From 7a507354ad4104eb81cda24729f351689104e0f3 Mon Sep 17 00:00:00 2001
From: Nicolas Meienberger <github@thisprops.com>
Date: Thu, 18 Dec 2025 18:08:24 +0100
Subject: [PATCH] chore: upgrade apk in base image

---
 .github/workflows/release.yml | 2 +-
 Dockerfile                    | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 222e97c3..946ad8ef 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -83,7 +83,7 @@ jobs:
           severity-cutoff: critical
 
       - name: upload Anchore scan report
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: ${{ steps.scan.outputs.sarif }}
 
diff --git a/Dockerfile b/Dockerfile
index fd4adf06..c95dab9f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,8 @@ ARG BUN_VERSION="1.3.5"
 
 FROM oven/bun:${BUN_VERSION}-alpine AS base
 
-RUN apk add --no-cache davfs2=1.6.1-r2 openssh-client fuse3
+RUN apk upgrade --no-cache && \
+    apk add --no-cache davfs2=1.6.1-r2 openssh-client fuse3
 
 
 # ------------------------------