From 5a7557bcb3be3bb864909e356d8cd93f6714f491 Mon Sep 17 00:00:00 2001
From: "Alec M." <alec.mattu@nih.gov>
Date: Mon, 18 May 2026 13:04:13 -0400
Subject: [PATCH] chore: Bump nginx layer to `1.30.1-alpine3.23-slim`

---
 Dockerfile | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 22e4e9f3..6ede060a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,10 +14,7 @@ RUN NODE_OPTIONS="--max-old-space-size=4096" npm set progress=false
 RUN NODE_OPTIONS="--max-old-space-size=4096" npm ci --legacy-peer-deps
 RUN NODE_OPTIONS="--openssl-legacy-provider" npm run build --silent
 
-FROM nginx:1.29.8-alpine3.23-slim AS fnl_base_image
-
-# zlib: CVE-2026-22184, openssl: CVE-2026-2673, CVE-2026-31790
-RUN apk update && apk add --no-cache --upgrade zlib=1.3.2-r0 openssl
+FROM nginx:1.30.1-alpine3.23-slim AS fnl_base_image
 
 COPY --from=build /usr/src/app/dist /usr/share/nginx/html
 COPY --from=build /usr/src/app/config/inject.template.js /usr/share/nginx/html/inject.template.js