[dependabot]

Bumps the ci group with 1 update in the / directory: demonstrationorg/dhi-node.

Updates demonstrationorg/dhi-node from c00317f to 305d87f

[github-actions]

Outdated

Overview

Image reference	backstage:latest	backstage:latest
- digest	2b77b2ef5b04	a1ffe33ce487
- tag	latest	latest
- provenance	0d81841	34c9197
- vulnerabilities
- platform	linux/amd64	linux/amd64
- size	228 MB	228 MB (-4.4 kB)
- packages	1372	1372

[github-actions]

Outdated

Overview

Image reference	frontend:latest	frontend:latest
- digest	bdee9532e509	5644ea589d14
- tag	latest	latest
- provenance	974b897	fecb2ae
- vulnerabilities
- platform	linux/amd64	linux/amd64
- size	32 MB	32 MB (+80 B)
- packages	20	20

Policies (0 improved, 0 worsened)

Policy Name	frontend:latest	frontend:latest	Change	Standing
Default non-root user	✅	✅		No Change
No copyleft licenses	⚠️ 12	⚠️ 12		No Change
No fixable critical or high vulnerabilities	⚠️ 9	⚠️ 9		No Change
No high-profile vulnerabilities	✅	✅		No Change
No outdated base images	⚠️	⚠️		No Change
No unapproved base images	✅	✅		No Change
Supply chain attestations	✅	✅		No Change

[github-actions]

Overview

Image reference	backstage:latest	backstage:latest
- digest	ceb80c01fd52	14b0daf20130
- tag	latest	latest
- provenance	974b897	fecb2ae
- vulnerabilities
- platform	linux/amd64	linux/amd64
- size	228 MB	228 MB (+100 kB)
- packages	1372	1372

Environment Variables (1 changes)

• ± 1 changed
• 4 unchanged

 NODE_ENV=production
 NODE_OPTIONS=--no-node-snapshot
-NODE_VERSION=24.16.0-r0
+NODE_VERSION=24.18.0-r0
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 PYTHON=/opt/python/bin/python3

Labels (3 changes)

• ± 3 changed
• 13 unchanged

-com.docker.dhi.chain-id=sha256:b9dab819373a83a1f7308855dafc5670e99b45adc9844904dd98c415f24c28c6
+com.docker.dhi.chain-id=sha256:44cbeff9c61861765d310fa4ff72774cda4451e9193588f7c3a0e87f6b1f5339
 com.docker.dhi.compliance=cis
-com.docker.dhi.created=2026-05-22T10:08:24Z
+com.docker.dhi.created=2026-07-09T22:57:13Z
 com.docker.dhi.date.end-of-life=2028-04-30
 com.docker.dhi.date.release=2025-05-06
 com.docker.dhi.definition=image/node/alpine-3.23/24_backstage
 com.docker.dhi.distro=alpine-3.23
 com.docker.dhi.entitlement=public
 com.docker.dhi.flavor=
 com.docker.dhi.name=demonstrationorg/dhi-node
 com.docker.dhi.package-manager=
 com.docker.dhi.shell=
 com.docker.dhi.title=Node.js 24.x
 com.docker.dhi.url=https://dhi.io/catalog/node
 com.docker.dhi.variant=runtime
-com.docker.dhi.version=24.16.0-alpine3.23_backstage
+com.docker.dhi.version=24.18.0-alpine3.23_backstage

Policies (1 improved, 0 worsened)

Policy Name	backstage:latest	backstage:latest	Change	Standing
Default non-root user	✅	✅		No Change
No copyleft licenses	⚠️ 31	⚠️ 31		No Change
No fixable critical or high vulnerabilities	⚠️ 46	⚠️ 33	-13	Improved
No high-profile vulnerabilities	✅	✅		No Change
No outdated base images	⚠️	⚠️		No Change
No unapproved base images	✅	✅		No Change
Supply chain attestations	✅	✅		No Change

Packages and Vulnerabilities (11 package changes and 52 vulnerability changes)

• ♾️ 11 packages changed
• 1082 packages unchanged

• ✔️ 52 vulnerabilities removed

Changes for packages of type apk (10 changes)

	Package	Version backstage:latest	Version backstage:latest
♾️	ca-certificates-bundle	20260413-r0	20260611-r0
♾️	libcrypto3	3.5.6-r1	3.5.7-r1
♾️	libexpat	2.7.5-r0	2.8.2-r0
		Removed vulnerabilities (15):
♾️	libssl3	3.5.6-r1	3.5.7-r1
		Removed vulnerabilities (15):
♾️	make	4.4.1-r3	4.4.1-r4
♾️	nodejs-24	24.16.0-r0	24.18.0-r0
		Removed vulnerabilities (11):
♾️	pyc-3.14	3.14.5-r7	3.14.6-r10
♾️	python-3.14	3.14.5-r7	3.14.6-r10
		Removed vulnerabilities (11):
♾️	python-3.14-pyc	3.14.5-r7	3.14.6-r10
♾️	python-3.14-pycache-pyc0	3.14.5-r7	3.14.6-r10

Changes for packages of type docker (1 changes)

	Package	Version backstage:latest	Version backstage:latest
♾️	dhi-node	24.16.0-alpine3.23_backstage	24.18.0-alpine3.23_backstage