bump: nginx to 1.28.1

https://nginx.org/en/CHANGES-1.28

Author: NicolasCARPi

CHANGELOG.md

@@ -3,6 +3,7 @@
 
 # 5.8.0
 
+* bump: nginx to 1.28.1
 * bump: alpine linux to 3.22, golang to 1.25, composer to 2.9.3
 * opencloning: remove raw.githubusercontent.com from CSP allow list (#58)
 * nginx: add /metrics endpoint with openmetrics 1.0 response

Dockerfile

@@ -17,7 +17,7 @@ RUN if [ "$TARGETPLATFORM" = "linux/amd64" ]; then ARCH=amd64; elif [ "$TARGETPL
 # Note: no need to chain the RUN commands here as it's a builder image and nothing will be kept
 FROM alpine:3.22 AS nginx-builder
 
-ENV NGINX_VERSION=1.28.0
+ENV NGINX_VERSION=1.28.1
 # pin nginx modules versions
 # see https://github.com/google/ngx_brotli/issues/120 for the lack of tags
 # BROKEN HASH: ENV NGX_BROTLI_COMMIT_HASH=63ca02abdcf79c9e788d2eedcc388d2335902e52