security update express@4.21.2, cross-spawn@7.0.6

update to alpine@3.21 and nodejs@22

Signed-off-by: Stefan Seide <account-github@seide.st>

Author: sseide

CHANGELOG.md

@@ -2,7 +2,12 @@
 
 ## Next Version
 #### Bugfixes
+* update express from 4.21.1 to 4.21.2 (fix CVE-2024-52798)
+* update cross-spawn from 7.0.3 to 7.0.6 (fix CVE-2024-21538)  
+* update base image to Alpine@3.21 and Node.js@22 
+
 #### Enhancements
+* update ioredis from 5.4.1 to 5.5.0
 
 ## Version 0.9.0
 #### Bugfixes

Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.18
+FROM alpine:3.21
 
 WORKDIR /redis-commander
 
@@ -22,7 +22,7 @@ RUN  apk update \
   && update-ca-certificates \
   && echo -e "\n---- Create runtime user and fix file access rights ----------" \
   && adduser "${SERVICE_USER}" -h "${HOME}" -G root -S -u 10000 \
-  && chown -R root.root "${HOME}" \
+  && chown -R root:root "${HOME}" \
   && chown -R "${SERVICE_USER}" "${HOME}/config" \
   && chmod g+w "${HOME}/config" \
   && chmod ug+r,o-rwx "${HOME}"/config/*.json \
@@ -42,4 +42,3 @@ ENTRYPOINT ["/usr/bin/dumb-init", "--"]
 CMD ["/redis-commander/docker/entrypoint.sh"]
 
 EXPOSE 8081
-