build: update minio versions to avoid CVE-2024-45337

hotosm · Dec 19, 2024 · 7c3cd4f · 7c3cd4f
1 parent 1b1b1fb
commit 7c3cd4f
Show file tree

Hide file tree

Showing 5 changed files with 5 additions and 6 deletions.
diff --git a/chart/values.yaml b/chart/values.yaml
@@ -114,7 +114,7 @@ s3:
   replicas: 1
   image:
     repository: quay.io/minio/minio
-    tag: RELEASE.2024-10-13T13-34-11Z
+    tag: RELEASE.2024-12-18T13-15-44Z
   environment:
     MINIO_BROWSER: "off"
   mountPath: /mnt/data

diff --git a/compose.development.yaml b/compose.development.yaml
@@ -178,7 +178,7 @@ services:
     restart: "on-failure:2"
 
   s3:
-    image: "docker.io/minio/minio:${MINIO_TAG:-RELEASE.2024-10-13T13-34-11Z}"
+    image: "docker.io/minio/minio:${MINIO_TAG:-RELEASE.2024-12-18T13-15-44Z}"
     environment:
       MINIO_ROOT_USER: ${S3_ACCESS_KEY}
       MINIO_ROOT_PASSWORD: ${S3_SECRET_KEY}

diff --git a/compose.main.yaml b/compose.main.yaml
@@ -119,7 +119,7 @@ services:
     restart: "on-failure:2"
 
   s3:
-    image: "docker.io/minio/minio:${MINIO_TAG:-RELEASE.2024-10-13T13-34-11Z}"
+    image: "docker.io/minio/minio:${MINIO_TAG:-RELEASE.2024-12-18T13-15-44Z}"
     environment:
       MINIO_ROOT_USER: ${S3_ACCESS_KEY}
       MINIO_ROOT_PASSWORD: ${S3_SECRET_KEY}

diff --git a/compose.yaml b/compose.yaml
@@ -225,7 +225,7 @@ services:
     restart: "on-failure:2"
 
   s3:
-    image: "docker.io/minio/minio:${MINIO_TAG:-RELEASE.2024-10-13T13-34-11Z}"
+    image: "docker.io/minio/minio:${MINIO_TAG:-RELEASE.2024-12-18T13-15-44Z}"
     environment:
       MINIO_ROOT_USER: ${S3_ACCESS_KEY:-fmtm}
       MINIO_ROOT_PASSWORD: ${S3_SECRET_KEY:-somelongpassword}

diff --git a/src/backend/Dockerfile b/src/backend/Dockerfile
@@ -16,7 +16,7 @@
 #
 ARG PYTHON_IMG_TAG=3.12
 ARG UV_IMG_TAG=0.5.2
-ARG MINIO_TAG=${MINIO_TAG:-RELEASE.2024-10-13T13-34-11Z}
+ARG MINIO_TAG=${MINIO_TAG:-RELEASE.2024-12-18T13-15-44Z}
 FROM ghcr.io/astral-sh/uv:${UV_IMG_TAG} AS uv
 FROM docker.io/minio/minio:${MINIO_TAG} AS minio
 
@@ -159,7 +159,6 @@ RUN --mount=type=cache,target=/root/.cache <<EOT
     uv sync \
         --project /_lock \
         --locked \
-        --no-dev \
         --no-install-project \
         --group debug \
         --group test \