Jakob Wennberg dd7a2eab5f fix(docker): bump node:22-alpine digest so the frozen apk-upgrade layer re-runs (CVE-2026-14456) (#2071) ...

The scheduled image scan has been red since 2026-08-30 on fixable HIGH CVE-2026-14456 (libssl3/libcrypto3 3.5.7-r0, fixed 3.5.8-r0). Both Dockerfile stages already run apk upgrade, but the GHCR buildx layer cache freezes that layer, so post-pin fixes never reach the published image. Bumping the pinned FROM digest (alpine 3.23 to 3.24.1) busts the cache and the re-run upgrade installs 3.5.8-r0 (verified in both new bases). cron.Dockerfile gains the same apk upgrade line.

2026-08-31 09:58:55 +01:00

..

Caddyfile

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890)

2026-07-04 15:58:06 +02:00

cron.Dockerfile

fix(docker): bump node:22-alpine digest so the frozen apk-upgrade layer re-runs (CVE-2026-14456) (#2071)

2026-08-31 09:58:55 +01:00

crontab.hosted

feat(inbox): per-item underlag anchoring status and a daily reconcile cron for stranded underlag (#1548) (#2012)

2026-08-28 17:45:10 +02:00

crontab.self-hosted

feat(inbox): per-item underlag anchoring status and a daily reconcile cron for stranded underlag (#1548) (#2012)

2026-08-28 17:45:10 +02:00

extensions.hosted.json

Post-audit cleanup batch: dead email forks, Docker extension drift, English error locale (#653)

2026-06-04 10:27:39 +02:00

extensions.self-hosted.json

fix(ai): complete plain-key self-hosting path (#1584)

2026-08-13 15:45:24 +02:00