Skip to content

chore(Deps): Updated dependencies to remove vulnerabilities #75

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Pive01 wants to merge 1 commit into
base: main
Choose a base branch
from
+13 −3
Open

chore(Deps): Updated dependencies to remove vulnerabilities #75

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,16 @@

All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](http://keepachangelog.com/) and this project adheres to [Semantic Versioning](http://semver.org/).

## [0.5.8] — 2026-01-27

### Changed

- Dependencies update and api-key text removal

### Changed

- Refactoring and dependencies update

## [0.5.7] — 2025-10-17

### Changed
Expand Down
2 changes: 1 addition & 1 deletion Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM golang:1.25-alpine AS builder
FROM golang:1.25.6-alpine AS builder
Copy link
Contributor

@k-a-il k-a-il Jan 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is strange that 1.25 is not pointing to the latest 1.25.6 version 🤔 I am looking at dockerhub and it seems that version 1.25 and 1.25.6 have the same digest

Copy link
Collaborator Author

@Pive01 Pive01 Jan 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think is because we published the last version of the image on October 20, while the fix was live on December 5 ....maybe just re-pushing will also fix the issue 🤔

Copy link
Contributor

@k-a-il k-a-il Jan 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, this should solve the issue. If the localstack-docker-desktop image is build again, new version of go-1.25-alpine will be fetched during build and the issue must be resolved 👍

ENV CGO_ENABLED=0
WORKDIR /backend
COPY vm/go.* ./
Expand Down
4 changes: 2 additions & 2 deletions Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
IMAGE?=localstack/localstack-docker-desktop
TAG?=0.5.7
TAG?=0.5.8

BUILDER=buildx-multi-arch

Expand All @@ -8,7 +8,7 @@ NO_COLOR = \033[m

build-extension: ## Build service image to be deployed as a desktop extension
ls binaries/linux/localstack-* > /dev/null 2>&1 || ./downloadBinaries.sh
docker build --tag=$(IMAGE):$(TAG) .
docker build --tag=$(IMAGE):$(TAG) .

install-extension: build-extension ## Install the extension
docker extension install $(IMAGE):$(TAG)
Expand Down