fix(docker): bump drone-telegram base image to 1.4.2

The 1.4.0 image binary was built with Go 1.22.6, affected by stdlib
CVE-2025-68121 (crypto/tls certificate validation bypass, CVSS 10.0).
1.4.2 is built with Go 1.25.13 and patched golang.org/x/crypto v0.55.0.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Bo-Yi Wu
2026-08-14 22:27:40 +08:00
co-authored by Claude Fable 5
parent 78e5f2ccac
commit d600df785a
+1 -1
View File
@@ -1,4 +1,4 @@
FROM ghcr.io/appleboy/drone-telegram:1.4.0
FROM ghcr.io/appleboy/drone-telegram:1.4.2
COPY entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh