[Snyk] Security upgrade node from 21.0-bookworm-slim to 21.7.2-bookworm-slim

[iconixgroups]

This PR was automatically created by Snyk using the credentials of a real user.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Changes included in this PR

• devops/Dockerfile

We recommend upgrading to node:21.7.2-bookworm-slim, as this image has only 38 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Some of the most important vulnerabilities in your base image include:

Severity	Priority Score / 1000	Issue	Exploit Maturity
	721	Out-of-bounds Write SNYK-DEBIAN12-GLIBC-6210098	Proof of Concept
	721	Out-of-bounds Write SNYK-DEBIAN12-GLIBC-6210098	Proof of Concept
	614	Out-of-bounds Write SNYK-DEBIAN12-PERL-6085273	No Known Exploit
	621	Path Traversal SNYK-UPSTREAM-NODE-6252334	Proof of Concept
	721	Path Traversal SNYK-UPSTREAM-NODE-6255385	Proof of Concept

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Path Traversal

Description by Korbit AI

Note

This feature is in early access. You can enable or disable it in the Korbit Console.

What change is being made?

Upgrade the Node.js version in the Dockerfile from 21.0-bookworm-slim to 21.7.2-bookworm-slim.

Why are these changes being made?

This upgrade addresses security vulnerabilities identified by Snyk in the older Node.js version. The newer version includes important security patches and improvements, ensuring a more secure and stable runtime environment.

[sweep-ai]

Apply Sweep Rules to your PR?

• Apply: All docstrings and comments should be up to date.
• Apply: Code should be properly formatted and indented.
• Apply: Variable and function names should be descriptive and follow a consistent naming convention.
• Apply: There should be no commented out code or unused variables or functions.
• Apply: Code should be modular and follow the principle of single responsibility.
• Apply: There should be no hard-coded values or magic numbers in the code.

This is an automated message generated by Sweep AI.

[iconixgroups]

/korbit-review

[korbit-ai]

/korbit-review

@iconixgroups I have started a new review of this pull request. You will see my feedback shortly.

[korbit-ai]

I have reviewed your code and did not find any issues!

---

Please note that I can make mistakes, and you should still encourage your team to review your code as well.