fix: increment package version from 3.2.7 to 3.2.8 in package.json

fix: increment package version from 3.2.6 to 3.2.7 in package.json
fix: downgrade package version from 3.2.8 to 3.2.6 in package.json
2026-08-07 15:27:13 +00:00 · 2025-03-24 20:34:24 +05:30 · 2025-03-24 20:30:05 +05:30 · 2025-03-24 20:28:01 +05:30 · 2025-03-24 14:56:20 +00:00 · 2025-03-24 20:10:13 +05:30
5 changed files with 79 additions and 31 deletions
@@ -0,0 +1,47 @@
+version: 2
+updates:
+  # Track base image versions via .env.build
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    file-patterns:
+      - ".env.build"
+      - "node:*"  # Ensures Node.js images are correctly detected
+
+  # Monitor OS package versions in Dockerfile (Debian/Alpine)
+  - package-ecosystem: "gitsubmodule"  # Alternative method to track OS packages in Dockerfile
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "os-packages"
+    commit-message:
+      prefix: "os"
+      include: "scope"
+
+  # Monitor Node.js dependencies from package.json
+  # TODO: Uncomment below if we want to begin letting Dependabot monitor & open PRs for Node.js project dependencies
+  # - package-ecosystem: "npm"
+  #   directory: "/"
+  #   schedule:
+  #     interval: "weekly"
+  #   labels:
+  #     - "dependencies"
+  #     - "npm"
+  #   commit-message:
+  #     prefix: "npm"
+  #     include: "scope"
+
+  # Monitor GitHub Actions dependencies
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "github-actions"
+    commit-message:
+      prefix: "actions"
+      include: "scope"
@@ -27,7 +27,7 @@ jobs:
      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
-          node-version: '20'  # Adjust as needed
+          node-version: '23'  # Adjust as needed

      - name: Install dependencies
        run: npm ci
@@ -153,4 +153,4 @@ jobs:
          echo "Setting BUILD_VERSION to $VERSION"
          gh variable set BUILD_VERSION --body "$VERSION"
        env:
-          GH_TOKEN: ${{ secrets.GH_PAT }}  # Needs to be PAT w/ Read access to metadata and secrets & Read and Write access to actions, actions variables, and code
+          GH_TOKEN: ${{ secrets.GH_PAT }}  # Needs to be PAT w/ Read access to metadata and secrets & Read and Write access to actions, actions variables, and code
@@ -1,15 +1,15 @@
 # syntax=docker/dockerfile:1

-# Global build arguments
-ARG ALPINE_VERSION=23.7.0-alpine3.21
-ARG DEBIAN_VERSION=23.7.0-bookworm-slim
+# Global build arguments (defined default values in case `.env.build` isn't loaded)
+ARG ALPINE_VERSION_TAG=23.7.0-alpine3.21
+ARG DEBIAN_VERSION_TAG=23.7.0-bookworm-slim
 ARG VARIANT=debian

 #==========================================================#
 #                   STAGE 1: BUILD STAGE                    #
 #==========================================================#

-FROM node:${DEBIAN_VERSION} AS builder-debian
+FROM node:${DEBIAN_VERSION_TAG} AS builder-debian
 RUN apt-get update && apt-get install -y \
        build-essential=12.9 \
        python3=3.11.2-1+b1 \
@@ -18,11 +18,11 @@ RUN apt-get update && apt-get install -y \
        make=4.3-4.1 \
        node-gyp=9.3.0-2 \
        g++=4:12.2.0-3 \
-        tzdata=2024b-0+deb12u1 \
+        tzdata \
        iputils-ping=3:20221126-1+deb12u1 && \
    rm -rf /var/lib/apt/lists/*

-FROM node:${ALPINE_VERSION} AS builder-alpine
+FROM node:${ALPINE_VERSION_TAG} AS builder-alpine
 RUN apk add --no-cache --update \
        build-base=0.5-r3 \
        python3=3.12.9-r0 \
@@ -31,7 +31,7 @@ RUN apk add --no-cache --update \
        g++=14.2.0-r4 \
        sqlite=3.48.0-r0 \
        sqlite-dev=3.48.0-r0 \
-        tzdata \
+        tzdata=2025a-r0 \
        iputils=20240905-r0

