starred/onyx
1
0 Fork 0
mirror of https://github.com/onyx-dot-app/onyx.git synced 2026-10-19 01:50:51 -05:00
Code Issues Packages Projects Releases 10 Wiki Activity

chore(deps): update node base image digests (#16066)

Browse Source 
Co-authored-by: onyx-cherry-pick[bot] <285052878+onyx-cherry-pick[bot]@users.noreply.github.com>
This commit is contained in:
onyx-cherry-pick[bot] authored and GitHub committed 2026-10-15 16:20:09 +00:00
1 parent 489b389982
commit b480c8cdfe
4 files changed
+6 -6
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

.github/actions/dhi-base-images/action.yml
+2 -2
View File
@@ -46,8 +46,8 @@ runs:
run: |
{
echo "DHI_NODE_BUILD_ARGS<<EOF"
echo "NODE_BUILDER_IMAGE=dhi.io/node:24-debian13-dev@sha256:fe11b55fe5d9fca88aef74eac1c4a626646b89c1485ee7be7c30995afe33c67f"
echo "NODE_RUNTIME_IMAGE=dhi.io/node:24-debian13@sha256:f3575cf1e68ffe163703b691c465af833fd2d94cccc1e825d052c943018f2aa3"
echo "NODE_BUILDER_IMAGE=dhi.io/node:24-debian13-dev@sha256:3d1547725ee170db15039a7ff14cd941fe2c329dcdad223f01144fcfe6d22534"
echo "NODE_RUNTIME_IMAGE=dhi.io/node:24-debian13@sha256:c6ddacf90691f33734423b06682a63b27abeeafee294830455e91c79614ece8b"
echo "EOF"
echo "DHI_PYTHON_BUILD_ARGS<<EOF"
echo "PYTHON_BUILDER_IMAGE=dhi.io/python:3.13-debian13-dev@sha256:e8e3c8d8966b07d4bfd4b4a2877b7e9b432f9daf03a1265de9652476fd84c379"
.github/workflows/release-opal.yml
+1 -1
View File
@@ -13,7 +13,7 @@ jobs:
# mitigates zizmor's cache-poisoning class of finding at the source rather than
# suppressing it. Bumping Node = bump the digest.
container:
image: node:24@sha256:3d27e5c11e5786e309ec3e03f93ae536eb36e6e5eb3714d5eb3300a36157add0
image: node:24@sha256:14078204b6bb268c107ceff6d3c43f45a888105e5c2b18b14c32b3409d93a1b0
environment:
name: release-opal
permissions:
backend/onyx/server/features/build/sandbox/image/Dockerfile
+1 -1
View File
@@ -17,7 +17,7 @@ FROM ${BASE_IMAGE_REGISTRY}/oven/bun:1.3.14@sha256:e10577f0db68676a7024391c6e5cb
# Node.js source. The final image is Python-based, but the sandbox still needs
# Node/npm/npx for MCP commands and skill-runtime packages.
FROM ${BASE_IMAGE_REGISTRY}/library/node:24-trixie-slim@sha256:173f125896c3b47ddf056734c7ea789d04595a6a08769a8f78e0df642781fb66 AS node_source
FROM ${BASE_IMAGE_REGISTRY}/library/node:24-trixie-slim@sha256:7f486cabe892bff8fef04c0f7da8dba84a560be3e4e2740b7a86afc57ebec315 AS node_source
ARG NPM_VERSION=11.17.0
RUN npm install -g "npm@${NPM_VERSION}" && \
npm cache clean --force && \
web/Dockerfile
+2 -2
View File
@@ -7,8 +7,8 @@ ARG BASE_IMAGE_REGISTRY=docker.io
# no extra registry access. CI overrides both with the matching Docker Hardened Images from
# dhi.io, which need a Docker account with DHI catalog access.
# Refresh a digest with: docker buildx imagetools inspect <image reference>
ARG NODE_BUILDER_IMAGE=${BASE_IMAGE_REGISTRY}/library/node:24-trixie-slim@sha256:173f125896c3b47ddf056734c7ea789d04595a6a08769a8f78e0df642781fb66
ARG NODE_RUNTIME_IMAGE=${BASE_IMAGE_REGISTRY}/library/node:24-trixie-slim@sha256:173f125896c3b47ddf056734c7ea789d04595a6a08769a8f78e0df642781fb66
ARG NODE_BUILDER_IMAGE=${BASE_IMAGE_REGISTRY}/library/node:24-trixie-slim@sha256:7f486cabe892bff8fef04c0f7da8dba84a560be3e4e2740b7a86afc57ebec315
ARG NODE_RUNTIME_IMAGE=${BASE_IMAGE_REGISTRY}/library/node:24-trixie-slim@sha256:7f486cabe892bff8fef04c0f7da8dba84a560be3e4e2740b7a86afc57ebec315
# bun binary source, in its own stage because buildx only expands the registry ARG in a FROM,
# not in `COPY --from=`. Use the glibc (Debian) build so it runs on the glibc node images.