* build(deps): bump org.hibernate.orm.tooling:hibernate-enhance-maven-plugin Bumps [org.hibernate.orm.tooling:hibernate-enhance-maven-plugin](https://github.com/hibernate/hibernate-orm) from 6.6.12.Final to 6.6.13.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.13/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.12...6.6.13) --- updated-dependencies: - dependency-name: org.hibernate.orm.tooling:hibernate-enhance-maven-plugin dependency-version: 6.6.13.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump org.jacoco:jacoco-maven-plugin in /server Bumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.12 to 0.8.13. - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](https://github.com/jacoco/jacoco/compare/v0.8.12...v0.8.13) --- updated-dependencies: - dependency-name: org.jacoco:jacoco-maven-plugin dependency-version: 0.8.13 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump typescript from 5.8.2 to 5.8.3 in /client Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.8.2 to 5.8.3. - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml) - [Commits](https://github.com/microsoft/TypeScript/compare/v5.8.2...v5.8.3) --- updated-dependencies: - dependency-name: typescript dependency-version: 5.8.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps-dev): bump @eslint/compat from 1.2.7 to 1.2.8 in /client Bumps [@eslint/compat](https://github.com/eslint/rewrite) from 1.2.7 to 1.2.8. - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/release-please-config.json) - [Commits](https://github.com/eslint/rewrite/compare/compat-v1.2.7...compat-v1.2.8) --- updated-dependencies: - dependency-name: "@eslint/compat" dependency-version: 1.2.8 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump dompurify from 3.2.4 to 3.2.5 in /client Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.2.4 to 3.2.5. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/3.2.4...3.2.5) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.2.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump com.puppycrawl.tools:checkstyle in /server Bumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 10.22.0 to 10.23.0. - [Release notes](https://github.com/checkstyle/checkstyle/releases) - [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-10.22.0...checkstyle-10.23.0) --- updated-dependencies: - dependency-name: com.puppycrawl.tools:checkstyle dependency-version: 10.23.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps-dev): bump eslint-plugin-n from 17.16.2 to 17.17.0 in /client Bumps [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) from 17.16.2 to 17.17.0. - [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases) - [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md) - [Commits](https://github.com/eslint-community/eslint-plugin-n/compare/v17.16.2...v17.17.0) --- updated-dependencies: - dependency-name: eslint-plugin-n dependency-version: 17.17.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * fix: server/Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN12-ZLIB-6008963 - https://snyk.io/vuln/SNYK-DEBIAN12-GNUPG2-9486681 - https://snyk.io/vuln/SNYK-DEBIAN12-GLIBC-1547135 - https://snyk.io/vuln/SNYK-DEBIAN12-PAM-8303301 - https://snyk.io/vuln/SNYK-DEBIAN12-TAR-1560620 * fix: client/package.json & client/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-VITE-9653016 * build(deps): bump vite from 6.2.4 to 6.2.6 in /client Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.2.4 to 6.2.6. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.2.6/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.2.6/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 6.2.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io>
46 lines
1.3 KiB
Docker
46 lines
1.3 KiB
Docker
### Builder
|
|
FROM ghcr.io/graalvm/native-image:22.3.3 AS build
|
|
|
|
# Copy
|
|
WORKDIR /app
|
|
COPY pom.xml mvnw ./
|
|
COPY src ./src
|
|
COPY .mvn/ ./.mvn
|
|
|
|
# Build
|
|
RUN ./mvnw -B package -Pnative -DskipTests
|
|
|
|
|
|
### Deployer
|
|
FROM debian:12.10-slim AS deploy
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
curl \
|
|
ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy
|
|
WORKDIR /app
|
|
COPY --from=build /app/target/server ./tasknote-api
|
|
|
|
ARG BUILD
|
|
ARG SOURCE_PR
|
|
ENV BUILD=${BUILD}
|
|
ENV SOURCE_PR=${SOURCE_PR}
|
|
|
|
# Add metadata to the final image
|
|
LABEL org.opencontainers.image.authors="Ricardo Campos <ricardompcampos@gmail.com>" \
|
|
org.opencontainers.image.vendor="Ricardo Campos Org" \
|
|
org.opencontainers.image.title="TaskNoteApp server" \
|
|
org.opencontainers.image.description="Spring Cloud Native REST API service" \
|
|
org.opencontainers.image.version="${SOURCE_PR}" \
|
|
org.opencontainers.image.source="https://github.com/ricardo-campos-org/react-typescript-todolist"
|
|
|
|
# User, port and health check
|
|
USER 1001
|
|
EXPOSE ${PORT}
|
|
#HEALTHCHECK CMD timeout 10s bash -c 'true > /dev/tcp/127.0.0.1/8585'
|
|
HEALTHCHECK --interval=30s --timeout=5s CMD ["curl", "-f", "http://localhost:8585/actuator/health"]
|
|
|
|
# Startup
|
|
ENTRYPOINT ["/app/tasknote-api", "-Dspring.profiles.active=prod"]
|