fix: Update base image dependencies to latest security patches (#22275)

Author: seemewalkin

.github/scripts/package.json

@@ -3,7 +3,7 @@
     "cacheable-lookup": "6.1.0",
     "conventional-changelog": "^4.0.0",
     "debug": "4.3.4",
-    "glob": "10.3.10",
+    "glob": "10.5.0",
     "p-limit": "3.1.0",
     "picocolors": "1.0.1",
     "semver": "7.5.4",

docker/images/n8n-base/Dockerfile

@@ -14,8 +14,10 @@ RUN \
   find /usr/share/fonts/truetype/msttcorefonts/ -type l -exec unlink {} \;
 
 # Install essential OS dependencies
-RUN echo "https://dl-cdn.alpinelinux.org/alpine/v3.22/main" >> /etc/apk/repositories && echo "https://dl-cdn.alpinelinux.org/alpine/v3.22/community" >> /etc/apk/repositories && \
+RUN echo "https://dl-cdn.alpinelinux.org/alpine/v3.22/main" >> /etc/apk/repositories && \
+    echo "https://dl-cdn.alpinelinux.org/alpine/v3.22/community" >> /etc/apk/repositories && \
     apk update && \
+    apk upgrade --no-cache && \
     apk add --no-cache libxml2 && \
     apk add --no-cache \
         git \

docker/images/n8n/Dockerfile

@@ -11,14 +11,14 @@ FROM n8nio/base:${NODE_VERSION} AS system-deps
 # ==============================================================================
 # STAGE 2: Application Artifact Processor
 # ==============================================================================
-FROM alpine:3.22.0 AS app-artifact-processor
+FROM alpine:3.22.2 AS app-artifact-processor
 
 COPY ./compiled /app/
 
 # ==============================================================================
 # STAGE 3: Task Runner Launcher
 # ==============================================================================
-FROM alpine:3.22.0 AS launcher-downloader
+FROM alpine:3.22.2 AS launcher-downloader
 ARG TARGETPLATFORM
 ARG LAUNCHER_VERSION
 

package.json

@@ -117,7 +117,8 @@
       "form-data": "4.0.4",
       "tmp": "0.2.4",
       "nodemailer": "7.0.10",
-      "validator": "13.15.20"
+      "validator": "13.15.20",
+      "js-yaml": "4.1.1"
     },
     "patchedDependencies": {
       "[email protected]": "patches/[email protected]",