With regards to security issues with mariadb-dev package in AlpineLinux (issue #94), a solution that would remove many of the problems would be to upgrade to Alpine-3.17. However, there seem to be no Ruby-2.7.6-Alpine-image available after ruby:2.7.6-alpine3.16, Further upgrades would require migrating Pact-Broker to Ruby 3.0 or 3.1. I can't find any written information (issue or technical roadmap) describing such plans. According to this page Ruby 2.7 is to be EOL at the end of March 2023. Is there a planned way forward for Pact-Broker that you can share?

TL;DR - yes there are plans. It’s on our PactFlow roadmap (which would necessitate the OSS broker also supporting it)

I created an issue for upgrading to Ruby 3.1.3 (or higher) which is needed to use Alpine Linux 3.17:https://github.com/pact-foundation/pact_broker/issues/599