mirror of
https://github.com/appleboy/telegram-action.git
synced 2026-10-03 01:30:44 +09:00
fix(docker): bump drone-telegram base image to 1.4.2
The 1.4.0 image binary was built with Go 1.22.6, affected by stdlib CVE-2025-68121 (crypto/tls certificate validation bypass, CVSS 10.0). 1.4.2 is built with Go 1.25.13 and patched golang.org/x/crypto v0.55.0. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Fable 5
parent
78e5f2ccac
commit
d600df785a
+1
-1
@@ -1,4 +1,4 @@
|
||||
FROM ghcr.io/appleboy/drone-telegram:1.4.0
|
||||
FROM ghcr.io/appleboy/drone-telegram:1.4.2
|
||||
|
||||
COPY entrypoint.sh /entrypoint.sh
|
||||
RUN chmod +x /entrypoint.sh
|
||||
|
||||
Reference in New Issue
Block a user