9 Commits

Author	SHA1	Message	Date
Username	f5f2f8f363	containerfile: remove vendored jaraco from setuptools, purge pip cache	2026-01-20 08:28:26 +01:00
Username	5a05af4764	containerfile: use --no-deps to prevent jaraco.context downgrade	2026-01-20 08:25:16 +01:00
Username	329563f4b9	containerfile: force reinstall jaraco.context to fix GHSA-58pv	2026-01-20 08:23:53 +01:00
Username	66d7948073	containerfile: consolidate security pins in requirements.txt	2026-01-20 08:20:55 +01:00
Username	677cdff58d	containerfile: upgrade base image pip and jaraco.context	2026-01-20 08:19:41 +01:00
Username	aba81f908e	containerfile: force upgrade pip and jaraco.context post-install	2026-01-20 08:16:49 +01:00
Username	e4b313041e	containerfile: pin pip>=25.3 to fix CVE-2025-8869	2026-01-20 08:12:22 +01:00
Username	0f5742ccc2	containerfile: switch slim image to alpine base ... Debian distroless had 5 critical CVEs (unfixed in Debian 12). Alpine has active security patches and smaller footprint.	2026-01-19 23:58:34 +01:00
Username	fc7d3df308	add distroless slim container image	2026-01-19 19:52:56 +01:00