From cf1cd39c54b92a51a5ee6875bf460cb5c4a36b77 Mon Sep 17 00:00:00 2001
From: robbond <rob@rdbsolutions.co.uk>
Date: Fri, 6 Mar 2026 09:52:04 +0000
Subject: [PATCH] chore(deploy): switch to patched bookworm slim runtime base

---
 Dockerfile | 24 +++++++++++++++++++-----
 1 file changed, 19 insertions(+), 5 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index ba8b59f..31ec0b2 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,28 +1,42 @@
-FROM node:20.19.5-alpine3.22 AS deps
+FROM node:20.19.5-bookworm-slim AS deps
 WORKDIR /app
 
+RUN apt-get update \
+    && apt-get upgrade -y \
+    && rm -rf /var/lib/apt/lists/*
+
 COPY package.json package-lock.json ./
 RUN npm ci
 
-FROM node:20.19.5-alpine3.22 AS builder
+FROM node:20.19.5-bookworm-slim AS builder
 WORKDIR /app
 
+RUN apt-get update \
+    && apt-get upgrade -y \
+    && rm -rf /var/lib/apt/lists/*
+
 COPY --from=deps /app/node_modules ./node_modules
 COPY . .
 RUN npm run build
 
-FROM node:20.19.5-alpine3.22 AS prod-deps
+FROM node:20.19.5-bookworm-slim AS prod-deps
 WORKDIR /app
 
+RUN apt-get update \
+    && apt-get upgrade -y \
+    && rm -rf /var/lib/apt/lists/*
+
 COPY package.json package-lock.json ./
 RUN npm ci --omit=dev
 
-FROM node:20.19.5-alpine3.22 AS runner
+FROM node:20.19.5-bookworm-slim AS runner
 WORKDIR /app
 
 ENV NODE_ENV=production
 
-RUN apk upgrade --no-cache
+RUN apt-get update \
+    && apt-get upgrade -y \
+    && rm -rf /var/lib/apt/lists/*
 
 COPY --from=prod-deps /app/node_modules ./node_modules
 COPY --from=builder /app/package.json ./package.json