Skip to content

chore(deps): update docker #10212

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
renovate-bot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update docker #10212

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion auth/src/main/java/com/google/cloud/auth/samples/customcredentials/aws/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ RUN mvn clean package dependency:copy-dependencies \
-DskipTests

# Run the application
FROM eclipse-temurin:17-jre-focal
FROM eclipse-temurin:17.0.15_6-jre-focal
Copy link
Contributor

@gemini-code-assist gemini-code-assist bot Jan 5, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

Pinning the base image version is a great practice for ensuring reproducible builds. However, the chosen version 17.0.15_6 is outdated (from mid-2022) and likely missing important security patches. Other Dockerfiles in this PR are updated to version 17.0.17_10. To maintain consistency and improve security, I recommend using a more recent version for this image as well. A newer version for focal is available, for example 17.0.17_8-jre-focal, which would be a much better choice.

FROM eclipse-temurin:17.0.17_8-jre-focal


# Security: Create a non-root user
RUN useradd -m appuser
Expand Down
2 changes: 1 addition & 1 deletion eventarc/audit-storage/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ RUN mvn package -DskipTests

# Use Eclipse Temurin for base image.
# https://docs.docker.com/develop/develop-images/multistage-build/#use-multi-stage-builds
FROM eclipse-temurin:17.0.16_8-jre-alpine
FROM eclipse-temurin:17.0.17_10-jre-alpine

# Copy the jar to the production image from the builder stage.
COPY --from=builder /app/target/audit-storage-*.jar /audit-storage.jar
Expand Down
2 changes: 1 addition & 1 deletion eventarc/pubsub/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ RUN mvn package -DskipTests

# Use Eclipse Temurin for base image.
# https://docs.docker.com/develop/develop-images/multistage-build/#use-multi-stage-builds
FROM eclipse-temurin:17.0.16_8-jre-alpine
FROM eclipse-temurin:17.0.17_10-jre-alpine

# Copy the jar to the production image from the builder stage.
COPY --from=builder /app/target/events-pubsub-*.jar /events-pubsub.jar
Expand Down
2 changes: 1 addition & 1 deletion run/helloworld/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ RUN mvn package -DskipTests

# Use Eclipse Temurin for base image.
# https://docs.docker.com/develop/develop-images/multistage-build/#use-multi-stage-builds
FROM eclipse-temurin:17.0.16_8-jre-alpine
FROM eclipse-temurin:17.0.17_10-jre-alpine

# Copy the jar to the production image from the builder stage.
COPY --from=builder /app/target/helloworld-*.jar /helloworld.jar
Expand Down
2 changes: 1 addition & 1 deletion run/image-processing/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
# It's important to use JDK 8u191 or above that has container support enabled.
# https://hub.docker.com/_/eclipse-temurin/
# https://docs.docker.com/develop/develop-images/multistage-build/#use-multi-stage-builds
FROM eclipse-temurin:17.0.16_8-jre
FROM eclipse-temurin:17.0.17_10-jre

# Install Imagemagick into the container image.
# For more on system packages review the system packages tutorial.
Expand Down
2 changes: 1 addition & 1 deletion run/system-package/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@
# [START cloudrun_system_package_dockerfile]
# Use the Official eclipse-temurin image for a lean production stage of our multi-stage build.
# https://hub.docker.com/_/eclipse-temurin/
FROM eclipse-temurin:17.0.16_8-jre
FROM eclipse-temurin:17.0.17_10-jre

RUN apt-get update -y && apt-get install -y \
graphviz \
Expand Down