GithubBackup/MoviePilot
1
0
Fork 0
mirror of https://github.com/jxxghp/MoviePilot.git synced 2026-09-06 07:56:52 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(docker): refresh OpenSSL security packages

Browse Source
This commit is contained in:
jxxghp
2026-08-26 23:04:21 +08:00
parent 9e1f241ef3
commit d3627f29c8
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/Dockerfile
+1
View File
@@ -88,6 +88,7 @@ RUN apt-get update \
lsof \ lsof \
nano \ nano \
unar \ unar \
openssl \
postgresql-client-18 \ postgresql-client-18 \
libchromaprint-tools \ libchromaprint-tools \
libjemalloc2 \ libjemalloc2 \
tests/test_release_supply_chain.py
+2 -1
View File
@@ -32,7 +32,7 @@ def _steps_by_name(workflow: dict) -> dict[str, dict]:
def test_base_image_uses_refreshable_tag_and_apt_does_not_upgrade_in_place() -> None: def test_base_image_uses_refreshable_tag_and_apt_does_not_upgrade_in_place() -> None:
"""基础镜像允许获得上游更新，构建阶段不得无边界升级整套 Debian。""" """基础镜像允许更新，并仅显式刷新运行时安全包而非整套 Debian。"""
dockerfile = DOCKERFILE.read_text(encoding="utf-8") dockerfile = DOCKERFILE.read_text(encoding="utf-8")
assert 'ARG MOVIEPILOT_PYTHON_VERSION="3.14.7"' in dockerfile assert 'ARG MOVIEPILOT_PYTHON_VERSION="3.14.7"' in dockerfile
@@ -45,6 +45,7 @@ def test_base_image_uses_refreshable_tag_and_apt_does_not_upgrade_in_place() ->
assert "ARG MOVIEPILOT_PYTHON_VERSION" in free_threaded_stage assert "ARG MOVIEPILOT_PYTHON_VERSION" in free_threaded_stage
assert 'uv python install --no-bin "${MOVIEPILOT_PYTHON_VERSION}t"' in free_threaded_stage assert 'uv python install --no-bin "${MOVIEPILOT_PYTHON_VERSION}t"' in free_threaded_stage
assert "apt-get upgrade" not in dockerfile assert "apt-get upgrade" not in dockerfile
assert "\n openssl \\\n" in dockerfile
assert "\n util-linux \\\n" in dockerfile assert "\n util-linux \\\n" in dockerfile