Dockerfile / Dockerfile.fasttext
- Alpine base upgraded: 3.23.3 → 3.23.4, pinned with SHA256 digest
- Maven upgraded: 3.9.12 → 3.9.14
IMAGE_VERSION/IMAGE_CREATEDARGs added: OCI labels now use build args instead of hardcoded values- All Alpine package versions pinned: added versioned ARGs with Renovate tracking comments for every package in
java_baseand the final stage (libretls, musl-locales, tzdata, zlib, 7zip, bash, shadow, libstdc++, gcompat, su-exec, tini, xmlstarlet, fasttext, nss_wrapper) - Memory-leak patch gated:
lt6_7_memory_leak_fix.patchis now applied conditionally only whenLT_VERSION == 6.7 - Maven build parallelised: added
--threads 2Cto themvninvocation - Duplicate
FROM base AS fasttextremoved (Dockerfile.fasttext)
entrypoint.sh
- Quote fix: added quotes around
${MAP_GID}in thegetent groupcall to prevent word-splitting - shellcheck suppressions: added
SC2015directives for capability-status one-liners andSC2155directives forNSS_WRAPPER_PASSWD/NSS_WRAPPER_GROUPexports