fix(security): bump alpine version to fix vulnerabilities

components/hydra-cleaner/files/hydra-cleaner.sh

@@ -16,12 +16,10 @@ set -o nounset
 
 # -> delete "cascade" on table "flow" cleans access, code, oidc, pkce and refresh tables.
 
-# For table authentication_session, a simple delete on this table should be enough.
 
 DSN="${DSN:-postgresql://${HYDRA_DATABASE_USER}:${HYDRA_DATABASE_PASSWORD}@${HYDRA_DATABASE_SERVICE_NAME}:${HYDRA_DATABASE_SERVICE_PORT:-5432}/hydra?sslmode=disable}"
 RETENTION_HOURS="${RETENTION_HOURS:-48}"
 BATCH_SIZE="${BATCH_SIZE:-50}"
-BATCH_SIZE_ORIG="${BATCH_SIZE}"
 LIMIT="${LIMIT:-1000}"
 BEFORE_DATE="$(date +'%Y-%m-%d %H:%M:%S' --date=@$(($(date +%s) - RETENTION_HOURS * 3600)))"
 
@@ -88,43 +86,7 @@ EOF
     log "${OUTPUT}"
 
     if ! [[ "${OUTPUT}" =~ '^DELETE ' ]] ; then
-	log "Output doesn't seem OK..."
-	break
-    fi
-    OUTPUT_NB=$(echo "${OUTPUT}" | cut -d' ' -f 2)
-
-    if [ "${OUTPUT_NB}" -lt "${BATCH_SIZE}" ]; then
-	break
-    fi
-
-    REMAINING_ELMTS=$((REMAINING_ELMTS - BATCH_SIZE))
-    if [ "${REMAINING_ELMTS}" -lt "${BATCH_SIZE}" ]; then
-	BATCH_SIZE="${REMAINING_ELMTS}"
-    fi
-done
-
-
-BATCH_SIZE="${BATCH_SIZE_ORIG}"
-REMAINING_ELMTS="${LIMIT}"
-while [ "${REMAINING_ELMTS}" -gt 0 ]; do
-    OUTPUT=$(psql "${DSN}" <<EOF
-DELETE
-FROM hydra_oauth2_authentication_session
-WHERE id = ANY (
-  array(
-    SELECT id
-    FROM hydra_oauth2_authentication_session
-    WHERE authenticated_at < '${BEFORE_DATE}'
-    LIMIT ${BATCH_SIZE}
-  )
-);
-EOF
-    )
-
-    log "${OUTPUT}"
-
-    if ! [[ "${OUTPUT}" =~ '^DELETE ' ]] ; then
-	log "Output doesn't seem OK..."
+	log "Output doesn't seems OK..."
 	break
     fi
     OUTPUT_NB=$(echo "${OUTPUT}" | cut -d' ' -f 2)

components/hydra-oidc/resources/hydra-oidc-deployment.yaml

@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
       - name: hydra-oidc-php-fpm
-        image: reg.cadoles.com/cadoles/hydra-oidc-base:2025.6.13-develop.1333.aa5c382
+        image: reg.cadoles.com/cadoles/hydra-oidc-base:2025.5.2-symfonycontainerupdate.1649.313cb84
         imagePullPolicy: IfNotPresent
         args: ["/usr/sbin/php-fpm81", "-F", "-e"]
         readinessProbe:
@@ -55,7 +55,7 @@ spec:
           runAsUser: 1000
 
