Clear Trivy: APT_CACHE_BUST + snyk-broker v1.0.14-axon + drop hard pins#104

Merged

ashiramin merged 3 commits into

mainfrom

aa/fix-vulns-20260518-221951

May 21, 2026

Commits on May 19, 2026

Add APT_CACHE_BUST ARG so the apt layer can be refreshed without pinning
ashiramin
committed
Bump SNYK_BROKER_VERSION to v1.0.14-axon for ws CVE-2026-45736
ashiramin
committed

Commits on May 21, 2026

Remove libngtcp2/libnghttp2 hard pins now that APT_CACHE_BUST is in place
ashiramin
committed