run CI for #8100#8101
Conversation
The service, migrations and CLI Dockerfiles ran apt-get update followed only by apt-get install of a few specific packages, so Debian security patches inherited from the pinned node:*-slim base image were never applied. Add apt-get upgrade so published images pick up fixed OS packages at build time.
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request adds apt-get upgrade to the CLI, migrations, and services Dockerfiles. To prevent builds from hanging in non-interactive environments like CI, prepend DEBIAN_FRONTEND=noninteractive to the apt-get commands.
Important
The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.
| FROM node:24.14.1-slim | ||
|
|
||
| RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates git && rm -rf /var/lib/apt/lists/* | ||
| RUN apt-get update && apt-get upgrade -y --no-install-recommends && apt-get install -y --no-install-recommends ca-certificates git && rm -rf /var/lib/apt/lists/* |
There was a problem hiding this comment.
Running apt-get upgrade can sometimes trigger interactive prompts (e.g., for configuration choices or service restarts), which can cause the Docker build to hang or fail in non-interactive environments like CI. Prepend DEBIAN_FRONTEND=noninteractive to ensure the commands run without prompting.
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get upgrade -y --no-install-recommends && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates git && rm -rf /var/lib/apt/lists/*
| FROM node:24.14.1-slim | ||
|
|
||
| RUN apt-get update && apt-get install -y ca-certificates | ||
| RUN apt-get update && apt-get upgrade -y --no-install-recommends && apt-get install -y --no-install-recommends ca-certificates && rm -rf /var/lib/apt/lists/* |
There was a problem hiding this comment.
Running apt-get upgrade can sometimes trigger interactive prompts, which can cause the Docker build to hang or fail in non-interactive environments like CI. Prepend DEBIAN_FRONTEND=noninteractive to ensure the commands run without prompting.
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get upgrade -y --no-install-recommends && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates && rm -rf /var/lib/apt/lists/*
| FROM node:24.14.1-slim | ||
|
|
||
| RUN apt-get update && apt-get install -y wget ca-certificates && rm -rf /var/lib/apt/lists/* | ||
| RUN apt-get update && apt-get upgrade -y --no-install-recommends && apt-get install -y --no-install-recommends wget ca-certificates && rm -rf /var/lib/apt/lists/* |
There was a problem hiding this comment.
Running apt-get upgrade can sometimes trigger interactive prompts, which can cause the Docker build to hang or fail in non-interactive environments like CI. Prepend DEBIAN_FRONTEND=noninteractive to ensure the commands run without prompting.
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get upgrade -y --no-install-recommends && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends wget ca-certificates && rm -rf /var/lib/apt/lists/*
|
🐋 This PR was built and pushed to the following Docker images: Targets: Platforms: Image Tag: |
1 participant
#8100