From 6b880fbe1590f111c1d1591b3d306f56608c0fc6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 26 Aug 2026 09:47:00 +0000 Subject: [PATCH] chore(deps): bump oven/bun from 1.3.14-alpine to 1.4.0-alpine Bumps oven/bun from 1.3.14-alpine to 1.4.0-alpine. --- updated-dependencies: - dependency-name: oven/bun dependency-version: 1.4.0-alpine dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 19a54d8..d886bdf 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM oven/bun:1.3.14-alpine@sha256:5acc90a93e91ff07bf72aa90a7c9f0fa189765aec90b47bdbf2152d2196383c0 AS builder +FROM oven/bun:1.4.0-alpine@sha256:07235578f79ef8c6f97d94aee7938e76f5cdba5f21ae5dbfdd3d3d38058437eb AS builder WORKDIR /app COPY package.json bun.lock* ./ RUN bun install --frozen-lockfile @@ -6,7 +6,7 @@ COPY tsconfig.json ./ COPY src ./src RUN bun build src/index.ts --target=bun --outdir=dist --minify -FROM oven/bun:1.3.14-alpine@sha256:5acc90a93e91ff07bf72aa90a7c9f0fa189765aec90b47bdbf2152d2196383c0 +FROM oven/bun:1.4.0-alpine@sha256:07235578f79ef8c6f97d94aee7938e76f5cdba5f21ae5dbfdd3d3d38058437eb WORKDIR /app # CI injects a unique value per run so this security-refresh layer never # resolves from cache: a frozen layer once shipped Alpine packages that Trivy's