gitmote

gitmote  ·  history  ·  branches

fix: bump act to 0.2.89 — CVE-2026-34041, CVE-2026-34042

d313874d675b04ac3086a272a545021945e0a18c
Atanas Minev <atmin@protonmail.com> · 2026-07-04 00:22

diff --git a/Dockerfile.runner b/Dockerfile.runner
index 6e9ebcd..1bc6ec7 100644
--- a/Dockerfile.runner
+++ b/Dockerfile.runner
@@ -16,7 +16,7 @@ COPY . .
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /out/gitmote-runner ./cmd/gitmote-runner
FROM debian:bookworm-slim
-ARG ACT_VERSION=0.2.80
+ARG ACT_VERSION=0.2.89
RUN apt-get update \
&& apt-get install -y --no-install-recommends git ca-certificates curl bash tar \
&& curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \