[Snyk] Security upgrade alpine from 3.16 to 3.23.2

[snyk-io]

Snyk has created this PR to fix 2 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• Dockerfile

We recommend upgrading to alpine:3.23.2, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	CVE-2025-26519 SNYK-ALPINE316-MUSL-8720632	139
	CVE-2025-26519 SNYK-ALPINE316-MUSL-8720632	139
	Out-of-bounds Write SNYK-ALPINE316-BUSYBOX-6913410	66
	Out-of-bounds Write SNYK-ALPINE316-BUSYBOX-6913410	66

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Out-of-bounds Write

[snyk-io]

This is a major OS upgrade across seven stable releases (3.16 → 3.23.2), introducing significant breaking changes to core system libraries, package management, and language runtimes. Applications and infrastructure scripts will likely require modifications.

Highlights:

• OpenSSL 3.x: The default OpenSSL was upgraded from 1.1 to 3.0 in version 3.17, which can break applications with specific crypto dependencies. A compatibility package (openssl1.1-compat) is available.
• Python Environment: Starting in version 3.19, pip can no longer install packages into the system directory. Developers must use virtual environments or pipx.
• Package & Tooling Changes: iptables now defaults to the nftables backend, Redis has been replaced by Valkey, and the apk package manager was upgraded to v3, which may affect scripts using libapk.

Source: Alpine Linux release notes
Recommendation: Thoroughly test applications in a staging environment built on the new base image. Pay close attention to Python dependencies, custom firewall rules, and any direct usage of libapk or OpenSSL libraries before merging.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.