Upgrade from Alpine 3.14 to 3.19 #4993
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dhaley
added
the
Maintenance
dhaley
force-pushed
the
alpine3.18
branch
2 times, most recently
from
c988333 to
eac3ca1
Compare
dhaley
changed the title
dhaley
force-pushed
the
alpine3.18
branch
2 times, most recently
from
a336483 to
0f32787
Compare
dhaley
force-pushed
the
alpine3.18
branch
3 times, most recently
from
e7cb479 to
5cbe0a4
Compare
axelstudios
changed the title
axelstudios
reviewed
Jun 13, 2025
| @@ -16,6 +16,9 @@ | |||
| "engines": { | |||
| "node": ">=20" | |||
| }, | |||
| "dependencies": { | |||
| "sass": "1.79.4" | |||
There was a problem hiding this comment.
sass is needed in production for the manage.py compress call
axelstudios
approved these changes
Jun 16, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This change addresses a critical vulnerability flagged by AWS Inspector:
IN-DISCONTINUED-001 – ALPINE_LINUX_3_14
The base image was previously using Alpine Linux 3.14, which reached end of support in November 2022. Amazon Inspector now considers this OS discontinued and no longer actively supported or maintained. Findings related to this are informational only, and upgrading is required to restore full Inspector coverage and ongoing security patching.
What's this PR do?
This PR updates the base image from Alpine 3.14 to Alpine 3.19 in both Dockerfile and Dockerfile.ecs.
Alpine 3.19 is the lowest currently supported version, providing security updates with minimal risk to system compatibility.
Switches python management from alpine to pyenv
upgrade drf-yasg to fix this issue - Remove usage of pkg_resources axnsan12/drf-yasg#928
fix UserWarning: Supervisord
How should this be manually tested?
Build both Dockerfile and Dockerfile.ecs, then verify that SeedWeb application functionality is operational.
Basic functionality validation should include:
Confirming successful container build.
Launching the application locally or in ECS.
Validating web service endpoints and key app workflows.
Ensuring no regressions in authentication, database connectivity, or frontend rendering.