From b1149ae1046f54f744ab2ceffda39a2d97a1c0a0 Mon Sep 17 00:00:00 2001 From: Keith Zeto Date: Wed, 30 Sep 2026 09:01:34 -0700 Subject: [PATCH] Bump SNYK_BROKER_VERSION to v1.0.21-axon Picks up cortexapps/snyk-broker#30, which updates engine.io to 6.6.11 and the two brace-expansion copies to 2.1.7 and 1.1.21. This clears the 5 npm HIGH findings (CVE-2026-102599, CVE-2026-102276, CVE-2026-102278) under /usr/local/snyk-broker that the Trivy scan flagged. The OS-package findings from the same scan were cleared by #152. Updates both the production agent image and the test relay server image to the same snyk-broker fork tag. Co-Authored-By: Claude Opus 5.5 --- agent/test/relay/Dockerfile.snyk-broker-server | 2 +- docker/Dockerfile | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/agent/test/relay/Dockerfile.snyk-broker-server b/agent/test/relay/Dockerfile.snyk-broker-server index 0c295b0..bf636cb 100644 --- a/agent/test/relay/Dockerfile.snyk-broker-server +++ b/agent/test/relay/Dockerfile.snyk-broker-server @@ -2,7 +2,7 @@ FROM debian:stable-slim # Install NodeJS and Snyk Broker ENV NODE_VERSION=20 -ARG SNYK_BROKER_VERSION=v1.0.20-axon +ARG SNYK_BROKER_VERSION=v1.0.21-axon RUN apt update && apt install -y git wget && \ wget -q -O - https://deb.nodesource.com/setup_${NODE_VERSION}.x | bash - && \ apt install -y nodejs && \ diff --git a/docker/Dockerfile b/docker/Dockerfile index 1fd706a..d22582e 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -50,7 +50,7 @@ RUN echo "apt cache bust: $APT_CACHE_BUST" \ # Install NodeJS and Snyk Broker ENV NODE_VERSION=20 -ARG SNYK_BROKER_VERSION=v1.0.20-axon +ARG SNYK_BROKER_VERSION=v1.0.21-axon RUN wget -q -O - https://deb.nodesource.com/setup_${NODE_VERSION}.x | bash - && apt-get install -y nodejs RUN npm install --global npm@11.18.0 typescript@4.9.3 RUN git clone https://github.com/cortexapps/snyk-broker.git /tmp/snyk-broker && \