Update Dockerfile and CI configuration

- Updated libc6-dev version in Dockerfile from 2.35-0ubuntu3.8 to 2.35-0ubuntu3.9.
- Modified GitVersion setup action version from v3.1.1 to v3.1.11 in CI workflow.
- Updated upload-artifact action version from v3.1.2 to v4.6.2 in CI workflow.
- Added changelog entry for version 0.5.1 addressing vulnerabilities in .NET (CVE-2024-38229, CVE-2024-35264).

Signed-off-by: Victor Chang <[email protected]>

Author: mocsharp

.github/.gitversion.yml

@@ -19,16 +19,21 @@ mode: ContinuousDelivery
 branches:
   main:
     label: ''
+    regex: ^main$
   release:
     label: rc
+    regex: ^releases?[/-](?<BranchName>.+)
   develop:
     label: beta
     increment: Patch
+    regex: ^develop$
   feature:
     label: alpha.{BranchName}
+    regex: ^features?[/-](?<BranchName>.+)
   pull-request:
     label: pr
     increment: Patch
+    regex: ^(pull|pull\-requests|pr)[/-]
 
 ignore:
   sha: []

.github/workflows/ci.yml

@@ -51,9 +51,9 @@ jobs:
           dotnet-version: "8.0.x"
 
       - name: Setup GitVersion
-        uses: gittools/actions/gitversion/[email protected].1
+        uses: gittools/actions/gitversion/[email protected].11
         with:
-          versionSpec: '6.0.5'
+          versionSpec: '6.0.x'
 
       - name: Determine Version
         id: gitversion
@@ -68,7 +68,7 @@ jobs:
         run: cat src/AssemblyInfo.cs
 
       - name: Upload AssemblyInfo
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.6.2
         if: always()
         with:
           name: assembly-info
@@ -297,10 +297,10 @@ jobs:
           popd
 
       - name: Upload Integration Test Results
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.6.2
         if: always()
         with:
-          name: integration-${{ matrix.feature }}
+          name: integration-${{ matrix.feature }}-${{ matrix.database }}
           path: |
             ${{ github.workspace }}/LivingDoc.html
             ${{ github.workspace }}/services.log
@@ -386,7 +386,7 @@ jobs:
           dir -r ~/release
 
       - name: Upload CLI
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.6.2
         with:
           name: artifacts
           path: ~/release
@@ -402,7 +402,7 @@ jobs:
 
       - name: Upload Nuget
         if: ${{ matrix.os == 'ubuntu-latest' }}
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.6.2
         with:
           name: nuget
           path: ~/nupkg
@@ -529,7 +529,7 @@ jobs:
           Get-ChildItem ~\release -Recurse
 
       - name: Upload docs
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.6.2
         with:
           name: artifacts
           path: ~/release

Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM mcr.microsoft.com/dotnet/sdk:8.0-jammy as build
+FROM mcr.microsoft.com/dotnet/sdk:8.0-jammy AS build
 
 # Install the tools
 RUN dotnet tool install --tool-path /tools dotnet-trace
@@ -36,7 +36,7 @@ ENV DEBIAN_FRONTEND=noninteractive
 RUN apt-get clean \
  && apt-get update \
  && apt-get install -y --no-install-recommends curl \
- && apt-get install -y libc6-dev=2.35-0ubuntu3.8 \
+ && apt-get install -y libc6-dev=2.35-0ubuntu3.9 \
  && rm -rf /var/lib/apt/lists                           # this is a workaround for Mongo encryption library
 
 WORKDIR /opt/monai/ig

docs/changelog.md

@@ -17,6 +17,11 @@
 
 # Changelog
 
+## 0.5.1
+[GitHub Milestone 0.5.1](https://github.com/Project-MONAI/monai-deploy-informatics-gateway/milestone/30)
+
+- gh-521 Address vulnerabilities in .NET (CVE-2024-38229, CVE-2024-35264)
+
 ## 0.5.0
 [GitHub Milestone 0.5.0](https://github.com/Project-MONAI/monai-deploy-informatics-gateway/milestone/4)