 FROM builder-${VARIANT} AS builder
@@ -58,10 +58,9 @@ COPY . .
 # TODO: Reevaluate permissions (possibly reduce?)...
 # Remove docs directory and ensure required directories exist
 RUN rm -rf src/routes/\(docs\) \
-    static/documentation \
-    static/fonts/lato/full && \
-  mkdir -p uploads database && \
-  # TODO: Consider changing below to `chmod -R u-rwX,g=rX,o= uploads database`
+        static/documentation \
+        static/fonts/lato/full && \
+    mkdir -p uploads database && \
    chmod -R 750 uploads database

 # Build the application and remove `devDependencies`
@@ -72,19 +71,21 @@ RUN npm run build && \
 #             STAGE 2: PRODUCTION/FINAL STAGE              #
 #==========================================================#

-FROM node:${DEBIAN_VERSION} AS final-debian
+FROM node:${DEBIAN_VERSION_TAG} AS final-debian
+# TODO: Consider adding `--no-install-recommends`, but will need testing (may further help reduce final build size)
 RUN apt-get update && apt-get install -y \
-        iputils-ping \
-        sqlite3 \
+        iputils-ping=3:20221126-1+deb12u1 \
+        sqlite3=3.40.1-2+deb12u1 \
        tzdata \
-        curl && \
+    # TODO: Is it ok to change to `curl` here so that we don't have to maintain `wget` version mismatch between Debian architectures? (`curl` is only used for the container healthcheck and because there is an Alpine variant (best!) we probably don't care if the Debian image ends up building bigger due to `curl`.)
+    curl && \
    rm -rf /var/lib/apt/lists/*

-FROM node:${ALPINE_VERSION} AS final-alpine
+FROM node:${ALPINE_VERSION_TAG} AS final-alpine
 RUN apk add --no-cache --update \
-  iputils \
-  sqlite \
-  tzdata
+	iputils=20240905-r0 \
+	sqlite=3.48.0-r0 \
+	tzdata=2025a-r0

 FROM final-${VARIANT} AS final

@@ -79,7 +79,7 @@ npm run dev

 Official Docker images for **Kener** are available on [Docker Hub](https://hub.docker.com/r/rajnandan1/kener). Multiple versions are maintained to support different use cases.

-<a href="https://hub.docker.com/r/rajnandan1/kener/tags?page=1&ordering=last_updated&name=3.2.4"><img src="https://img.shields.io/badge/Latest_Stable_Release-3.2.4-blue" alt="Kener latest stable version: 3.2.4" /></a>
+<a href="https://hub.docker.com/r/rajnandan1/kener/tags?page=1&ordering=last_updated&name=3.2.6"><img src="https://img.shields.io/badge/Latest_Stable_Release-3.2.6-blue" alt="Kener latest stable version: 3.2.6" /></a>

