From 276731c261e104f46988f788063dc3d07ff57ced Mon Sep 17 00:00:00 2001 From: kyle-livekit Date: Thu, 22 Oct 2026 16:31:06 -0700 Subject: [PATCH] fix: rebuild runtime image on patched alpine (eMudhra CA compromise) (#5044) Co-authored-by: Claude Opus 5.5 --- Dockerfile | 2 +- cmd/test-server/Dockerfile | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 7d90219e2..733fb5e37 100644 --- a/Dockerfile +++ b/Dockerfile @@ -44,7 +44,7 @@ COPY version/ version/ RUN CGO_ENABLED=0 GOOS=linux GOARCH=$TARGETARCH GO111MODULE=on go build -a -o livekit-server ./cmd/server -FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +FROM alpine:3.24.3@sha256:c6b073f8e9e58d881f6ffba6ebf3b9ebd60b9e7d6e8337018c0e68bb5c356873 # Pull the latest security patches for base packages within the pinned Alpine # release. The digest above is only refreshed by a Renovate PR, so without this diff --git a/cmd/test-server/Dockerfile b/cmd/test-server/Dockerfile index a77142b5c..17ab6cd39 100644 --- a/cmd/test-server/Dockerfile +++ b/cmd/test-server/Dockerfile @@ -37,7 +37,7 @@ COPY version/ version/ RUN CGO_ENABLED=0 GOOS=linux GOARCH=$TARGETARCH GO111MODULE=on go build -a -o livekit-test-server ./cmd/test-server -FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6 +FROM alpine:3.24.3@sha256:c6b073f8e9e58d881f6ffba6ebf3b9ebd60b9e7d6e8337018c0e68bb5c356873 # Pull the latest security patches for base packages within the pinned Alpine # release; the digest above is only refreshed by a Renovate PR. See the note in