Skip to content

fix: bump dockerize in base-server to address CVE-2025-22869#308

Merged
chaptersix merged 1 commit intotemporalio:mainfrom
chaptersix:fix/base-server-dockerize-cve
Feb 25, 2026
Merged

fix: bump dockerize in base-server to address CVE-2025-22869#308
chaptersix merged 1 commit intotemporalio:mainfrom
chaptersix:fix/base-server-dockerize-cve

Conversation

@chaptersix
Copy link
Copy Markdown
Contributor

Summary

  • bump DOCKERIZE_VERSION in docker/base-images/base-server.Dockerfile from v0.9.2 to v0.10.1
  • remove the fixable HIGH vulnerability reported by Trivy in base-server (CVE-2025-22869 in golang.org/x/crypto from the dockerize binary)
  • keep scope limited to the base image dependency bump only

@chaptersix chaptersix requested a review from a team as a code owner February 25, 2026 21:17
@chaptersix
Copy link
Copy Markdown
Contributor Author

chaptersix commented Feb 25, 2026

For reference, here is the upstream dockerize diff between the two versions in this PR:

jwilder/dockerize@v0.9.2...v0.10.1

@chaptersix chaptersix merged commit ce9d244 into temporalio:main Feb 25, 2026
9 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants