Hi folks, can you please take a look? https://github.com/pact-foundation/pact-broker-docker/pull/306 I would like to suggest bumping the base image for the broker from ruby:3.3.10-alpine3.21 to apline3.23, because 3.21 has several vulnerabilities. There's so many versions of ruby images, that idk which to pick, so I picked the one that seemed the closest to the existing one. Is there some testing you'd like to run other than the github actions workflow on the PR?

3.23 should be fine if ci passes, i would have chosen that image too. curious as to why trivy hasn’t picked them up in the audit. it currently only has supercronic listed as a failure. i have noted in my last update i forgot to update the Dockerfile-bundle-base and Dockerfile-package-base which also need the image updating and bundler to 2.5.22 which matches the gemfile.lock these dockerfiles are used when a new pact broker is released. will wrap up those items and get this released.

Thanks! 🙂

no thank you as always Stan!

Awesome, thank you!