Bump node from 24-alpine to 26-alpine

[dependabot]

Bumps node from 24-alpine to 26-alpine.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Assignees

The following users could not be added as assignees: Valentin-Kaiser. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Super-linter summary

Language	Validation result
BIOME_FORMAT	Fail ❌
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Fail ❌
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter
Super-linter revision: 2da136927bd4a73596db63044b504547c62cb854
Super-linter version: 9.0.0

BIOME_FORMAT

Checked 1 file in 3ms. No fixes applied.
Found 1 error.renovate.json format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Formatter would have printed the following content:

     1  1 │   {
     2    │ - ··"$schema":·"https://docs.renovatebot.com/renovate-schema.json",
     3    │ - ··"extends":·[
     4    │ - ····"config:recommended"
     5    │ - ··],
     6    │ - ··"customManagers":·[
     7    │ - ····{
     8    │ - ······"customType":·"regex",
     9    │ - ······"description":·"Update·_VERSION·variables·in·Dockerfiles",
    10    │ - ······"fileMatch":·[
    11    │ - ········"(^|/|\\.)Dockerfile$",
    12    │ - ········"(^|/)Dockerfile\\.[^/]*$",
    13    │ - ········"(^|/)versions.env$"
    14    │ - ······],
    15    │ - ······"matchStrings":·[
    16    │ - ········"#·renovate:·datasource=(?<datasource>[a-z-]+?)(?:·depName=(?<depName>.+?))?·packageName=(?<packageName>.+?)(?:·versioning=(?<versioning>[a-z-]+?))?\\s(?:ENV|ARG)·.+?_VERSION=(?<currentValue>.+?)\\s"
    17    │ - ······]
    18    │ - ····},
    19    │ - ····{
    20    │ - ······"customType":·"regex",
    21    │ - ······"fileMatch":·["^Dockerfile$"],
    22    │ - ······"matchStrings":·[
    23    │ - ········"#\\s*renovate:\\s*?(release=(?<release>.*?))?\\s*depName=(?<depName>.*?)?\\s(?:ENV|ARG)·.*?_VERSION=(?<currentValue>.*)"
    24    │ - ······],
    25    │ - ······"registryUrlTemplate":·"https://deb.debian.org/debian?suite=stable&components=main,contrib,non-free&binaryArch=amd64",
    26    │ - ······"datasourceTemplate":·"deb"
    27    │ - ····}
    28    │ - ··],
    29    │ - ··"enabledManagers":·[
    30    │ - ····"dockerfile",
    31    │ - ····"custom.regex"
    32    │ - ··],
    33    │ - ··"groupName":·"all·dependencies",
    34    │ - ··"groupSlug":·"all"
        2 │ + → "$schema":·"https://docs.renovatebot.com/renovate-schema.json",
        3 │ + → "extends":·["config:recommended"],
        4 │ + → "customManagers":·[
        5 │ + → → {
        6 │ + → → → "customType":·"regex",
        7 │ + → → → "description":·"Update·_VERSION·variables·in·Dockerfiles",
        8 │ + → → → "fileMatch":·[
        9 │ + → → → → "(^|/|\\.)Dockerfile$",
       10 │ + → → → → "(^|/)Dockerfile\\.[^/]*$",
       11 │ + → → → → "(^|/)versions.env$"
       12 │ + → → → ],
       13 │ + → → → "matchStrings":·[
       14 │ + → → → → "#·renovate:·datasource=(?<datasource>[a-z-]+?)(?:·depName=(?<depName>.+?))?·packageName=(?<packageName>.+?)(?:·versioning=(?<versioning>[a-z-]+?))?\\s(?:ENV|ARG)·.+?_VERSION=(?<currentValue>.+?)\\s"
       15 │ + → → → ]
       16 │ + → → },
       17 │ + → → {
       18 │ + → → → "customType":·"regex",
       19 │ + → → → "fileMatch":·["^Dockerfile$"],
       20 │ + → → → "matchStrings":·[
       21 │ + → → → → "#\\s*renovate:\\s*?(release=(?<release>.*?))?\\s*depName=(?<depName>.*?)?\\s(?:ENV|ARG)·.*?_VERSION=(?<currentValue>.*)"
       22 │ + → → → ],
       23 │ + → → → "registryUrlTemplate":·"https://deb.debian.org/debian?suite=stable&components=main,contrib,non-free&binaryArch=amd64",
       24 │ + → → → "datasourceTemplate":·"deb"
       25 │ + → → }
       26 │ + → ],
       27 │ + → "enabledManagers":·["dockerfile",·"custom.regex"],
       28 │ + → "groupName":·"all·dependencies",
       29 │ + → "groupSlug":·"all"
    35 30 │   }
    36 31 │


format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Some errors were emitted while running checks.

DOCKERFILE_HADOLINT

/github/workspace/Dockerfile:43 DL3018 �[1m�[93mwarning�[0m: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`
/github/workspace/Dockerfile:56 DL3018 �[1m�[93mwarning�[0m: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`
/github/workspace/Dockerfile:70 DL4006 �[1m�[93mwarning�[0m: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
/github/workspace/Dockerfile:74 DL4006 �[1m�[93mwarning�[0m: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
/github/workspace/Dockerfile:89 DL3018 �[1m�[93mwarning�[0m: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`

TRIVY

Report Summary

┌────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│   Target   │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile │ dockerfile │        -        │         1         │    -    │
└────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


Dockerfile (dockerfile)
=======================
Tests: 27 (SUCCESSES: 26, FAILURES: 1)
Failures: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0)

DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds-0002
────────────────────────────────────────