Upgrade backend dependencies and base images

.github/workflows/release.yml

@@ -39,7 +39,7 @@ jobs:
  - name: Setup Syft
  uses: anchore/sbom-action/download-syft@v0
  - name: Release Docker images and CLI tool binaries
- uses: goreleaser/goreleaser-action@v5
+ uses: goreleaser/goreleaser-action@v6
  with:
  version: latest
  args: release --rm-dist --timeout 60m

cmd/ah/Dockerfile

@@ -1,5 +1,5 @@
 # Build ah
-FROM golang:1.22.3-alpine3.19 AS ah-builder
+FROM golang:1.22.4-alpine3.20 AS ah-builder
 ARG VERSION
 ARG GIT_COMMIT
 WORKDIR /go/src/github.com/artifacthub/ah
@@ -10,7 +10,7 @@ WORKDIR /go/src/github.com/artifacthub/ah/cmd/ah
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-X main.version=$VERSION -X main.gitCommit=$GIT_COMMIT" -o /ah .
 
 # Final stage
-FROM alpine:3.19.1
+FROM alpine:3.20.0
 RUN apk --no-cache add git && addgroup -S ah -g 1000 && adduser -S ah -u 1000 -G ah
 USER 1000
 COPY --from=ah-builder /ah /usr/local/bin

cmd/hub/Dockerfile

@@ -1,5 +1,5 @@
 # Build backend
-FROM golang:1.22.3-alpine3.19 AS backend-builder
+FROM golang:1.22.4-alpine3.20 AS backend-builder
 WORKDIR /go/src/github.com/artifacthub/hub
 COPY go.* ./
 COPY cmd/hub cmd/hub
@@ -8,7 +8,7 @@ WORKDIR /go/src/github.com/artifacthub/hub/cmd/hub
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /hub .
 
 # Build frontend
-FROM node:18-alpine3.19 AS frontend-builder
+FROM node:18-alpine3.20 AS frontend-builder
 RUN apk --no-cache add jq
 WORKDIR /web
 COPY web .
@@ -17,7 +17,7 @@ RUN yarn install
 RUN yarn build
 
 # Build widget
-FROM node:18-alpine3.19 AS widget-builder
+FROM node:18-alpine3.20 AS widget-builder
 WORKDIR /widget
 COPY widget .
 ENV NODE_OPTIONS=--max_old_space_size=4096
@@ -34,7 +34,7 @@ WORKDIR /docs/www
 RUN hugo
 
 # Final stage
-FROM alpine:3.19.1
+FROM alpine:3.20.0
 RUN apk --no-cache add ca-certificates && addgroup -S hub -g 1000 && adduser -S hub -u 1000 -G hub
 USER 1000
 WORKDIR /home/hub

cmd/scanner/Dockerfile

@@ -1,5 +1,5 @@
 # Build scanner
-FROM golang:1.22.3-alpine3.19 AS scanner-builder
+FROM golang:1.22.4-alpine3.20 AS scanner-builder
 WORKDIR /go/src/github.com/artifacthub/scanner
 COPY go.* ./
 COPY cmd/scanner cmd/scanner
@@ -8,12 +8,12 @@ WORKDIR /go/src/github.com/artifacthub/scanner/cmd/scanner
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /scanner .
 
 # Trivy installer
-FROM alpine:3.19.1 AS trivy-installer
+FROM alpine:3.20.0 AS trivy-installer
 RUN apk --no-cache add curl
 RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.50.1
 
 # Final stage
-FROM alpine:3.19.1
+FROM alpine:3.20.0
 RUN apk --no-cache add ca-certificates && addgroup -S scanner -g 1000 && adduser -S scanner -u 1000 -G scanner
 USER 1000
 WORKDIR /home/scanner

cmd/tracker/Dockerfile

@@ -1,5 +1,5 @@
 # Build tracker
-FROM golang:1.22.3-bullseye AS builder
+FROM golang:1.22.4-bullseye AS builder
 WORKDIR /tmp
 ENV LIBTENSORFLOW_TGZ libtensorflow-cpu-linux-x86_64-2.11.0.tar.gz
 RUN wget -q --no-check-certificate https://storage.googleapis.com/tensorflow/libtensorflow/$LIBTENSORFLOW_TGZ

database/migrations/Dockerfile

@@ -1,10 +1,10 @@
 # Build tern
-FROM golang:1.22.3-alpine3.19 AS tern
+FROM golang:1.22.4-alpine3.20 AS tern
 RUN apk --no-cache add git
 RUN go install github.com/jackc/tern@latest
 
 # Build final image
-FROM alpine:3.19.1
+FROM alpine:3.20.0
 RUN addgroup -S db-migrator -g 1000 && adduser -S db-migrator -u 1000 -G db-migrator
 USER 1000
 WORKDIR /home/db-migrator

database/tests/Dockerfile-db-tests

@@ -1,10 +1,10 @@
 # Build tern
-FROM golang:1.22.3-alpine3.19 AS tern
+FROM golang:1.22.4-alpine3.20 AS tern
 RUN apk --no-cache add git
 RUN go get -u github.com/jackc/tern
 
 # Build final image
-FROM alpine:3.19.1
+FROM alpine:3.20.0
 RUN apk --no-cache add git perl-app-cpanminus postgresql-client
 RUN cpanm --no-wget TAP::Parser::SourceHandler::pgTAP
 RUN addgroup -S db-tests && adduser -S db-tests -G db-tests