build(deps): bump nginx from 1.29.1 to 1.29.4 / r35 to 36#490
build(deps): bump nginx from 1.29.1 to 1.29.4 / r35 to 36#490
Conversation
There was a problem hiding this comment.
Pull request overview
This PR updates the NGINX base images to their latest versions: NGINX OSS from 1.29.1 to 1.29.4 and NGINX Plus from r35 to r36, including updated SHA256 digests for all container images.
Key Changes:
- Updated NGINX OSS base image to version 1.29.4
- Updated NGINX Plus base and modules images to r36
- Updated all container image SHA256 digests for security verification
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| Dockerfile.oss | Updates NGINX OSS base image from 1.29.1 to 1.29.4 with new SHA256 digest |
| Dockerfile.plus | Updates NGINX Plus base and xslt module images from r35 to r36 with new SHA256 digests |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| FROM private-registry.nginx.com/nginx-plus/modules:r36-xslt-debian@sha256:54b3e6d9d25f3fb7ad2b93fc7d66ccae1dbc3186b3ce417eda4194a45ee398c3 AS xslt | ||
|
|
||
| FROM private-registry.nginx.com/nginx-plus/base:r35-debian-bookworm@sha256:9a82ad3f96d58be861257efd621f215d599e226ebedd24d9f3211bdd743c3c27 | ||
| FROM private-registry.nginx.com/nginx-plus/base@sha256:7dd5de94b8c5d6e726918eb36ea78435efad4f9f63be4325c96919c48603a102 |
There was a problem hiding this comment.
The version tag has been removed from the NGINX Plus base image reference. While the SHA256 digest provides immutability, including the version tag (e.g., 'r36-debian-bookworm') improves maintainability by making the intended version explicit and easier to audit without looking up the digest.
| FROM private-registry.nginx.com/nginx-plus/base@sha256:7dd5de94b8c5d6e726918eb36ea78435efad4f9f63be4325c96919c48603a102 | |
| FROM private-registry.nginx.com/nginx-plus/base:r36-debian-bookworm@sha256:7dd5de94b8c5d6e726918eb36ea78435efad4f9f63be4325c96919c48603a102 |
bca2c80 to
b9c9ba4
Compare
Proposed changes
Bumps nginx from 1.29.1 to 1.29.4 and nginx-plus from r35 to r36.
Checklist
Before creating a pull request (PR), run through this checklist and mark each as complete:
README.md).