From 0ea7dd727fba66413311a9eda30212b3f5838f50 Mon Sep 17 00:00:00 2001
From: Manuel Raynaud <manu@raynaud.io>
Date: Tue, 23 Sep 2025 11:21:01 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=92=EF=B8=8F(frontend)=20update=20alpi?=
 =?UTF-8?q?ne=20packages=20in=20production=20image=20(#1425)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Force an update of installed package in the image used for the frontend
in production.
---
 src/frontend/Dockerfile | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/src/frontend/Dockerfile b/src/frontend/Dockerfile
index 58552a87..3562d098 100644
--- a/src/frontend/Dockerfile
+++ b/src/frontend/Dockerfile
@@ -50,7 +50,13 @@ ENV NEXT_PUBLIC_PUBLISH_AS_MIT=${PUBLISH_AS_MIT}
 RUN yarn build
 
 # ---- Front-end image ----
-FROM nginxinc/nginx-unprivileged:alpine3.21 AS frontend-production
+FROM nginxinc/nginx-unprivileged:alpine3.22 AS frontend-production
+
+# Upgrade system packages to install security updates
+USER root
+RUN apk update && \
+  apk upgrade && \
+  rm -rf /var/cache/apk/*
 
 # Un-privileged user running the application
 ARG DOCKER_USER