Skip to content

Bump Alpine base image from 3.11 to 3.24 - #73

Merged
marcizhu merged 1 commit into
masterfrom
bump-alpine-3.24
Oct 20, 2026
Merged

marcizhu merged 1 commit into
masterfrom
bump-alpine-3.24

Conversation

@marcizhu

Copy link
Copy Markdown
Member

The action's image was built on `alpine:3.11`, which reached end of support in November 2021, so the bash, curl, jq and OpenSSL inside it haven't had security fixes for years. This bumps it to `alpine:3.24`, the current stable branch (supported until June 2028). It stays pinned to a version rather than `latest`.

3.11 3.24
bash 5.0.11 5.3.9
jq 1.6 (pre-release build) 1.8.2
curl 7.79.1 / OpenSSL 1.1.1l 8.22.0 / OpenSSL 3.5.8

Testing: I built both images locally and ran every event in `tests/events` (opened, approved, closed, merged) through each one in test mode, with `LIGHTWEIGHT_COMMENT` set to both `true` and `false`. The output was identical on both images and every run exited 0. Test mode skips the real Teamwork API calls, so the newer curl hasn't been run against the live API.

Test Task

🤖 Generated with Claude Code

Alpine 3.11 reached end of support in November 2021. 3.24 is the
current stable branch, supported until June 2028.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@marcizhu
marcizhu merged commit 2992906 into master Oct 20, 2026
3 checks passed
@marcizhu
marcizhu deleted the bump-alpine-3.24 branch October 20, 2026 16:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants