fix: patch and qualify the website container for local releases #77

2026-10-16T20:54:17Z

KofTwentyTwo commented

2026-10-16 20:54:17 +00:00

(Migrated from github.com)

Fixes #78

Updates Next.js and its lint configuration to 16.4.3, preserves the existing dependency security minimums, refreshes compatible transitive dependencies, and upgrades Alpine runtime packages to remove the two OpenSSL high findings in the initial image.

Adds six HTTP smoke tests for the homepage, feature/security/documentation pages, SVG icon and unknown-route 404. Tests can start the development server or target a running container through SMOKE_BASE_URL.

Validation: six HTTP tests passed against the actual Linux image running as UID 1001 with capabilities dropped; production image build passed; fresh Trivy 0.75.0 scan with --severity HIGH,CRITICAL --exit-code 1 passed with zero findings. Image ID: sha256:14f1132baa5a7d48011fe1773ad679c88a5198bcbe0495a8a2118d12cc8d097c. Local lint has zero errors and three warnings. npm audit retains two moderate findings through @tailwindcss/typography; no forced dependency downgrade was applied.

This prepares the application for local forge qualification. Gitea metadata import, automated local-runner build, internal OCI publication and ArgoCD release are not yet verified. Existing CI remains enabled.

Fixes #78 Updates Next.js and its lint configuration to 16.4.3, preserves the existing dependency security minimums, refreshes compatible transitive dependencies, and upgrades Alpine runtime packages to remove the two OpenSSL high findings in the initial image. Adds six HTTP smoke tests for the homepage, feature/security/documentation pages, SVG icon and unknown-route 404. Tests can start the development server or target a running container through SMOKE_BASE_URL. Validation: six HTTP tests passed against the actual Linux image running as UID 1001 with capabilities dropped; production image build passed; fresh Trivy 0.75.0 scan with --severity HIGH,CRITICAL --exit-code 1 passed with zero findings. Image ID: sha256:14f1132baa5a7d48011fe1773ad679c88a5198bcbe0495a8a2118d12cc8d097c. Local lint has zero errors and three warnings. npm audit retains two moderate findings through @tailwindcss/typography; no forced dependency downgrade was applied. This prepares the application for local forge qualification. Gitea metadata import, automated local-runner build, internal OCI publication and ArgoCD release are not yet verified. Existing CI remains enabled.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/nuncio-website#77