906098956be975011f0f3df13d8191937ae099 Mon Sep 17 00:00:00 2001 From: Taras Hlukhovetskyi Date: Thu, 5 Mar 2026 11:59:30 +0200 Subject: [PATCH 1/3] [SecVul] [3.7.x] mlrun-ui Critical --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 428b7a5b7d..fd2f7ae54d 100644 --- a/Dockerfile +++ b/Dockerfile @@ -14,7 +14,7 @@ # # build stage # node:20.18.2-alpine used as 20-alpine -FROM quay.io/mlrun/node:20-alpine as build-stage +FROM quay.io/mlrun/node:22-alpine as build-stage RUN apk update && \ apk upgrade && \ @@ -34,7 +34,7 @@ RUN echo ${COMMIT_HASH} > ./build/COMMIT_HASH && \ echo ${DATE} > ./build/BUILD_DATE # production stage -FROM gcr.io/iguazio/nginx-unprivileged:1.21-alpine as production-stage +FROM gcr.io/iguazio/nginx-unprivileged:1.29-alpine as production-stage # align UID & GID with nginx-unprivileged image UID & GID ARG UID=101 From 46ae9eaa9670f04d522ff0c26bd38f5ffa5562d2 Mon Sep 17 00:00:00 2001 From: Taras Hlukhovetskyi Date: Tue, 10 Mar 2026 12:38:48 +0200 Subject: [PATCH 2/3] fix versions --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index fd2f7ae54d..a451fb2be4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -14,7 +14,7 @@ # # build stage # node:20.18.2-alpine used as 20-alpine -FROM quay.io/mlrun/node:22-alpine as build-stage +FROM quay.io/mlrun/node:22-alpine AS build-stage RUN apk update && \ apk upgrade && \ @@ -34,7 +34,7 @@ RUN echo ${COMMIT_HASH} > ./build/COMMIT_HASH && \ echo ${DATE} > ./build/BUILD_DATE # production stage -FROM gcr.io/iguazio/nginx-unprivileged:1.29-alpine as production-stage +FROM gcr.io/iguazio/nginx-unprivileged:1.28-alpine AS production-stage # align UID & GID with nginx-unprivileged image UID & GID ARG UID=101 From 9a7a4b89ab912eaf5158d0d01c321c3a9582c8cd Mon Sep 17 00:00:00 2001 From: Taras Hlukhovetskyi Date: Tue, 10 Mar 2026 12:53:38 +0200 Subject: [PATCH 3/3] fix version --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index a451fb2be4..015205cde9 100644 --- a/Dockerfile +++ b/Dockerfile @@ -14,7 +14,7 @@ # # build stage # node:20.18.2-alpine used as 20-alpine -FROM quay.io/mlrun/node:22-alpine AS build-stage +FROM quay.io/mlrun/node:22-alpine3.23 AS build-stage RUN apk update && \ apk upgrade && \