Merge pull request #1009 from molgenis/fix/cve

chore: bump alpine

Author: marikaris

Dockerfile

@@ -1,10 +1,12 @@
 #FROM --platform=linux/amd64 eclipse-temurin:17.0.12_7-jdk-focal
-FROM --platform=linux/amd64 eclipse-temurin:21.0.10_7-jre-alpine
+FROM --platform=linux/amd64 eclipse-temurin:21-alpine-3.23
 VOLUME /data
 VOLUME /config
 VOLUME /logs
 
 RUN apk update && apk add --no-cache libc6-compat
+RUN apk upgrade --no-cache
+
 
 ARG JAR_FILE
 EXPOSE 8080

build.gradle

@@ -12,7 +12,7 @@
  * - ui/build.gradle
  */
 plugins {
-    id 'org.springframework.boot' version '3.5.6'
+    id 'org.springframework.boot' version '3.5.12'
     id "io.spring.dependency-management" version "1.1.7"
     id "java"
     id "org.sonarqube" version "4.4.1.3373"

ci/ci-build-images/Dockerfile

@@ -1,4 +1,4 @@
-FROM molgenis/ci-build:1.2.4 
+FROM molgenis/ci-build:1.2.4
 
 
 RUN echo "deb https://cran.r-project.org/bin/linux/ubuntu jammy-cran40/" >> /etc/apt/sources.list