From 095a7970edc301017da4a85c57d5228b4c58732d Mon Sep 17 00:00:00 2001 From: Matt Rakow Date: Fri, 29 May 2026 15:31:36 -0700 Subject: [PATCH] chore(server-gitssh): bump base image to alpine 3.23.4 Alpine 3.16 is EOL (since May 2024). Bump the server-gitssh base image to 3.23.4, which is already pre-mirrored in the public-mirror ACR and also pre-installed on the 1ES agent image, so the bump requires no mirror or pipeline changes. The image is digest-pinned and the upstream/mirror digests have been verified to match. Smoke-tested the new image locally: `apk add git openssh`, user/group setup, `ssh-keygen -A`, and `sshd` startup all succeed; sshd advertises `SSH-2.0-OpenSSH_10.2`. AB#74539 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- server/gitssh/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/gitssh/Dockerfile b/server/gitssh/Dockerfile index 453a0f5d5197..c7dc8ed0addc 100644 --- a/server/gitssh/Dockerfile +++ b/server/gitssh/Dockerfile @@ -10,7 +10,7 @@ # docker.io/library, so the same manifest digest pin resolves correctly against either registry. # See tools/pipelines/README.md for how to maintain the mirror (upgrades, additions). ARG BASE_IMAGE_REGISTRY=docker.io -FROM ${BASE_IMAGE_REGISTRY}/library/alpine:3.16@sha256:452e7292acee0ee16c332324d7de05fa2c99f9994ecc9f0779c602916a672ae4 +FROM ${BASE_IMAGE_REGISTRY}/library/alpine:3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 # Install Git and OpenSSH so we can run a git server RUN apk add --no-cache git