security updates

Author: rentallect

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:18-bookworm-slim AS build
+FROM node:22-slim AS build
 
 LABEL maintainer="OpenZiti <openziti@netfoundry.io>"
 
@@ -14,14 +14,9 @@ WORKDIR /home/node/ziti-browzer-bootstrapper
 COPY --chown=node:node package.json ./
 COPY --chown=node:node yarn.lock ./
 
-ENV YARN_VERSION 4.0.2
-
-RUN set -ex \
-  && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" \
-  && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ \
-  && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn \
-  && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg \
-  && rm yarn-v$YARN_VERSION.tar.gz
+# Install yarn 4
+RUN corepack enable
+RUN corepack prepare yarn@4.0.2 --activate
 
 # Install the dependencies for the Ziti BrowZer Bootstrapper according to yarn.lock (ci) without
 # devDepdendencies (--production), then uninstall npm which isn't needed.
@@ -34,7 +29,7 @@ COPY --chown=node:node zha-docker-entrypoint .
 COPY --chown=node:node lib ./lib/
 COPY --chown=node:node assets ./assets/
 
-FROM node:18-bookworm-slim
+FROM node:22-slim
 
 RUN apt-get update && apt-get install curl -y