Skip to content

Update dependencies in the Dockerfile #4995

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Sep 12, 2025
Merged

Update dependencies in the Dockerfile #4995

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
bb84de4
Enforce npm strict engine
sandhose Sep 12, 2025
6feaed5
Upgrade Node in the Dockerfile to 22.19.0
sandhose Sep 12, 2025
6fa132c
Upgrade cargo-auditable to 0.7.0
sandhose Sep 12, 2025
a5e7554
Upgrade OPA and regal to latest versions
sandhose Sep 12, 2025
80825d2
Fix reference to the regal image
sandhose Sep 12, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .github/actions/build-policies/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,8 @@ runs:
- name: Install Open Policy Agent
uses: open-policy-agent/[email protected]
with:
version: 1.1.0
# Keep in sync with the Dockerfile and policies/Makefile
version: 1.8.0

- name: Build the policies
run: make
Expand Down
3 changes: 2 additions & 1 deletion .github/workflows/ci.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,8 @@ jobs:
- name: Setup Regal
uses: StyraInc/setup-regal@v1
with:
version: 0.29.2
# Keep in sync with policies/Makefile
version: 0.36.1

- name: Lint policies
working-directory: ./policies
Expand Down
9 changes: 5 additions & 4 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,9 +13,10 @@
ARG DEBIAN_VERSION=12
ARG DEBIAN_VERSION_NAME=bookworm
ARG RUSTC_VERSION=1.89.0
ARG NODEJS_VERSION=20.15.0
ARG OPA_VERSION=1.1.0
ARG CARGO_AUDITABLE_VERSION=0.6.6
ARG NODEJS_VERSION=22.19.0
# Keep in sync with .github/actions/build-policies/action.yml and policies/Makefile
ARG OPA_VERSION=1.8.0
ARG CARGO_AUDITABLE_VERSION=0.7.0

##########################################
## Build stage that builds the frontend ##
Expand All @@ -24,7 +25,7 @@ FROM --platform=${BUILDPLATFORM} docker.io/library/node:${NODEJS_VERSION}-${DEBI

WORKDIR /app/frontend

COPY ./frontend/package.json ./frontend/package-lock.json /app/frontend/
COPY ./frontend/.npmrc ./frontend/package.json ./frontend/package-lock.json /app/frontend/
# Network access: to fetch dependencies
RUN --network=default \
npm ci
Expand Down
1 change: 1 addition & 0 deletions frontend/.npmrc
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
engine-strict=true
3 changes: 3 additions & 0 deletions policies/.regal/config.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,9 @@
# Please see LICENSE files in the repository root for full details.

rules:
imports:
unresolved-reference:
level: ignore
style:
external-reference:
level: ignore
Expand Down
6 changes: 4 additions & 2 deletions policies/Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,10 @@
# Set to 1 to run OPA through Docker
DOCKER := 0
PODMAN := 0
OPA_DOCKER_IMAGE := docker.io/openpolicyagent/opa:1.1.0-debug
REGAL_DOCKER_IMAGE := ghcr.io/styrainc/regal:0.31.0
# Keep in sync with Dockerfile and .github/actions/build-policies/action.yml
OPA_DOCKER_IMAGE := docker.io/openpolicyagent/opa:1.8.0-debug
# Keep in sync with .github/workflows/ci.yaml
REGAL_DOCKER_IMAGE := ghcr.io/open-policy-agent/regal:0.36.1

INPUTS := \
common/common.rego \
Expand Down
Loading