Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 8, 2026

This PR contains the following updates:

Package Type Update Change
ansible/ansible-lint action major v25.6.1v26.1.0

Release Notes

ansible/ansible-lint (ansible/ansible-lint)

v26.1.0

Compare Source

Fixes

Maintenance

v25.12.2

Compare Source

Fixes

Maintenance

v25.12.1

Compare Source

Features
Fixes
Maintenance

v25.12.0

Compare Source

Maintenance

v25.11.1

Compare Source

Features

Fixes

Maintenance

v25.11.0

Compare Source

Fixes

Maintenance

v25.9.2

Compare Source

Fixes

Maintenance

v25.9.1

Compare Source

Fixes

Maintenance

v25.9.0

Compare Source

Fixes

Maintenance

v25.8.2

Compare Source

Bugfixes

v25.8.1

Compare Source

Bugfixes

  • Fix first-run collection discovery by enabling plugin loader after prepare_environment (#​4722) @​cidrblock

Maintenance

v25.8.0

Compare Source

Bugfixes

v25.7.0

Compare Source

Enhancements

Bugfixes

Maintenance


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from lotyp as a code owner January 8, 2026 19:37
@renovate renovate bot enabled auto-merge (squash) January 8, 2026 19:37
@github-actions github-actions bot added the type: maintenance For maintenance, refactor and testing (perf, chore, style, revert, refactor, test, build, ci) label Jan 8, 2026
@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:0276fe99d0c830fa2d7731ad65741f0d9e89ded5be1c7bfa3b8d2ef8a7d177ec
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size73 MB
packages118
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.21
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.21
  • 8.1.34-alpine
  • 8.1.34-alpine3.21
  • 8.1.34-cli-alpine3.21
  • d0b581c71ccd5071323b105fbcf784f0cc839918e8992e56fe275df9dc840f2b
digestsha256:5a3201a62206d5168ce3bc9fe81cf35c07c93b4c213cff448ecbf5686161271a
vulnerabilitiescritical: 1 high: 0 medium: 5 low: 2

@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-alpine

Name8.1.34-alpine3.21
Digestsha256:5a3201a62206d5168ce3bc9fe81cf35c07c93b4c213cff448ecbf5686161271a
Vulnerabilitiescritical: 1 high: 0 medium: 5 low: 2
Pushed2 weeks ago
Size36 MB
Packages59
Flavoralpine
OS3.21
Runtime8.1.34

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.16-cli-alpine
  • 8.4.16-cli-alpine3.23
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.23
  • 8.4.16-alpine
  • 8.4.16-alpine3.23
  • 8.4-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image introduces no new vulnerability but removes 2
  • Image contains similar number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.4.16
2 weeks ago



8.4-alpine3.22
Minor runtime version update
Also known as:
  • 8.4.16-cli-alpine3.22
  • 8.4-cli-alpine3.22
  • 8.4.16-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.16
2 weeks ago



8.3-alpine3.22
Minor runtime version update
Also known as:
  • 8.3.29-cli-alpine3.22
  • 8.3-cli-alpine3.22
  • 8.3.29-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.29
2 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.29-cli-alpine3.23
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.23
  • 8.3.29-alpine
  • 8.3-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image introduces no new vulnerability but removes 2
  • Image contains similar number of packages
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.3
2 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.30-cli-alpine
  • 8.2.30-cli-alpine3.23
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.23
  • 8.2.30-alpine
  • 8.2.30-alpine3.23
  • 8.2-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image introduces no new vulnerability but removes 2
  • Image contains similar number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.2.30
2 weeks ago



8.2-alpine3.22
Minor runtime version update
Also known as:
  • 8.2.30-cli-alpine3.22
  • 8.2-cli-alpine3.22
  • 8.2.30-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.30
2 weeks ago



