mirror of
https://github.com/civitai/civitai.git
synced 2026-09-20 22:08:18 +08:00
Justin Maier
52f43e5659
The Dockerfile pinned node:22-alpine3.20, a tag last pushed 2025-05-21 and frozen at Node 22.16.0. Alpine 3.20 went EOL 2026-04-01 and is no longer rebuilt, so prod carried ~14 months of unpatched Node and OS CVEs. #3242 moved to node:24-alpine3.22; #3311 rolled back to node:22-alpine3.20 for a server-CPU regression and landed on an already-dead tag. That regression was misattributed: the real cause was #3266's uncached per-owner settings-blob JSON parse on the feed path, fixed in #3331. Moves to node:24-alpine3.24 (Node 24.18.0, Alpine 3.24.1, EOL 2028-06-01), aligns .nvmrc, and bumps @types/node to 24.13.3. Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com> Co-authored-by: ZacxDev <zachlowden1@gmail.com>
2 lines
8 B
Plaintext
2 lines
8 B
Plaintext
24.18.0
|