chore(deps): bump bellsoft/liberica-openjre-alpine from 17.0.12 to 23-38 in /docker-jans-kc-scheduler

[dependabot]

Bumps bellsoft/liberica-openjre-alpine from 17.0.12 to 23-38.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dryrunsecurity]

DryRun Security Summary

The provided code change updates the Docker image for the Jans KC Scheduler, including updating the base image, dependency versions, and security-related configurations such as the use of a non-root user, secure certificates, and logging and monitoring.

Expand for full summary

Summary:

The provided code change is an update to the Docker image for the Jans KC Scheduler. The key changes include updating the base image to a newer version, which likely brings security and performance improvements, and updating the versions of various dependencies used by the application, such as the Logback logging framework.

From an application security perspective, the changes demonstrate a focus on secure configuration management, dependency management, the use of a non-root user, secure certificates, and logging and monitoring. These are all important aspects of maintaining a secure and up-to-date application. However, it's essential to review the actual implementation and ensure that the application is deployed and configured securely in the production environment.

Files Changed:

• docker-jans-kc-scheduler/Dockerfile: This file contains the Docker image definition for the Jans KC Scheduler. The key changes include:
  1. Updating the base image from bellsoft/liberica-openjre-alpine:17.0.12 to bellsoft/liberica-openjre-alpine:23-38, which likely brings security and performance improvements.
  2. Updating the versions of various dependencies, such as janino and commons-compiler, which are used for the Logback logging framework.
  3. Using environment variables to configure various aspects of the application, including the configuration and secret management adapters.
  4. Creating a non-root user (jans) to run the application, which is a recommended security practice.
  5. Setting up various SSL/TLS-related environment variables, indicating the use of certificates for secure communication.
  6. Configuring the Logback logging framework, which is essential for secure logging and monitoring of the application's activities.

Code Analysis

We ran 9 analyzers against 1 file and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[iromli]

The suggested version is incompatible.

@dependabot ignore this major version

[dependabot]

OK, I won't notify you about version 23-38.x.x again, unless you re-open this PR.