Fix vulnerabilities

.circleci/config.yml

@@ -118,7 +118,7 @@ jobs:
 
   test:
     docker:
-      - image: cimg/go:1.26
+      - image: cimg/go:1.26.2
     steps:
       - checkout
       - *set_environment_variables
@@ -134,7 +134,7 @@ jobs:
       # The goreleaser image tag determins the version of Go.
       # Manually check goreleaser images for their version of Go.
       # Ref: https://hub.docker.com/r/goreleaser/goreleaser/tags
-      - image: goreleaser/goreleaser:v2.14.2
+      - image: goreleaser/goreleaser:v2.15.4
     steps:
       - checkout
       - setup_remote_docker

Dockerfile

@@ -13,7 +13,7 @@ WORKDIR /usr/local/bin
 # Install ca-certs
 RUN apk --no-cache add ca-certificates
 # Upgrade only packages with known HIGH/CRITICAL issues (not a full apk upgrade).
-RUN apk --no-cache add --upgrade libcrypto3 libssl3 zlib
+RUN apk update --no-cache && apk --no-cache add --upgrade libcrypto3 libssl3 musl musl-utils zlib
 
 RUN addgroup -S polaris && adduser -u 1200 -S polaris -G polaris
 USER 1200