DoDiODev commented on issue #9258:
URL: https://github.com/apache/devlake/issues/9258#issuecomment-6442412787

   Thanks for the detailed report. I can confirm it, and newer base tags do not 
fix it yet:
   
   - `nginxinc/nginx-unprivileged:1.31.7` (the bump in Dependabot #9253) still 
ships `libbrotli1 1.1.0-2+b7`
   - `grafana/grafana:13.2.4` (current `main`) still ships `brotli-libs 
1.2.0-r1`
   
   #9264 adds `apt-get upgrade` / `apk upgrade` to the three Dockerfiles, as 
you suggested. Local builds of the PR branch contain the fixed packages:
   
   | Image | Brotli |
   | --- | --- |
   | `devlake` | `libbrotli1 1.0.9-2+deb12u1` |
   | `devlake-config-ui` | `libbrotli1 1.1.0-2+deb13u1` |
   | `devlake-dashboard` | `brotli-libs 1.2.1-r0` |
   
   A maintainer still needs to publish new images (a new release or a re-push 
of `v1.0.3-beta18`) after the merge.
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to