From 08a1d0fceba36fc1cfce4d0e741a3b14a19750db Mon Sep 17 00:00:00 2001 From: rzstudiospace Date: Thu, 6 Jun 2024 21:39:44 -0400 Subject: [PATCH 1/4] Update Dockerfile --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 7a730f9cdf..fc23af4fe3 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM node:18.12.1 +FROM node:18.17.1 RUN npm install -g npm@9.1.3 From cb1cef1024ba67cc62c5c58bc8aa0d1b49e2b35a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 7 Jun 2024 01:47:32 +0000 Subject: [PATCH 2/4] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN12-GLIBC-5927132 - https://snyk.io/vuln/SNYK-DEBIAN12-GLIBC-5927132 - https://snyk.io/vuln/SNYK-DEBIAN12-GLIBC-5927132 - https://snyk.io/vuln/SNYK-DEBIAN12-GLIBC-5927132 - https://snyk.io/vuln/SNYK-DEBIAN12-NGHTTP2-5953379 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index fc23af4fe3..499ffb9d27 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM node:18.17.1 +FROM node:18.20.2 RUN npm install -g npm@9.1.3 From c2cc701998be2f4bea4e09163e37b145e7a8daaf Mon Sep 17 00:00:00 2001 From: rzstudiospace Date: Thu, 6 Jun 2024 22:08:06 -0400 Subject: [PATCH 3/4] Create npm-grunt.yml --- .github/workflows/npm-grunt.yml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 .github/workflows/npm-grunt.yml diff --git a/.github/workflows/npm-grunt.yml b/.github/workflows/npm-grunt.yml new file mode 100644 index 0000000000..1f2d88e1fb --- /dev/null +++ b/.github/workflows/npm-grunt.yml @@ -0,0 +1,28 @@ +name: NodeJS with Grunt + +on: + push: + branches: [ "main" ] + pull_request: + branches: [ "main" ] + +jobs: + build: + runs-on: ubuntu-latest + + strategy: + matrix: + node-version: [14.x, 16.x, 18.x] + + steps: + - uses: actions/checkout@v4 + + - name: Use Node.js ${{ matrix.node-version }} + uses: actions/setup-node@v3 + with: + node-version: ${{ matrix.node-version }} + + - name: Build + run: | + npm install + grunt From 513b61631cc9d35369c7cb32c9931a9dff3a77ad Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 7 Jun 2024 02:11:52 +0000 Subject: [PATCH 4/4] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN12-GIT-6846203 - https://snyk.io/vuln/SNYK-DEBIAN12-GIT-6846203 - https://snyk.io/vuln/SNYK-DEBIAN12-ZLIB-6008963 - https://snyk.io/vuln/SNYK-DEBIAN12-ZLIB-6008963 - https://snyk.io/vuln/SNYK-DEBIAN12-GDKPIXBUF-6207393 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 499ffb9d27..fa5b9755c5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM node:18.20.2 +FROM node:20.13.1-bookworm-slim RUN npm install -g npm@9.1.3