Chore: [AEA-0000] - update syft, grype, poetry, node (#92)

anthony-nhs · web-flow · commit 9fd1711cd36e · 2026-04-14T07:14:59.000+01:00
## Summary

- Routine Change

### Details

- update syft to 1.42.4
- update, grype to 0.111.0
- update poetry to 2.3.4
- update node to 24.14.1
diff --git a/.grype.yaml b/.grype.yaml
@@ -27,6 +27,10 @@ ignore:
   - vulnerability: CVE-2025-58188
   - vulnerability: CVE-2025-4674
   - vulnerability: GHSA-x744-4wpc-v9h2
+  - vulnerability: GHSA-92mm-2pjq-r785
+  - vulnerability: GHSA-78h2-9frx-2jm8
+  - vulnerability: CVE-2026-32280
+  - vulnerability: GHSA-hfvc-g4fc-pqhx
 # node_24 vulnerabilities
   - vulnerability: GHSA-c2c7-rcm5-vvqj
   - vulnerability: GHSA-7r86-cg39-jmmj
@@ -39,6 +43,7 @@ ignore:
   - vulnerability: GHSA-cx63-2mw6-8hw5
   - vulnerability: GHSA-r9hx-vwmv-q579
   - vulnerability: GHSA-5rjg-fvgr-3xxf
+  - vulnerability: GHSA-2599-h6xx-hpxp
 # eps-storage-terraform vulnerabilities
   - vulnerability: CVE-2025-68119
 # eps-data-extract vulnerabilities
diff --git a/src/base/.devcontainer/Dockerfile.grype b/src/base/.devcontainer/Dockerfile.grype
@@ -1,6 +1,6 @@
 FROM alpine:3.23.3 AS build
 ARG TARGETARCH
-ARG GRYPE_VERSION="0.110.0"
+ARG GRYPE_VERSION="0.111.0"
 ENV GRYPE_VERSION=${GRYPE_VERSION}
 RUN apk add --no-cache cosign bash curl jq
 COPY --chmod=755 scripts/install_anchore_tool.sh /tmp/install_anchore_tool.sh
diff --git a/src/base/.devcontainer/Dockerfile.syft b/src/base/.devcontainer/Dockerfile.syft
@@ -1,6 +1,6 @@
 FROM alpine:3.23.3 AS build
 ARG TARGETARCH
-ARG SYFT_VERSION="1.42.3"
+ARG SYFT_VERSION="1.42.4"
 ENV SYFT_VERSION=${SYFT_VERSION}
 RUN apk add --no-cache cosign bash curl jq
 COPY --chmod=755 scripts/install_anchore_tool.sh /tmp/install_anchore_tool.sh
diff --git a/src/base_node/node_24/.devcontainer/.tool-versions b/src/base_node/node_24/.devcontainer/.tool-versions
@@ -1 +1 @@
-nodejs 24.14.0
+nodejs 24.14.1
diff --git a/src/languages/node_24_python_3_12/.devcontainer/.tool-versions b/src/languages/node_24_python_3_12/.devcontainer/.tool-versions
@@ -1,2 +1,2 @@
 python 3.12.13
-poetry 2.3.2
+poetry 2.3.4
diff --git a/src/languages/node_24_python_3_13/.devcontainer/.tool-versions b/src/languages/node_24_python_3_13/.devcontainer/.tool-versions
@@ -1,2 +1,2 @@
 python 3.13.12
-poetry 2.3.2
+poetry 2.3.4
diff --git a/src/languages/node_24_python_3_14/.devcontainer/.tool-versions b/src/languages/node_24_python_3_14/.devcontainer/.tool-versions
@@ -1,2 +1,2 @@
 python 3.14.3
-poetry 2.3.2
+poetry 2.3.4

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`	`1`	`python 3.12.13`
`2`		`-poetry 2.3.2`
	`2`	`+poetry 2.3.4`
Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`	`1`	`python 3.13.12`
`2`		`-poetry 2.3.2`
	`2`	`+poetry 2.3.4`
Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`	`1`	`python 3.14.3`
`2`		`-poetry 2.3.2`
	`2`	`+poetry 2.3.4`