8.5-alpine
Minor runtime version update
Also known as:
  • 8.5.1-cli-alpine
  • 8.5.1-cli-alpine3.23
  • 8.5-cli-alpine
  • 8.5-cli-alpine3.23
  • 8-cli-alpine
  • 8-cli-alpine3.23
  • cli-alpine
  • cli-alpine3.23
  • alpine
  • alpine3.23
  • 8.5.1-alpine
  • 8.5.1-alpine3.23
  • 8.5-alpine3.23
  • 8-alpine
  • 8-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image introduces no new vulnerability but removes 2
  • Image contains similar number of packages
Image details:
  • Size: 44 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.5.1
2 weeks ago



8.5-alpine3.22
Minor runtime version update
Also known as:
  • 8.5.1-cli-alpine3.22
  • 8.5-cli-alpine3.22
  • 8-cli-alpine3.22
  • cli-alpine3.22
  • alpine3.22
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 44 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.5
2 weeks ago



@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:5fc4504559de794851eb770f4f49633afed500fe6cd2358c0b060a952d762f11
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size72 MB
packages122
📦 Base Image php:8.3-fpm-alpine
also known as
  • 8.3-fpm-alpine3.23
  • 8.3.29-fpm-alpine
  • 8.3.29-fpm-alpine3.23
  • 84c6df40c76a0bcd532e70d2a1b4d0cecd45ad9655ba431d318ec37d612d7bf6
digestsha256:0a80c7265e776321e0e2010d7b0eb7bc54f0ea8f7584dd322ff15d0371926d4b
vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2

@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:d40798d02fb496d75b231e56cca5c44ec0e80cfdd5ea492bc973769721bc0f48
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size76 MB
packages121
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.23
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.23
  • 8.2.30-alpine
  • 8.2.30-alpine3.23
  • 8.2.30-cli-alpine
  • 8.2.30-cli-alpine3.23
digestsha256:dad4e0c31503684d830285906fc548ea6788310260a670a9cd579f69636d873c
vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2

@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:6a96a992193b2814b539baf3398b91f699f58c78b7d0568298f349077734d28a
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size77 MB
packages121
📦 Base Image php:2d9d9d0610811d72bd332d556830f9ee027f885c1c04f540172288d3525aecc5
also known as
  • 8.3-alpine
  • 8.3-alpine3.23
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.23
  • 8.3.29-alpine
  • 8.3.29-cli-alpine3.23
digestsha256:55dd280d2f913218b52230b55c4779a3549200cec9b2993e0a91ee3ea4323994
vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2

@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-fpm-alpine

Name8.3.29-fpm-alpine3.23
Digestsha256:0a80c7265e776321e0e2010d7b0eb7bc54f0ea8f7584dd322ff15d0371926d4b
Vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2
Pushed2 weeks ago
Size34 MB
Packages62
Flavoralpine
OS3.23
Runtime8.3.29
The base image is also available under the supported tag(s): 8.3-fpm-alpine3.23, 8.3.29-fpm-alpine, 8.3.29-fpm-alpine3.23

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-fpm-alpine
Minor runtime version update
Also known as:
  • 8.4.16-fpm-alpine
  • 8.4.16-fpm-alpine3.23
  • 8.4-fpm-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.4.16
2 weeks ago



8.5-fpm-alpine
Image has same number of vulnerabilities
Also known as:
  • 8.5.1-fpm-alpine
  • 8.5.1-fpm-alpine3.23
  • 8.5-fpm-alpine3.23
  • 8-fpm-alpine
  • 8-fpm-alpine3.23
  • fpm-alpine
  • fpm-alpine3.23
Benefits:
  • Same OS detected
  • Image contains 1 fewer package
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.23
2 weeks ago



@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:a33b4611245f45283709d75b8297260b862b4fdd6a28db32c8bf10f0700dde7d
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size81 MB
packages121
📦 Base Image php:8.4-alpine
also known as
  • 8.4-alpine3.23
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.23
  • 8.4.16-alpine
  • 8.4.16-alpine3.23
  • 8.4.16-cli-alpine
  • 8.4.16-cli-alpine3.23
digestsha256:d07aff446f152e78003bdbf5f625f44501ba75bccfc6bfd6dc79ba3489a90db8
vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2

