(incubator-devlake) branch cp-secfix updated: fix: security hotfix (#6793)

[ab...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

abeizn pushed a commit to branch cp-secfix
in repository https://gitbox.apache.org/repos/asf/incubator-devlake.git


The following commit(s) were added to refs/heads/cp-secfix by this push:
     new 7d18fc321 fix: security hotfix (#6793)
7d18fc321 is described below

commit 7d18fc321732c25034364bbb8833b2ffdf02687f
Author: Ji Bin <ma...@live.com>
AuthorDate: Thu Jan 18 12:48:31 2024 +0800

    fix: security hotfix (#6793)
    
    Signed-off-by: Ji Bin <ma...@live.com>
---
 config-ui/Dockerfile | 2 +-
 grafana/Dockerfile   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/config-ui/Dockerfile b/config-ui/Dockerfile
index ba8a620b7..08c2b2ad8 100644
--- a/config-ui/Dockerfile
+++ b/config-ui/Dockerfile
@@ -31,7 +31,7 @@ COPY . .
 RUN yarn install
 RUN yarn build
 
-FROM nginxinc/nginx-unprivileged:1.21
+FROM nginxinc/nginx-unprivileged:1.25
 USER 0
 #ADD https://github.com/ufoscout/docker-compose-wait/releases/download/2.9.0/wait /wait
 #RUN chmod +x /wait
diff --git a/grafana/Dockerfile b/grafana/Dockerfile
index f0c058558..642d941fa 100644
--- a/grafana/Dockerfile
+++ b/grafana/Dockerfile
@@ -23,7 +23,7 @@
 #While incubation status is not necessarily a reflection of the completeness or stability of the code,
 #it does indicate that the project has yet to be fully endorsed by the ASF.
 
-FROM grafana/grafana:9.5.14
+FROM grafana/grafana:9.5.15
 COPY ./provisioning/dashboards /etc/grafana/provisioning/dashboards
 COPY ./provisioning/datasources /etc/grafana/provisioning/datasources
 COPY ./dashboards /etc/grafana/dashboards