       - name: hydra-oidc-caddy
-        image: reg.cadoles.com/cadoles/hydra-oidc-base:2025.6.13-develop.1333.aa5c382
+        image: reg.cadoles.com/cadoles/hydra-oidc-base:2025.5.2-symfonycontainerupdate.1649.313cb84
         imagePullPolicy: IfNotPresent
         args:
           [
@@ -97,10 +97,6 @@ spec:
             value: "/tmp/caddy"
           - name: CADDY_APP_ROOT_PUBLIC
             value: "/app/public/"
-          - name: CADDY_LOG_FILTER
-            value: healthy|metrics
-          - name: CADDY_LOG_SKIP
-            value: "true"
         resources: {}
         securityContext:
           runAsNonRoot: true

components/hydra-sql/resources/hydra-sql-deployment.yaml

@@ -21,15 +21,15 @@ spec:
     spec:
       containers:
       - name: hydra-sql-fpm
-        image: reg.cadoles.com/cadoles/hydra-sql-base:2025.7.30-develop.1146.5f2654c
+        image: reg.cadoles.com/cadoles/hydra-sql-base:2025.5.2-symfonycontainerupdate.1627.222206a
         imagePullPolicy: IfNotPresent
-        args: ["/usr/sbin/php-fpm84", "-F", "-e"]
+        args: ["/usr/sbin/php-fpm81", "-F", "-e"]
         readinessProbe:
           exec:
             command:
             - sh
             - -c
-            - test -f /etc/php84/php-fpm.d/www.conf
+            - test -f /etc/php81/php-fpm.d/www.conf
         livenessProbe:
           exec:
             command:
@@ -61,13 +61,13 @@ spec:
           value: "0"
         volumeMounts:
         - name: hydra-sql-php-ini
-          mountPath: /etc/php84/conf.d/03_base.ini
+          mountPath: /etc/php81/conf.d/03_base.ini
           subPath: 03_base.ini
         - name: sql-tmp
           mountPath: /tmp
 
       - name: hydra-sql-caddy
-        image: reg.cadoles.com/cadoles/hydra-sql-base:2025.7.30-develop.1146.5f2654c
+        image: reg.cadoles.com/cadoles/hydra-sql-base:2025.5.2-symfonycontainerupdate.1627.222206a
         imagePullPolicy: IfNotPresent
         args: ["/usr/sbin/caddy", "run", "--adapter", "caddyfile", "--config", "/etc/caddy/Caddyfile"]
         readinessProbe:
@@ -98,10 +98,6 @@ spec:
           value: "/tmp/caddy"
         - name: CADDY_APP_ROOT_PUBLIC
           value: "/app/public/"
-        - name: CADDY_LOG_FILTER
-          value: health|metrics
-        - name: CADDY_LOG_SKIP
-          value: "true"
         resources: {}
         securityContext:
           runAsNonRoot: true

resources/hydra-dispatcher/resources/hydra-dispatcher-deployment.yaml

@@ -19,7 +19,7 @@ spec:
     spec:
       containers:
         - name: hydra-dispatcher-php-fpm
-          image: reg.cadoles.com/cadoles/hydra-dispatcher-base:2025.6.13-develop.1332.c8d277f
+          image: reg.cadoles.com/cadoles/hydra-dispatcher-base:2025.5.2-symfonycontainerupdate.1656.b9fc5d8
           args: ["/usr/sbin/php-fpm81", "-F", "-e"]
           readinessProbe:
             exec:
@@ -61,7 +61,7 @@ spec:
             runAsGroup: 1000
             runAsUser: 1000
         - name: hydra-dispatcher-caddy
-          image: reg.cadoles.com/cadoles/hydra-dispatcher-base:2025.6.13-develop.1332.c8d277f
+          image: reg.cadoles.com/cadoles/hydra-dispatcher-base:2025.5.2-symfonycontainerupdate.1656.b9fc5d8
           imagePullPolicy: IfNotPresent
           args:
             [
@@ -100,10 +100,6 @@ spec:
               value: "/tmp/caddy"
             - name: CADDY_APP_ROOT_PUBLIC
               value: "/app/public/"
-            - name: CADDY_LOG_FILTER
-              value: health|metrics
-            - name: CADDY_LOG_SKIP
-              value: "true"
           ports:
             - containerPort: 8080
               name: http