@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-alpine

Name8.3-alpine3.23
Digestsha256:55dd280d2f913218b52230b55c4779a3549200cec9b2993e0a91ee3ea4323994
Vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2
Pushed2 weeks ago
Size38 MB
Packages61
Flavoralpine
OS3.23
Runtime8.3
The base image is also available under the supported tag(s): 8.3-alpine3.23, 8.3-cli-alpine, 8.3-cli-alpine3.23, 8.3.29-alpine, 8.3.29-cli-alpine3.23

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.5-alpine
Minor runtime version update
Also known as:
  • 8.5.1-cli-alpine
  • 8.5.1-cli-alpine3.23
  • 8.5-cli-alpine
  • 8.5-cli-alpine3.23
  • 8-cli-alpine
  • 8-cli-alpine3.23
  • cli-alpine
  • cli-alpine3.23
  • alpine
  • alpine3.23
  • 8.5.1-alpine
  • 8.5.1-alpine3.23
  • 8.5-alpine3.23
  • 8-alpine
  • 8-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image contains 1 fewer package
  • Image has similar size
  • Image has same number of vulnerabilities
Image details:
  • Size: 44 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.5.1
2 weeks ago



8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.16-cli-alpine
  • 8.4.16-cli-alpine3.23
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.23
  • 8.4.16-alpine
  • 8.4.16-alpine3.23
  • 8.4-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.4.16
2 weeks ago



@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-alpine

Name8.2.30-alpine3.23
Digestsha256:dad4e0c31503684d830285906fc548ea6788310260a670a9cd579f69636d873c
Vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2
Pushed2 weeks ago
Size37 MB
Packages61
Flavoralpine
OS3.23
Runtime8.2.30
The base image is also available under the supported tag(s): 8.2-alpine3.23, 8.2-cli-alpine, 8.2-cli-alpine3.23, 8.2.30-alpine, 8.2.30-alpine3.23, 8.2.30-cli-alpine, 8.2.30-cli-alpine3.23

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.16-cli-alpine
  • 8.4.16-cli-alpine3.23
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.23
  • 8.4.16-alpine
  • 8.4.16-alpine3.23
  • 8.4-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.4.16
2 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.29-cli-alpine3.23
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.23
  • 8.3.29-alpine
  • 8.3-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.3
2 weeks ago



8.5-alpine
Minor runtime version update
Also known as:
  • 8.5.1-cli-alpine
  • 8.5.1-cli-alpine3.23
  • 8.5-cli-alpine
  • 8.5-cli-alpine3.23
  • 8-cli-alpine
  • 8-cli-alpine3.23
  • cli-alpine
  • cli-alpine3.23
  • alpine
  • alpine3.23
  • 8.5.1-alpine
  • 8.5.1-alpine3.23
  • 8.5-alpine3.23
  • 8-alpine
  • 8-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image contains 1 fewer package
  • Image has same number of vulnerabilities
Image details:
  • Size: 44 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.5.1
2 weeks ago



@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:eb3c26f98347e0614c25b47b6a7ea691e5434b7ade0cd5d4216279112f8a5a3d
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size100 MB
packages159
📦 Base Image php:8.4-alpine
also known as
  • 8.4-alpine3.23
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.23
  • 8.4.16-alpine
  • 8.4.16-alpine3.23
  • 8.4.16-cli-alpine
  • 8.4.16-cli-alpine3.23
digestsha256:d07aff446f152e78003bdbf5f625f44501ba75bccfc6bfd6dc79ba3489a90db8
vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2

@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.4-alpine

Name8.4.16-alpine3.23
Digestsha256:d07aff446f152e78003bdbf5f625f44501ba75bccfc6bfd6dc79ba3489a90db8
Vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2
Pushed2 weeks ago
Size41 MB
Packages61
Flavoralpine
OS3.23
Runtime8.4.16
The base image is also available under the supported tag(s): 8.4-alpine3.23, 8.4-cli-alpine, 8.4-cli-alpine3.23, 8.4.16-alpine, 8.4.16-alpine3.23, 8.4.16-cli-alpine, 8.4.16-cli-alpine3.23