 #### Available Tags

@@ -93,38 +93,38 @@ Official Docker images for **Kener** are available on [Docker Hub](https://hub.d
 	</tr>
 	<tr>
 		<td><a href="https://hub.docker.com/r/rajnandan1/kener/tags?page=1&ordering=last_updated&name=latest" target="_blank"><code>latest</code></td>
-		<td>Latest stable release (aka 3.2.4)</td>
+		<td>Latest stable release (aka 3.2.6)</td>
 	</tr>
 	<tr>
-		<td><a href="https://hub.docker.com/r/rajnandan1/kener/tags?page=1&ordering=last_updated&name=3.2.4" target="_blank"><code>3.2.4</code></a></td>
+		<td><a href="https://hub.docker.com/r/rajnandan1/kener/tags?page=1&ordering=last_updated&name=3.2.6" target="_blank"><code>3.2.6</code></a></td>
 		<td>Specific release version</td>
 	</tr>
 	<tr>
 		<td><a href="https://hub.docker.com/r/rajnandan1/kener/tags?page=1&ordering=last_updated&name=3.2" target="_blank"><code>3.2</code></a></td>
-		<td>Major-minor version tag pointing to the latest patch (3.2.4) release within that minor version (3.2.x)</td>
+		<td>Major-minor version tag pointing to the latest patch (3.2.6) release within that minor version (3.2.x)</td>
 	</tr>
 	<tr>
 		<td><a href="https://hub.docker.com/r/rajnandan1/kener/tags?page=1&ordering=last_updated&name=3" target="_blank"><code>3</code></a></td>
-		<td>Major version tag pointing to the latest stable (3.2.4) release within that major version (3.x.x)</td>
+		<td>Major version tag pointing to the latest stable (3.2.6) release within that major version (3.x.x)</td>
 	</tr>
 	<tr>
 		<td align="left" colspan="2" style="color:#0D597F;text-align:left;">Alpine Linux 3.21 w/ Node.js v23.7.0 &nbsp;<strong><em>(smallest image size)</em></strong></td>
 	</tr>
 	<tr>
 		<td><a href="https://hub.docker.com/r/rajnandan1/kener/tags?page=1&ordering=last_updated&name=alpine" target="_blank"><code>alpine</code></td>
-		<td>Latest stable release (aka 3.2.4)</td>
+		<td>Latest stable release (aka 3.2.6)</td>
 	</tr>
 	<tr>
-		<td><a href="https://hub.docker.com/r/rajnandan1/kener/tags?page=1&ordering=last_updated&name=3.2.4-alpine" target="_blank"><code>3.2.4-alpine</code></a></td>
+		<td><a href="https://hub.docker.com/r/rajnandan1/kener/tags?page=1&ordering=last_updated&name=3.2.6-alpine" target="_blank"><code>3.2.6-alpine</code></a></td>
 		<td>Specific release version</td>
 	</tr>
 	<tr>
 		<td><a href="https://hub.docker.com/r/rajnandan1/kener/tags?page=1&ordering=last_updated&name=3.2-alpine" target="_blank"><code>3.2-alpine</code></a></td>
-		<td>Major-minor version tag pointing to the latest patch (3.2.4) release within that minor version (3.2.x)</td>
+		<td>Major-minor version tag pointing to the latest patch (3.2.6) release within that minor version (3.2.x)</td>
 	</tr>
 	<tr>
 		<td><a href="https://hub.docker.com/r/rajnandan1/kener/tags?page=1&ordering=last_updated&name=3-alpine" target="_blank"><code>3-alpine</code></a></td>
-		<td>Major version tag pointing to the latest stable (3.2.4) release within that major version (3.x.x)</td>
+		<td>Major version tag pointing to the latest stable (3.2.6) release within that major version (3.x.x)</td>
 	</tr>
 </table>

