4 次代碼提交 f7fe172335 ... a5b806aac0

作者 SHA1 備註 提交日期
  Fabian Peter Hammerle a5b806aac0 upgrade git package to v1:2.39.5-0+deb12u2 (CVE-2024-50349, CVE-2024-52006) 9 月之前
  dependabot[bot] acf8785ac9 build(deps): bump docker/setup-buildx-action from 3.9.0 to 3.10.0 (#89) 9 月之前
  dependabot[bot] cac4d97dbf build(deps): bump docker/build-push-action from 6.13.0 to 6.15.0 (#88) 9 月之前
  dependabot[bot] 8180f93379 build(deps): bump docker/setup-qemu-action from 3.4.0 to 3.6.0 (#90) 9 月之前
共有 2 個文件被更改,包括 4 次插入4 次删除
  1. 3 3
      .github/workflows/container-image.yml
  2. 1 1
      Dockerfile

+ 3 - 3
.github/workflows/container-image.yml

@@ -12,14 +12,14 @@ jobs:
   docker-build:
     runs-on: ubuntu-20.04
     steps:
-    - uses: docker/setup-qemu-action@v3.4.0
-    - uses: docker/setup-buildx-action@v3.9.0
+    - uses: docker/setup-qemu-action@v3.6.0
+    - uses: docker/setup-buildx-action@v3.10.0
     # > By default, this action uses the Git context so you don't need to use
     # > the actions/checkout action to checkout the repository because this
     # > will be done directly by buildkit. [...]
     # > any file mutation in the steps that precede [...] will be ignored
     # https://github.com/marketplace/actions/build-and-push-docker-images
-    - uses: docker/build-push-action@v6.13.0
+    - uses: docker/build-push-action@v6.15.0
       with:
         # git-annex package not available for armhf:
         # https://web.archive.org/web/20230630055644/https://packages.debian.org/bookworm/git

+ 1 - 1
Dockerfile

@@ -7,7 +7,7 @@ ARG GITOLITE_PACKAGE_VERSION=3.6.12-1
 # https://salsa.debian.org/haskell-team/git-annex/-/blob/master/debian/changelog
 ARG GIT_ANNEX_PACKAGE_VERSION=10.20230126-3
 # https://github.com/git/git/tree/master/Documentation/RelNotes
-ARG GIT_PACKAGE_VERSION=1:2.39.5-0+deb12u1
+ARG GIT_PACKAGE_VERSION=1:2.39.5-0+deb12u2
 # https://www.openssh.com/releasenotes.html
 # https://salsa.debian.org/ssh-team/openssh/-/blob/master/debian/changelog
 ARG OPENSSH_SERVER_PACKAGE_VERSION=1:9.2p1-2+deb12u5