chore(website-shibumi): bump base image to oven/bun 1.4.0-alpine

Digest-pinned. Verified in hardened container run: /healthz 200,
healthcheck healthy, non-root bun user, outbound TLS, version badge,
clean SIGTERM exit 0. Image 177MB vs 191MB on 1.3.14.
This commit is contained in:
bitbonsai
2026-08-23 01:17:02 +02:00
parent eb1bdae915
commit 142bd7e84f
+2 -2
View File
@@ -7,9 +7,9 @@
# src/lib/version.ts reads the published MCP package version from three
# directories above /app/src/lib at startup (nav badge + structured data);
# without it the server exits 1 with ENOENT at import time.
# oven/bun:1.3.14-alpine, digest-pinned so the base image can't drift under
# oven/bun:1.4.0-alpine, digest-pinned so the base image can't drift under
# the mutable tag; re-pin deliberately when bumping the Bun version.
FROM docker.io/oven/bun:1.3.14-alpine@sha256:5acc90a93e91ff07bf72aa90a7c9f0fa189765aec90b47bdbf2152d2196383c0
FROM docker.io/oven/bun:1.4.0-alpine@sha256:07235578f79ef8c6f97d94aee7938e76f5cdba5f21ae5dbfdd3d3d38058437eb
WORKDIR /app
ENV NODE_ENV=production