chore(docker): bump-git-2.39

[nitrocode]

what

• chore(docker): bump-git-2.39

why

• resolve security issue

tests

• I have tested my changes by pr tests

Waiting for git 2.39

$ docker run -it alpine:3.17 sh -c "apk update && apk info git"
fetch https://dl-cdn.alpinelinux.org/alpine/v3.17/main/aarch64/APKINDEX.tar.gz
fetch https://dl-cdn.alpinelinux.org/alpine/v3.17/community/aarch64/APKINDEX.tar.gz
v3.17.1-83-g24a1fb849a [https://dl-cdn.alpinelinux.org/alpine/v3.17/main]
v3.17.1-86-g720cea6326 [https://dl-cdn.alpinelinux.org/alpine/v3.17/community]
OK: 17684 distinct packages available
git-2.38.3-r1 description:
Distributed version control system

git-2.38.3-r1 webpage:
https://www.git-scm.com/

git-2.38.3-r1 installed size:
6284 KiB

references

• https://github.blog/2023-01-17-git-security-vulnerabilities-announced-2/
• https://gitlab.alpinelinux.org/alpine/aports/-/commit/2cee05a753c827cd53631fd35b0309e15725275c
• https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/git/APKBUILD#L5
• https://dl-cdn.alpinelinux.org/alpine/v3.17/main/aarch64/

[chenrui333]

the package is not avail in alpine 3.17 yet?

#0 0.087 fetch https://dl-cdn.alpinelinux.org/alpine/v3.17/main/x86_64/APKINDEX.tar.gz
#0 0.310 fetch https://dl-cdn.alpinelinux.org/alpine/v3.17/community/x86_64/APKINDEX.tar.gz
#0 0.744 ERROR: unable to select packages:
#0 0.796   git-2.38.3-r1:
#0 0.796     breaks: world[git~2.39]

[chenrui333]

indeed

$ docker run -it alpine:3.17 sh
/ # apk update
fetch https://dl-cdn.alpinelinux.org/alpine/v3.17/main/aarch64/APKINDEX.tar.gz
fetch https://dl-cdn.alpinelinux.org/alpine/v3.17/community/aarch64/APKINDEX.tar.gz
v3.17.1-80-ga327c5695c [https://dl-cdn.alpinelinux.org/alpine/v3.17/main]
v3.17.1-79-g7f75271162 [https://dl-cdn.alpinelinux.org/alpine/v3.17/community]
OK: 17684 distinct packages available
/ # apk add git
(1/7) Installing ca-certificates (20220614-r4)
(2/7) Installing brotli-libs (1.0.9-r9)
(3/7) Installing nghttp2-libs (1.51.0-r0)
(4/7) Installing libcurl (7.87.0-r1)
(5/7) Installing libexpat (2.5.0-r0)
(6/7) Installing pcre2 (10.42-r0)
(7/7) Installing git (2.38.3-r1)
Executing busybox-1.35.0-r29.trigger
Executing ca-certificates-20220614-r4.trigger
OK: 17 MiB in 22 packages

[nitrocode]

It's in their repo. I'm waiting for the package to be available. Thank you for including those helpful commands!

[chenrui333]

I just updated the PR, that would help installing the latest git

$ docker run -it alpine:3.17 sh
/ # apk add git --repository=http://dl-cdn.alpinelinux.org/alpine/edge/main/
fetch http://dl-cdn.alpinelinux.org/alpine/edge/main/aarch64/APKINDEX.tar.gz
fetch https://dl-cdn.alpinelinux.org/alpine/v3.17/main/aarch64/APKINDEX.tar.gz
fetch https://dl-cdn.alpinelinux.org/alpine/v3.17/community/aarch64/APKINDEX.tar.gz
(1/7) Installing ca-certificates (20230106-r0)
(2/7) Installing brotli-libs (1.0.9-r10)
(3/7) Installing nghttp2-libs (1.51.0-r0)
(4/7) Installing libcurl (7.87.0-r3)
(5/7) Installing libexpat (2.5.0-r0)
(6/7) Installing pcre2 (10.42-r0)
(7/7) Installing git (2.39.1-r1)
Executing busybox-1.35.0-r29.trigger
Executing ca-certificates-20230106-r0.trigger
OK: 17 MiB in 22 packages
/ # git --version
git version 2.39.1

the latest git wont be in alpine:3.17 release any time soon.