From b3f82d975b7c04973b3d5745ffb58f76b0528773 Mon Sep 17 00:00:00 2001
From: Alexis Loskoutoff <alexis@pctraining.fr>
Date: Mon, 21 Sep 2026 23:33:30 +0200
Subject: [PATCH 1/2] build(docker): pin alpine base image to 3.24

---
 Dockerfile            | 2 +-
 Dockerfile.goreleaser | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index a6248e5..906241b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,7 +9,7 @@ RUN go build -o rest-server ./cmd/rest-server
 
 
 
-FROM alpine
+FROM alpine:3.24
 
 ENV DATA_DIRECTORY=/data
 ENV PASSWORD_FILE=/data/.htpasswd
diff --git a/Dockerfile.goreleaser b/Dockerfile.goreleaser
index 41a6d98..1fd4c03 100644
--- a/Dockerfile.goreleaser
+++ b/Dockerfile.goreleaser
@@ -1,4 +1,4 @@
-FROM alpine
+FROM alpine:3.24
 
 ENV DATA_DIRECTORY=/data
 ENV PASSWORD_FILE=/data/.htpasswd

From 88dad737862fc6fac86cde9e2d06a4677b71422d Mon Sep 17 00:00:00 2001
From: Alexis Loskoutoff <alexis@pctraining.fr>
Date: Mon, 21 Sep 2026 23:34:04 +0200
Subject: [PATCH 2/2] ci(dependabot): add docker ecosystem

---
 .github/dependabot.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e199af0..9300efc 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -15,3 +15,9 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+
+  # Base images used in Dockerfiles
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"