Merge pull request #607 from Ouranosinc/security-fixes

Ouranosinc · Apr 26, 2024 · 8af758f · 8af758f
2 parents bb33e3d + 154736d
commit 8af758f
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 2 deletions.
diff --git a/.github/workflows/label.yml b/.github/workflows/label.yml
@@ -16,4 +16,5 @@ jobs:
     steps:
     - uses: actions/labeler@v4.3.0
       with:
+        sync-labels: ''
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -9,7 +9,9 @@ Changes
 `Unreleased <https://github.com/Ouranosinc/Magpie/tree/master>`_ (latest)
 ------------------------------------------------------------------------------------
 
-* Nothing new for the moment.
+Features / Changes
+~~~~~~~~~~~~~~~~~~~~~
+* Security fix: bump Docker base ``python:3.11-alpine3.19``.
 
 .. _changes_4.0.0:
 

diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11-alpine3.17
+FROM python:3.11-alpine3.19
 LABEL Description="Runs Magpie AuthN/AuthZ service for REST-API and UI interfaces."
 LABEL Maintainer="Francis Charette-Migneault <francis.charette-migneault@crim.ca>"
 LABEL Vendor="CRIM"