Mintplex-Labs/anything-llm
1
0
Fork 0
mirror of https://github.com/Mintplex-Labs/anything-llm.git synced 2026-07-19 14:13:35 -04:00
Code Issues 328 Packages Projects Releases 10 Wiki Activity

[PR #1896] [MERGED] Docker image updates #3816

New Issue
Closed
opened 2026-02-22 18:34:33 -05:00 by yindo · 0 comments
yindo commented 2026-02-22 18:34:33 -05:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/Mintplex-Labs/anything-llm/pull/1896
Author: @timothycarambat
Created: 7/18/2024
Status: ✅ Merged
Merged: 7/19/2024
Merged by: @timothycarambat

Base: master ← Head: docker-updates

📝 Commits (10+)

📊 Changes

6 files changed (+1278 additions, -1170 deletions)

View changed files

➕ .github/workflows/build-and-push-image-updates.yaml (+93 -0)
📝 .github/workflows/build-and-push-image.yaml (+3 -2)
📝 docker/Dockerfile (+2 -2)
📝 frontend/yarn.lock (+1168 -1160)
📝 server/package.json (+2 -2)
📝 server/yarn.lock (+10 -4)

📄 Description

Pull Request Type

  • ✨ feat
  • 🐛 fix
  • ♻️ refactor
  • 💄 style
  • 🔨 chore
  • 📝 docs

Relevant Issues

resolves #xxx

What is in this change?

  • Improves Docker Scout Rating (E->B)
  • Adds SBOM and Attestations for Docker Repo
  • Bumps patch for mysql pkg due to reported CVE
  • Bumps Base image to latest jammy

Additional Information

Tested the stuff that would likely be impacted by this. No breaking changes.
TODO:

  • Bump jsonwebtoken (breaking)
  • Bump express-ws (no longer maintained, need to fork?)
  • There are a bunch of "ghost" deps Scount finds - no idea where they come from.

Developer Validations

  • I ran yarn lint from the root of the repo & committed changes
  • Relevant documentation has been updated
  • I have tested my code functionality
  • Docker build succeeds locally

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/Mintplex-Labs/anything-llm/pull/1896 **Author:** [@timothycarambat](https://github.com/timothycarambat) **Created:** 7/18/2024 **Status:** ✅ Merged **Merged:** 7/19/2024 **Merged by:** [@timothycarambat](https://github.com/timothycarambat) **Base:** `master` ← **Head:** `docker-updates` --- ### 📝 Commits (10+) - [`6d9a3cf`](https://github.com/Mintplex-Labs/anything-llm/commit/6d9a3cf280f87624129a453a67e289a6b027d032) bump base image - [`ae2b85e`](https://github.com/Mintplex-Labs/anything-llm/commit/ae2b85e1461247d2c6ee74ad3ce35862460d3279) Bump mysql - [`bbe6c5d`](https://github.com/Mintplex-Labs/anything-llm/commit/bbe6c5d78a0a25dd12bb791f23edd025590cbc58) attestations - [`1db0eb5`](https://github.com/Mintplex-Labs/anything-llm/commit/1db0eb56fb2337c9f8d3cb96218b97bf172f87f6) attestations perms - [`c3c2341`](https://github.com/Mintplex-Labs/anything-llm/commit/c3c23415e7ad3058c71c0c9cbb782fdbf24857ac) attestations perms - [`4031a51`](https://github.com/Mintplex-Labs/anything-llm/commit/4031a517bed660042b51b79796f3ef02635866d0) fix permissions for attestetions for master push - [`82c6f2f`](https://github.com/Mintplex-Labs/anything-llm/commit/82c6f2fed904370c2a6cc6499f0667358201ce15) test cleanup - [`232a008`](https://github.com/Mintplex-Labs/anything-llm/commit/232a0086e1a38f5cb7e2ed2b545db185e2ca7993) repin base image - [`83e50c3`](https://github.com/Mintplex-Labs/anything-llm/commit/83e50c3af48851c2a621c897d329dbbf1c092eec) revert base - [`0c29bdf`](https://github.com/Mintplex-Labs/anything-llm/commit/0c29bdf30ca2f8624bdfbaba5b5a7a5e22eaebca) patch frontend-clean ### 📊 Changes **6 files changed** (+1278 additions, -1170 deletions) <details> <summary>View changed files</summary> ➕ `.github/workflows/build-and-push-image-updates.yaml` (+93 -0) 📝 `.github/workflows/build-and-push-image.yaml` (+3 -2) 📝 `docker/Dockerfile` (+2 -2) 📝 `frontend/yarn.lock` (+1168 -1160) 📝 `server/package.json` (+2 -2) 📝 `server/yarn.lock` (+10 -4) </details> ### 📄 Description ### Pull Request Type <!-- For change type, change [ ] to [x]. --> - [ ] ✨ feat - [ ] 🐛 fix - [ ] ♻️ refactor - [ ] 💄 style - [x] 🔨 chore - [ ] 📝 docs ### Relevant Issues <!-- Use "resolves #xxx" to auto resolve on merge. Otherwise, please use "connect #xxx" --> resolves #xxx ### What is in this change? - Improves Docker Scout Rating (E->B) - Adds SBOM and Attestations for Docker Repo - Bumps patch for `mysql` pkg due to reported CVE - Bumps Base image to latest `jammy` <!-- Describe the changes in this PR that are impactful to the repo. --> ### Additional Information Tested the stuff that would likely be impacted by this. No breaking changes. TODO: - Bump `jsonwebtoken` (breaking) - Bump `express-ws` (no longer maintained, need to fork?) - There are a bunch of "ghost" deps Scount finds - no idea where they come from. <!-- Add any other context about the Pull Request here that was not captured above. --> ### Developer Validations <!-- All of the applicable items should be checked. --> - [x] I ran `yarn lint` from the root of the repo & committed changes - [x] Relevant documentation has been updated - [x] I have tested my code functionality - [x] Docker build succeeds locally --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-22 18:34:33 -05:00
yindo closed this issue 2026-02-22 18:34:33 -05:00
yindo changed title from [PR #1896] Docker image updates to [PR #1896] [MERGED] Docker image updates 2026-06-05 15:15:23 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
Desktop
Docker
Integration Request
Integration Request
OS: Linux
OS: Mobile
OS: Windows
UI/UX
blocked
bug
bug
core-team-only
documentation
duplicate
embed-widget
enhancement
feature request
github_actions
good first issue
investigating
needs info / can't replicate
possible bug
pull-request
Mirrored from GitHub Pull Request
 question
stage: specifications
wontfix
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Mintplex-Labs/anything-llm#3816
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?