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.5-alpine
Minor runtime version update
Also known as:
  • 8.5.1-cli-alpine
  • 8.5.1-cli-alpine3.23
  • 8.5-cli-alpine
  • 8.5-cli-alpine3.23
  • 8-cli-alpine
  • 8-cli-alpine3.23
  • cli-alpine
  • cli-alpine3.23
  • alpine
  • alpine3.23
  • 8.5.1-alpine
  • 8.5.1-alpine3.23
  • 8.5-alpine3.23
  • 8-alpine
  • 8-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image contains 1 fewer package
  • Image has similar size
  • Image has same number of vulnerabilities
Image details:
  • Size: 44 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.5.1
2 weeks ago



1 similar comment
@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.4-alpine

Name8.4.16-alpine3.23
Digestsha256:d07aff446f152e78003bdbf5f625f44501ba75bccfc6bfd6dc79ba3489a90db8
Vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2
Pushed2 weeks ago
Size41 MB
Packages61
Flavoralpine
OS3.23
Runtime8.4.16
The base image is also available under the supported tag(s): 8.4-alpine3.23, 8.4-cli-alpine, 8.4-cli-alpine3.23, 8.4.16-alpine, 8.4.16-alpine3.23, 8.4.16-cli-alpine, 8.4.16-cli-alpine3.23

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.5-alpine
Minor runtime version update
Also known as:
  • 8.5.1-cli-alpine
  • 8.5.1-cli-alpine3.23
  • 8.5-cli-alpine
  • 8.5-cli-alpine3.23
  • 8-cli-alpine
  • 8-cli-alpine3.23
  • cli-alpine
  • cli-alpine3.23
  • alpine
  • alpine3.23
  • 8.5.1-alpine
  • 8.5.1-alpine3.23
  • 8.5-alpine3.23
  • 8-alpine
  • 8-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image contains 1 fewer package
  • Image has similar size
  • Image has same number of vulnerabilities
Image details:
  • Size: 44 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.5.1
2 weeks ago



@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:341067dee5f58adcbe9bede3bb7f75d33a7ad7e2b7d050fb61668086cba1cd49
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size75 MB
packages122
📦 Base Image php:8.4-fpm-alpine
also known as
  • 8.4-fpm-alpine3.23
  • 8.4.16-fpm-alpine
  • 8.4.16-fpm-alpine3.23
digestsha256:96c072939e5497bce30cb0682f7397af04df01d4fcf78ede1dd6bdd3394e240f
vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2

@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:0e325d7068abd107db2ded2d2c7b0b6054301bb140c19f0089647e6e1988deef
vulnerabilitiescritical: 0 high: 1 medium: 0 low: 0
platformlinux/amd64
size92 MB
packages139
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.21
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.21
  • 8.1.34-alpine
  • 8.1.34-alpine3.21
  • 8.1.34-cli-alpine3.21
  • d0b581c71ccd5071323b105fbcf784f0cc839918e8992e56fe275df9dc840f2b
digestsha256:5a3201a62206d5168ce3bc9fe81cf35c07c93b4c213cff448ecbf5686161271a
vulnerabilitiescritical: 1 high: 0 medium: 5 low: 2
critical: 0 high: 1 medium: 0 low: 0 setuptools 70.3.0 (pypi)

pkg:pypi/setuptools@70.3.0

high 7.7: CVE--2025--47273 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected range<78.1.1
Fixed version78.1.1
CVSS Score7.7
CVSS VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
EPSS Score0.135%
EPSS Percentile34th percentile
Description

Summary

A path traversal vulnerability in PackageIndex was fixed in setuptools version 78.1.1

Details

    def _download_url(self, url, tmpdir):
        # Determine download filename
        #
        name, _fragment = egg_info_for_url(url)
        if name:
            while '..' in name:
                name = name.replace('..', '.').replace('\\', '_')
        else:
            name = "__downloaded__"  # default if URL has no path contents

        if name.endswith('.[egg.zip](http://egg.zip/)'):
            name = name[:-4]  # strip the extra .zip before download

 -->       filename = os.path.join(tmpdir, name)

Here: https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88

os.path.join() discards the first argument tmpdir if the second begins with a slash or drive letter.
name is derived from a URL without sufficient sanitization. While there is some attempt to sanitize by replacing instances of '..' with '.', it is insufficient.

Risk Assessment

As easy_install and package_index are deprecated, the exploitation surface is reduced.
However, it seems this could be exploited in a similar fashion like GHSA-r9hx-vwmv-q579, and as described by POC 4 in GHSA-cx63-2mw6-8hw5 report: via malicious URLs present on the pages of a package index.

Impact

An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

References

https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5
pypa/setuptools#4946

@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:0f60dc75d4f504111b1537ab859449f04248bb6d7f8ba83ae71d0c67ca9e1dcb
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size72 MB
packages122
📦 Base Image php:8.2-fpm-alpine
also known as
  • 8.2-fpm-alpine3.23
  • 8.2.30-fpm-alpine
  • 8.2.30-fpm-alpine3.23
digestsha256:ea3dec3a85d02c19f088dc4385934af92b28f6c0b2d7318c72b340cac487b821
vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2

@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.4-fpm-alpine

Name8.4.16-fpm-alpine3.23
Digestsha256:96c072939e5497bce30cb0682f7397af04df01d4fcf78ede1dd6bdd3394e240f
Vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2
Pushed2 weeks ago
Size36 MB
Packages62
Flavoralpine
OS3.23
Runtime8.4.16
The base image is also available under the supported tag(s): 8.4-fpm-alpine3.23, 8.4.16-fpm-alpine, 8.4.16-fpm-alpine3.23

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.5-fpm-alpine
Image has same number of vulnerabilities
Also known as:
  • 8.5.1-fpm-alpine
  • 8.5.1-fpm-alpine3.23
  • 8.5-fpm-alpine3.23
  • 8-fpm-alpine
  • 8-fpm-alpine3.23
  • fpm-alpine
  • fpm-alpine3.23
Benefits:
  • Same OS detected
  • Image contains 1 fewer package
  • Image has similar size
  • Image has same number of vulnerabilities
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.23
2 weeks ago



@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.1-alpine

Name8.1.34-alpine3.21
Digestsha256:5a3201a62206d5168ce3bc9fe81cf35c07c93b4c213cff448ecbf5686161271a
Vulnerabilitiescritical: 1 high: 0 medium: 5 low: 2
Pushed2 weeks ago
Size36 MB
Packages59
Flavoralpine
OS3.21
Runtime8.1.34

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.16-cli-alpine
  • 8.4.16-cli-alpine3.23
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.23
  • 8.4.16-alpine
  • 8.4.16-alpine3.23
  • 8.4-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image introduces no new vulnerability but removes 2
  • Image contains similar number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.4.16
2 weeks ago



8.4-alpine3.22
Minor runtime version update
Also known as:
  • 8.4.16-cli-alpine3.22
  • 8.4-cli-alpine3.22
  • 8.4.16-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.4.16
2 weeks ago



8.3-alpine3.22
Minor runtime version update
Also known as:
  • 8.3.29-cli-alpine3.22
  • 8.3-cli-alpine3.22
  • 8.3.29-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.3.29
2 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.29-cli-alpine3.23
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.23
  • 8.3.29-alpine
  • 8.3-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image introduces no new vulnerability but removes 2
  • Image contains similar number of packages
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.3
2 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.30-cli-alpine
  • 8.2.30-cli-alpine3.23
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.23
  • 8.2.30-alpine
  • 8.2.30-alpine3.23
  • 8.2-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image introduces no new vulnerability but removes 2
  • Image contains similar number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.2.30
2 weeks ago



8.2-alpine3.22
Minor runtime version update
Also known as:
  • 8.2.30-cli-alpine3.22
  • 8.2-cli-alpine3.22
  • 8.2.30-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
Image details:
  • Size: 37 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.2.30
2 weeks ago



