fix: upgrade Alpine packages to resolve CVEs

[brendan-kellam]

Summary

• Adds apk upgrade --no-cache to the runner stage in the Dockerfile to pull in patched Alpine packages
• Fixes 4 CVEs flagged by Trivy (2 HIGH, 2 MEDIUM) in musl-utils and zlib:
  • CVE-2026-40200 (HIGH) — musl: arbitrary code execution via stack-based overflow
  • CVE-2026-6042 (MEDIUM) — musl: denial of service via inefficient GB18030 decoding
  • CVE-2026-22184 (HIGH) — zlib: arbitrary code execution via buffer overflow in untgz
  • CVE-2026-27171 (MEDIUM) — zlib: denial of service via infinite loop in CRC32 combine

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated Docker build process to include Alpine package index upgrade during dependency installation, ensuring fresher and more patched versions of packages in the containerized environment.

[github-actions]

@brendan-kellam your pull request is missing a changelog!

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: a3a89a04-0410-4595-a2d4-4ebc94fd7585

📥 Commits

Reviewing files that changed from the base of the PR and between a91e421 and 005f3d7.

📒 Files selected for processing (1)

• Dockerfile

---

Walkthrough

The Dockerfile was modified to add an Alpine package index upgrade step (apk upgrade --no-cache) immediately after the existing dependency installation command, while preserving the existing package set and installation flags.

Changes

Cohort / File(s)	Summary
Docker Build Configuration Dockerfile	Added apk upgrade --no-cache command following the package installation step to refresh the Alpine package index.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~5 minutes

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/apk-upgrade-cves

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}