Merge branch 'main' into renovate/lock-file-maintenance

.github/workflows/analysis.yml

@@ -82,7 +82,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@0.18.0
+        uses: aquasecurity/trivy-action@0.19.0
         with:
           format: "sarif"
           output: "trivy-results.sarif"

backend/Dockerfile

@@ -1,6 +1,6 @@
 # Build static files
 # Node Bullseye has npm
-FROM node:20.11.1-bullseye-slim AS buildWithDevDeps
+FROM node:20.12.0-bullseye-slim AS buildWithDevDeps
 
 # Install packages, build and keep only prod packages
 WORKDIR /app
@@ -9,7 +9,7 @@ COPY ./src ./src
 COPY ./prisma ./prisma
 RUN npm ci --ignore-scripts --no-update-notifier
 RUN npm run prisma-generate
-FROM node:20.11.1-bullseye-slim AS build
+FROM node:20.12.0-bullseye-slim AS build
 
 # Install packages, build and keep only prod packages
 WORKDIR /app

frontend/Dockerfile

@@ -1,6 +1,6 @@
 # Build static files
 # Node Bullseye has npm
-FROM node:20.11.1-bullseye-slim AS build
+FROM node:20.12.0-bullseye-slim AS build
 
 # Install packages, build and keep only prod packages
 WORKDIR /app