8.5-alpine
Minor runtime version update
Also known as:
  • 8.5.1-cli-alpine
  • 8.5.1-cli-alpine3.23
  • 8.5-cli-alpine
  • 8.5-cli-alpine3.23
  • 8-cli-alpine
  • 8-cli-alpine3.23
  • cli-alpine
  • cli-alpine3.23
  • alpine
  • alpine3.23
  • 8.5.1-alpine
  • 8.5.1-alpine3.23
  • 8.5-alpine3.23
  • 8-alpine
  • 8-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image introduces no new vulnerability but removes 2
  • Image contains similar number of packages
Image details:
  • Size: 44 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.5.1
2 weeks ago



8.5-alpine3.22
Minor runtime version update
Also known as:
  • 8.5.1-cli-alpine3.22
  • 8.5-cli-alpine3.22
  • 8-cli-alpine3.22
  • cli-alpine3.22
  • alpine3.22
  • 8-alpine3.22
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 44 MB
  • Flavor: alpine
  • OS: 3.22
  • Runtime: 8.5
2 weeks ago



@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-fpm-alpine

Name8.2.30-fpm-alpine3.23
Digestsha256:ea3dec3a85d02c19f088dc4385934af92b28f6c0b2d7318c72b340cac487b821
Vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2
Pushed2 weeks ago
Size33 MB
Packages62
Flavoralpine
OS3.23
Runtime8.2.30
The base image is also available under the supported tag(s): 8.2-fpm-alpine3.23, 8.2.30-fpm-alpine, 8.2.30-fpm-alpine3.23

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-fpm-alpine
Minor runtime version update
Also known as:
  • 8.4.16-fpm-alpine
  • 8.4.16-fpm-alpine3.23
  • 8.4-fpm-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 36 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.4.16
2 weeks ago



8.3-fpm-alpine
Minor runtime version update
Also known as:
  • 8.3.29-fpm-alpine
  • 8.3.29-fpm-alpine3.23
  • 8.3-fpm-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 34 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.3.29
2 weeks ago



8.5-fpm-alpine
Image has same number of vulnerabilities
Also known as:
  • 8.5.1-fpm-alpine
  • 8.5.1-fpm-alpine3.23
  • 8.5-fpm-alpine3.23
  • 8-fpm-alpine
  • 8-fpm-alpine3.23
  • fpm-alpine
  • fpm-alpine3.23
Benefits:
  • Same OS detected
  • Image contains 1 fewer package
  • Image has similar size
  • Image has same number of vulnerabilities
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.23
2 weeks ago



@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:ba9d72af069d025c0b0d29577220e2feb53e05b72957588f5c75c1bc1f6a128b
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size95 MB
packages159
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.23
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.23
  • 8.2.30-alpine
  • 8.2.30-alpine3.23
  • 8.2.30-cli-alpine
  • 8.2.30-cli-alpine3.23
digestsha256:dad4e0c31503684d830285906fc548ea6788310260a670a9cd579f69636d873c
vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2

@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:a0b04f5cee0fa5073979e15ae94cb28a91471a4915218b151a9e4224b7236cd1
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size96 MB
packages159
📦 Base Image php:2d9d9d0610811d72bd332d556830f9ee027f885c1c04f540172288d3525aecc5
also known as
  • 8.3-alpine
  • 8.3-alpine3.23
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.23
  • 8.3.29-alpine
  • 8.3.29-cli-alpine3.23
digestsha256:55dd280d2f913218b52230b55c4779a3549200cec9b2993e0a91ee3ea4323994
vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2

@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.3-alpine

Name8.3-alpine3.23
Digestsha256:55dd280d2f913218b52230b55c4779a3549200cec9b2993e0a91ee3ea4323994
Vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2
Pushed2 weeks ago
Size38 MB
Packages61
Flavoralpine
OS3.23
Runtime8.3
The base image is also available under the supported tag(s): 8.3-alpine3.23, 8.3-cli-alpine, 8.3-cli-alpine3.23, 8.3.29-alpine, 8.3.29-cli-alpine3.23

