#5905 - Bump docker-updates group across 6 directories#5920
Conversation
There was a problem hiding this comment.
Pull request overview
Updates the Node.js base images used by several service/container builds in the monorepo, aligning Dockerfiles to reference the internal artifact registry while adding Dependabot hints for upstream image tracking.
Changes:
- Bump Node base image from
25.6.1-alpine3.22to25.8.1-alpine3.22in multiple Dockerfiles. - Replace
DOCKER_REGISTRYbuild-arg indirection with explicitartifacts.developer.gov.bc.ca/docker-remote/...image references. - Add
# dependabot: FROM ...hints to support automated base image version updates.
Reviewed changes
Copilot reviewed 6 out of 6 changed files in this pull request and generated 6 comments.
Show a summary per file
| File | Description |
|---|---|
| sources/packages/web/Dockerfile | Updates builder base image to Node 25.8.1 and hard-codes the internal registry reference with a Dependabot hint. |
| sources/packages/backend/migrations/Dockerfile | Updates Node base image to 25.8.1 and adds Dependabot hint while hard-coding internal registry. |
| sources/packages/backend/apps/workers/Dockerfile | Updates Node base image to 25.8.1 and adds Dependabot hint while hard-coding internal registry. |
| sources/packages/backend/apps/queue-consumers/Dockerfile | Updates Node base image to 25.8.1 and adds Dependabot hint while hard-coding internal registry. |
| sources/packages/backend/apps/load-test-gateway/Dockerfile | Updates Node base image to 25.8.1 and adds Dependabot hint while hard-coding internal registry. |
| sources/packages/backend/apps/api/Dockerfile | Updates Node base image to 25.8.1 and adds Dependabot hint while hard-coding internal registry. |
You can also share your feedback on Copilot code review. Take the survey.
sources/packages/web/Dockerfile
Outdated
| # Base Image | ||
| # dependabot: FROM node:25.8.1-alpine3.22 | ||
| FROM artifacts.developer.gov.bc.ca/docker-remote/node:25.8.1-alpine3.22 AS builder |
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
- Using ARG
…p-across-directories' into feature/bump-docker-updates-group-across-directories
|
| # Base Image | ||
| ARG DOCKER_REGISTRY=artifacts.developer.gov.bc.ca/docker-remote/ | ||
| FROM ${DOCKER_REGISTRY}node:25.6.1-alpine3.22 | ||
| # dependabot: FROM node:25.8.1-alpine3.22 |
There was a problem hiding this comment.
Was there a reason to put the comment back? same in all files.
There was a problem hiding this comment.
It was an existing comment. I left it as it is.
dheepak-aot
left a comment
There was a problem hiding this comment.
Looks good. Asked for clarification on adding the comment again.


As a part of this PR, the following was completed:
Bumped the docker-updates group with 1 update in the /sources/packages/backend/apps/api directory: node.
Bumped the docker-updates group with 1 update in the /sources/packages/backend/apps/load-test-gateway directory: node.
Bumped the docker-updates group with 1 update in the /sources/packages/backend/apps/queue-consumers directory: node.
Bumped the docker-updates group with 1 update in the /sources/packages/backend/apps/workers directory: node.
Bumped the docker-updates group with 1 update in the /sources/packages/backend/apps/db-migrations directory: node.
Bumped the docker-updates group with 1 update in the /sources/packages/web directory: node.