Commit graph

8 commits

Author SHA1 Message Date
dependabot[bot]
91a016efad
build(deps): bump alpine from 3.22 to 3.23 in /src/main/docker
Bumps alpine from 3.22 to 3.23.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: '3.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-04 08:03:30 +00:00
dependabot[bot]
86b182fe15
build(deps): bump eclipse-temurin in /src/main/docker
Bumps eclipse-temurin from 25_36-jdk-alpine to 25.0.1_8-jdk-alpine.

---
updated-dependencies:
- dependency-name: eclipse-temurin
  dependency-version: 25.0.1_8-jdk-alpine
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-10 08:05:22 +00:00
dependabot[bot]
1db4a4c671
build(deps): bump alpine from 4bcff63 to 4b7ce07 in /src/main/docker
Bumps alpine from `4bcff63` to `4b7ce07`.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: '3.22'
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-09 08:03:35 +00:00
nscuro
09c493adf5
Bump container images to Java 25
Updates the JDK and JRE used to build the container images to Java 25, and enables the compact object headers feature (https://openjdk.org/jeps/519) for reduced CPU and memory overhead.

We will continue to build and test the application itself against Java 21 for the time being, and it will continue to be executable on Java 21 as well. This change purely affects the default image we distribute.

Signed-off-by: nscuro <nscuro@protonmail.com>
2025-09-28 16:35:18 +02:00
nscuro
2480dcb97d
Bump Temurin base image to 21.0.8_9
Signed-off-by: nscuro <nscuro@protonmail.com>
2025-08-25 19:19:01 +02:00
dependabot[bot]
6c9a2afe39
build(deps): bump alpine from 8a1f59f to 4bcff63 in /src/main/docker
Bumps alpine from `8a1f59f` to `4bcff63`.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: '3.22'
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-16 08:05:56 +00:00
nscuro
695b9fdf38
Extract JRE creation with jlink into separate script
Makes it easier to read and test the logic without having to rely on Docker.

Signed-off-by: nscuro <nscuro@protonmail.com>
2025-06-16 19:06:02 +02:00
nscuro
6da5a2650d
Add Alpine-based container image variants
The new variants will be published *in addition* to the existing variant. Given enough positive user feedback, we may deprecate the Debian-based variants. Until then, Alpine variants are to be considered experimental.

Note that DT v5 has already switched to exclusively Alpine base images: https://github.com/DependencyTrack/hyades-apiserver/pull/1206

New image variants are distinguished by a `-alpine` suffix in the tag, e.g.:
    * dependencytrack/apiserver:latest-alpine
    * dependencytrack/apiserver:4.14.0-alpine
    * dependencytrack/apiserver:snapshot-alpine

The new images further use `jdeps` and `jlink` to create a minimal JRE, with only those Java modules DT needs.

As a result, `-alpine` images are about 200MB smaller than their Debian counterparts.

Signed-off-by: nscuro <nscuro@protonmail.com>
2025-06-12 19:38:31 +02:00