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.5-alpine
Minor runtime version update
Also known as:
  • 8.5.1-cli-alpine
  • 8.5.1-cli-alpine3.23
  • 8.5-cli-alpine
  • 8.5-cli-alpine3.23
  • 8-cli-alpine
  • 8-cli-alpine3.23
  • cli-alpine
  • cli-alpine3.23
  • alpine
  • alpine3.23
  • 8.5.1-alpine
  • 8.5.1-alpine3.23
  • 8.5-alpine3.23
  • 8-alpine
  • 8-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image contains 1 fewer package
  • Image has similar size
  • Image has same number of vulnerabilities
Image details:
  • Size: 44 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.5.1
2 weeks ago



8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.16-cli-alpine
  • 8.4.16-cli-alpine3.23
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.23
  • 8.4.16-alpine
  • 8.4.16-alpine3.23
  • 8.4-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.4.16
2 weeks ago



@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Outdated

Recommended fixes for image wayofdev/php-base:latest

Base image is php:8.2-alpine

Name8.2.30-alpine3.23
Digestsha256:dad4e0c31503684d830285906fc548ea6788310260a670a9cd579f69636d873c
Vulnerabilitiescritical: 1 high: 0 medium: 5 low: 0 unspecified: 2
Pushed2 weeks ago
Size37 MB
Packages61
Flavoralpine
OS3.23
Runtime8.2.30
The base image is also available under the supported tag(s): 8.2-alpine3.23, 8.2-cli-alpine, 8.2-cli-alpine3.23, 8.2.30-alpine, 8.2.30-alpine3.23, 8.2.30-cli-alpine, 8.2.30-cli-alpine3.23

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

TagDetailsPushedVulnerabilities
8.4-alpine
Minor runtime version update
Also known as:
  • 8.4.16-cli-alpine
  • 8.4.16-cli-alpine3.23
  • 8.4-cli-alpine
  • 8.4-cli-alpine3.23
  • 8.4.16-alpine
  • 8.4.16-alpine3.23
  • 8.4-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 41 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.4.16
2 weeks ago



8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.29-cli-alpine3.23
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.23
  • 8.3.29-alpine
  • 8.3-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image has similar size
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.3
2 weeks ago



8.5-alpine
Minor runtime version update
Also known as:
  • 8.5.1-cli-alpine
  • 8.5.1-cli-alpine3.23
  • 8.5-cli-alpine
  • 8.5-cli-alpine3.23
  • 8-cli-alpine
  • 8-cli-alpine3.23
  • cli-alpine
  • cli-alpine3.23
  • alpine
  • alpine3.23
  • 8.5.1-alpine
  • 8.5.1-alpine3.23
  • 8.5-alpine3.23
  • 8-alpine
  • 8-alpine3.23
Benefits:
  • Same OS detected
  • Minor runtime version update
  • Image contains 1 fewer package
  • Image has same number of vulnerabilities
Image details:
  • Size: 44 MB
  • Flavor: alpine
  • OS: 3.23
  • Runtime: 8.5.1
2 weeks ago



@github-actions
Copy link

github-actions bot commented Jan 8, 2026

🔍 Vulnerabilities of wayofdev/php-base:latest

📦 Image Reference wayofdev/php-base:latest
digestsha256:35e42349686ec33f62a920692a0b538d7cd4296cb11f72835579f81be6eb0187
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size69 MB
packages119
📦 Base Image php:3604fed52d81970a176cafe8300295cf4ba1d0b9d7ca9dfc060e2f2e64591f54
also known as
  • 8.1-fpm-alpine3.21
  • 8.1.34-fpm-alpine
  • 8.1.34-fpm-alpine3.21
digestsha256:e1c21e70e250ddeed10edb10f9476389d0eb9e2122aeca5d46d05fd97ad3c043
vulnerabilitiescritical: 1 high: 0 medium: 5 low: 2

@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Recommended fixes for image wayofdev/php-base:latest

Base image is php:3604fed52d81970a176cafe8300295cf4ba1d0b9d7ca9dfc060e2f2e64591f54

Digest
Vulnerabilities
Size0 B
Packages0

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: maintenance For maintenance, refactor and testing (perf, chore, style, revert, refactor, test, build, ci)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant