From d4d932fc2ff4d26eabee02aff4b05f8808f22572 Mon Sep 17 00:00:00 2001 From: Alexander Tarasov Date: Thu, 22 Oct 2026 12:00:19 +0200 Subject: [PATCH] chore: mirror library/node 22.23.4-alpine 22.23.4 fixes CVE-2026-111497, a potential RCE in Node's Brotli decompression. getsentry/dogsitter needs this tag to move off 22.23.3-alpine. Co-Authored-By: Claude Opus 5.5 --- main.py | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/main.py b/main.py index 760d3d1..2361d89 100644 --- a/main.py +++ b/main.py @@ -283,6 +283,15 @@ def update(self) -> Image: 'sha256:85cdd100016a2e09927c0776bb7ebebcfefce5cd0af49893ada91cbc4d78ee22', # noqa: E501 ), ), + Image( + registry='registry-1.docker.io', + source='library/node', + tag='22.23.4-alpine', + digests=( + 'sha256:025b8e975a61d94e33abeafaad1255ef44e4898cf1a1b6446860009c72e6d284', # noqa: E501 + 'sha256:fd4a97c1630a4a0a70117dd7b393e322db316d0489bdf36a0e776e7b235341b0', # noqa: E501 + ), + ), Image( registry='registry-1.docker.io', source='library/postgres', @@ -564,7 +573,7 @@ def main() -> int: f.write(src) elif args.command == 'sync': for img in IMAGES: - dest_img = f'getsentry/image-mirror-{img.source.replace("/", "-")}' + dest_img = f'getsentry/image-mirror-{img.source.replace('/', '-')}' try: target_digest_info = _digests('ghcr.io', dest_img, img.tag)