Update Dockerfile and CI configuration

- Updated libc6-dev version in Dockerfile from 2.35-0ubuntu3.8 to 2.35-0ubuntu3.9.
- Modified GitHub Actions CI configuration to use updated versions for GitVersion and upload-artifact actions.
- Adjusted artifact paths in CI workflow to reflect new naming conventions.

Also added a new entry in the changelog for version 0.5.1 addressing vulnerabilities in .NET (CVE-2024-38229, CVE-2024-35264).

Signed-off-by: Victor Chang <[email protected]>

Author: mocsharp

.github/.gitversion.yml

@@ -19,16 +19,21 @@ mode: ContinuousDelivery
 branches:
   main:
     label: ''
+    regex: ^main$
   release:
     label: rc
+    regex: ^releases?[/-](?<BranchName>.+)
   develop:
     label: beta
     increment: Patch
+    regex: ^develop$
   feature:
     label: alpha.{BranchName}
+    regex: ^features?[/-](?<BranchName>.+)
   pull-request:
     label: pr
     increment: Patch
+    regex: ^(pull|pull\-requests|pr)[/-]
 
 ignore:
   sha: []

.github/workflows/ci.yml

@@ -51,9 +51,9 @@ jobs:
           dotnet-version: "8.0.x"
 
       - name: Setup GitVersion
-        uses: gittools/actions/gitversion/[email protected].1
+        uses: gittools/actions/gitversion/[email protected].11
         with:
-          versionSpec: '6.0.5'
+          versionSpec: '6.0.x'
 
       - name: Determine Version
         id: gitversion
@@ -68,7 +68,7 @@ jobs:
         run: cat src/AssemblyInfo.cs
 
       - name: Upload AssemblyInfo
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.6.2
         if: always()
         with:
           name: assembly-info
@@ -297,10 +297,10 @@ jobs:
           popd
 
       - name: Upload Integration Test Results
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.6.2
         if: always()
         with:
-          name: integration-${{ matrix.feature }}
+          name: integration-${{ matrix.feature }}-${{ matrix.database }}
           path: |
             ${{ github.workspace }}/LivingDoc.html
             ${{ github.workspace }}/services.log
@@ -386,9 +386,9 @@ jobs:
           dir -r ~/release
 
       - name: Upload CLI
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.6.2
         with:
-          name: artifacts
+          name: artifacts-cli
           path: ~/release
           retention-days: 7
 
@@ -402,7 +402,7 @@ jobs:
 
       - name: Upload Nuget
         if: ${{ matrix.os == 'ubuntu-latest' }}
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.6.2
         with:
           name: nuget
           path: ~/nupkg
@@ -529,9 +529,9 @@ jobs:
           Get-ChildItem ~\release -Recurse
 
       - name: Upload docs
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.6.2
         with:
-          name: artifacts
+          name: artifacts-docs
           path: ~/release
           retention-days: 7
 
@@ -617,9 +617,9 @@ jobs:
           milestone: ${{ env.MAJORMINORPATCH }}
           name: "Release v${{ env.MAJORMINORPATCH }}"
           assets: |
-            artifacts/mig-cli-${{ env.SEMVER }}-linux-x64.zip
-            artifacts/mig-cli-${{ env.SEMVER }}-win-x64.zip
-            artifacts/mig-docs-${{ env.SEMVER }}.zip
+            artifacts-cli/mig-cli-${{ env.SEMVER }}-linux-x64.zip
+            artifacts-cli/mig-cli-${{ env.SEMVER }}-win-x64.zip
+            artifacts-docs/mig-docs-${{ env.SEMVER }}.zip
 
       - name: Publish release with GitReleaseManager
         uses: gittools/actions/gitreleasemanager/[email protected]
@@ -643,7 +643,7 @@ jobs:
         if: ${{ contains(github.ref, 'refs/heads/main') }}
         run: |
           mkdir userguide
-          unzip artifacts/mig-docs-${{ env.SEMVER }}.zip -d userguide/
+          unzip artifacts-docs/mig-docs-${{ env.SEMVER }}.zip -d userguide/
           ls -lR userguide/
 
       - name: Deploy Docs

Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM mcr.microsoft.com/dotnet/sdk:8.0-jammy as build
+FROM mcr.microsoft.com/dotnet/sdk:8.0-jammy AS build
 
 # Install the tools
 RUN dotnet tool install --tool-path /tools dotnet-trace
@@ -36,7 +36,7 @@ ENV DEBIAN_FRONTEND=noninteractive
 RUN apt-get clean \
  && apt-get update \
  && apt-get install -y --no-install-recommends curl \
- && apt-get install -y libc6-dev=2.35-0ubuntu3.8 \
+ && apt-get install -y libc6-dev=2.35-0ubuntu3.9 \
  && rm -rf /var/lib/apt/lists                           # this is a workaround for Mongo encryption library
 
 WORKDIR /opt/monai/ig

docs/changelog.md

@@ -17,6 +17,11 @@
 
 # Changelog
 
+## 0.5.1
+[GitHub Milestone 0.5.1](https://github.com/Project-MONAI/monai-deploy-informatics-gateway/milestone/30)
+
+- gh-521 Address vulnerabilities in .NET (CVE-2024-38229, CVE-2024-35264)
+
 ## 0.5.0
 [GitHub Milestone 0.5.0](https://github.com/Project-MONAI/monai-deploy-informatics-gateway/milestone/4)