@@ -1,6 +1,6 @@
 {
  "name": "kener",
-  "version": "3.2.6",
+  "version": "3.2.8",
  "private": false,
  "license": "MIT",
  "description": "Kener: An open-source Node.js status page application for real-time service monitoring, incident management, and customizable reporting. Simplify service outage tracking, enhance incident communication, and ensure a seamless user experience.",
Author	SHA1	Message	Date
Raj Nandan Sharma	a1064771f8	fix: increment package version from 3.2.7 to 3.2.8 in package.json	2025-03-24 20:34:24 +05:30
Raj Nandan Sharma	463ee286bf	fix: increment package version from 3.2.6 to 3.2.7 in package.json	2025-03-24 20:30:05 +05:30
Raj Nandan Sharma	a7ae6e72ef	fix: downgrade package version from 3.2.8 to 3.2.6 in package.json	2025-03-24 20:28:01 +05:30
github-actions	36c67f60dd	Auto-generate README.md with release versions	2025-03-24 14:56:20 +00:00
Raj Nandan Sharma	bb718b04a6	fix: update Dockerfile to use ARG variables for Node.js version tags	2025-03-24 20:10:13 +05:30
Raj Nandan Sharma	b6ea060054	fix: update publish-images workflow and increment package version to 3.2.8	2025-03-24 20:01:53 +05:30
Raj Nandan Sharma	5dba54c048	fix: update publish-images workflow to set GH_TOKEN environment variable correctly	2025-03-24 19:53:29 +05:30
Raj Nandan Sharma	415276163f	Merge pull request #356 from rajnandan1/release/3.2.8-x fix: update Node.js version to 23 and increment package version to 3.2.7	2025-03-24 19:45:44 +05:30
Raj Nandan Sharma	017b9e2e84	fix: update Node.js version to 23 and increment package version to 3.2.7	2025-03-24 19:45:15 +05:30
Raj Nandan Sharma	5740991ee1	fix: update GitHub Actions workflow to use GH_PAT instead of GITHUB_TOKEN for authentication	2025-03-24 15:12:40 +05:30
Raj Nandan Sharma	06008bd719	fix: streamline Dockerfile by removing unnecessary paths and using variable references for base images	2025-03-24 12:11:03 +05:30
Raj Nandan Sharma	b53cd485e5	Merge pull request #263 from kaffolder7/feature/dependabot-version-updates feat: automate dependency updates 🤖	2025-03-24 11:59:41 +05:30
Raj Nandan Sharma	7c1fd39158	Merge branch 'main' into feature/dependabot-version-updates	2025-03-24 11:58:58 +05:30
Raj Nandan Sharma	f7888f1ba4	fix: update package versions in Dockerfile for consistency and stability	2025-03-24 11:32:05 +05:30
Kyle Affolder	8c95c94472	update: combine to avoid multiple processes Combined to reduce spawning multiple `rm` processes.	2025-02-17 13:29:34 -05:00
Kyle Affolder	7dafb2eddc	add: GHA job to confirm if Dependabot PRs exist Adds job to check if any Dependabot PRs are open and if so, fail the Docker build (since we need to ensure OS packages exist and are in their correct versions when using pinned versions for security purposes).	2025-02-17 13:24:22 -05:00
Kyle Affolder	7c9f3eb87f	add: add back pinned `tzdata` version Necessary for Dependabot to track	2025-02-17 13:22:15 -05:00
Kyle	ab34dd81f8	Merge branch 'rajnandan1:main' into feature/dependabot-version-updates	2025-02-17 13:04:23 -05:00
Kyle Affolder	a8be878a87	update: commented out node.js deps. monitoring Not sure if we are wanting Dependabot to track Node.js packages, so for the time being, commenting this block out, but leaving for now w/ “TODO” to come back to at a later point.	2025-02-11 17:54:37 -05:00
Kyle Affolder	2b1849f1a3	update: grammar updates	2025-02-11 17:47:45 -05:00
Kyle Affolder	25a6590324	Merge branch 'feature/dependabot-version-updates' of https://github.com/kaffolder7/kener into feature/dependabot-version-updates	2025-02-11 17:31:48 -05:00
Kyle Affolder	fa251dc07f	update: README generation workflow	2025-02-11 17:31:33 -05:00
Kyle	4de93e7e95	Merge branch 'main' into feature/dependabot-version-updates	2025-02-11 17:25:28 -05:00
Kyle Affolder	a5e5f33dc8	Merge branch 'main' into feature/dependabot-version-updates # Conflicts: # .github/workflows/publish-images.yml # Dockerfile	2025-02-11 17:17:45 -05:00
Kyle Affolder	4060094404	add(dependabot): to automate dependency updates Integrating Dependabot into the workflow ensures automatic dependency updates, improving security, reducing technical debt, and keeping packages up to date with minimal manual effort. This helps prevent vulnerabilities and maintain code stability over time. Dependabot will automatically monitor the project’s dependencies and open pull requests (PRs) to update them when new versions are released. Here’s how it works: 1. Scans for Outdated Dependencies – It checks project dependency files (e.g., package.json, Dockerfile, .env.build, etc.) for outdated versions. 2. Fetches Latest Versions – When a newer version of a dependency is available, Dependabot retrieves it and updates the dependency files accordingly. 3. Opens a Pull Request – It then creates a PR with the updated dependency, detailing the changes and linking to release notes, changelogs, or security advisories. 4. Runs CI/CD Tests – If we end up setting up continuous integration (CI) tests, the PR will trigger the tests to check for breaking changes. 5. Security Updates – Dependabot also detects vulnerable dependencies and creates PRs to update them to a secure version. 6. Auto-Merging (Optional) – We might consider this at a later point, but if configured, it can automatically merge PRs when updates pass all tests and meet the requirements.	2025-02-09 22:08:06 -05:00