Skip to content

deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.18#1173

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/azul-zulu-openjdk-alpine-17.x
Open

deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.18#1173
renovate[bot] wants to merge 1 commit intomainfrom
renovate/azul-zulu-openjdk-alpine-17.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented May 4, 2024

This PR contains the following updates:

Package Type Update Change
azul/zulu-openjdk-alpine stage patch 1717.0.18

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team May 4, 2024 01:59
@renovate renovate bot changed the title deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.11 deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.12 Jul 17, 2024
@renovate renovate bot force-pushed the renovate/azul-zulu-openjdk-alpine-17.x branch from 8591449 to 2314786 Compare July 17, 2024 05:01
@renovate renovate bot changed the title deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.12 deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.13 Oct 17, 2024
@renovate renovate bot force-pushed the renovate/azul-zulu-openjdk-alpine-17.x branch from 2314786 to 2a3eb12 Compare October 17, 2024 08:42
@renovate renovate bot changed the title deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.13 deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.14 Jan 22, 2025
@renovate renovate bot force-pushed the renovate/azul-zulu-openjdk-alpine-17.x branch from 2a3eb12 to 20b8faa Compare January 22, 2025 14:03
@snykbotzup
Copy link
Copy Markdown

snykbotzup commented Jan 22, 2025

Snyk checks have failed. 93 issues have been found so far.

Status Scanner Critical High Medium Low Total (93)
Open Source Security 2 91 0 0 93 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@renovate renovate bot changed the title deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.14 deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.15 Apr 17, 2025
@renovate renovate bot force-pushed the renovate/azul-zulu-openjdk-alpine-17.x branch from 20b8faa to 9a3657c Compare April 17, 2025 07:41
@gitbotzup
Copy link
Copy Markdown

gitbotzup commented Apr 17, 2025

PR Summary

This Pull Request updates the base image used in the Dockerfile for the generic deployments formatter service. The change pins the Java base image to a specific patch version, which improves build consistency and can enhance security, but also introduces a need for ongoing monitoring of that specific version for vulnerabilities.


Changed Files and Their Summaries

1. internal/services/formatters/generic/deployments/Dockerfile

  • Change:
    The base image was updated from azul/zulu-openjdk-alpine:17 to azul/zulu-openjdk-alpine:17.0.18.
    This pins the Java base image to a specific patch version (17.0.18) instead of the general 17 tag, ensuring consistent builds and avoiding unexpected upstream changes.

Security Advice & Points of Attention

  • Positive:
    Pinning to a specific patch version can improve security by preventing unintentional upgrades to untested or potentially vulnerable versions.
  • Attention Required:
    By pinning to 17.0.18, you will not automatically receive future security patches for Java 17.
    Action:
    • Regularly monitor the security status of azul/zulu-openjdk-alpine:17.0.18.
    • Plan for periodic updates to newer patch versions as they are released to address any discovered vulnerabilities.

Reviewer Note:
This is a best practice change for build reproducibility, but it requires a process for tracking and updating dependencies to maintain security over time.
This is an AI-generated summary, which may be innacurate.
This aims only to assist human reviewers, and does not replace code reviews in any way.
Use responsibly and please submit any feedback to this form.

@renovate renovate bot changed the title deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.15 deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.16 Jul 16, 2025
@renovate renovate bot force-pushed the renovate/azul-zulu-openjdk-alpine-17.x branch from 9a3657c to 3820822 Compare July 16, 2025 12:32
@renovate renovate bot changed the title deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.16 deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.17 Oct 23, 2025
@renovate renovate bot force-pushed the renovate/azul-zulu-openjdk-alpine-17.x branch from 3820822 to 740a64f Compare October 23, 2025 20:10
Signed-off-by: Renovate Bot <bot@renovateapp.com>
@renovate renovate bot changed the title deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.17 deps:chore - update azul/zulu-openjdk-alpine Docker tag to v17.0.18 Jan 22, 2026
@renovate renovate bot force-pushed the renovate/azul-zulu-openjdk-alpine-17.x branch from 740a64f to 75fbf65 Compare January 22, 2026 08:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants