From 78a4d23b7e311cfe93744a2baab0bcddbad1f87e Mon Sep 17 00:00:00 2001 From: GeiserX <9169332+GeiserX@users.noreply.github.com> Date: Wed, 21 Oct 2026 00:52:55 +0200 Subject: [PATCH] fix(docker): stop trusting the compromised eMudhra intermediates --- Dockerfile | 4 +++- docs/getting-started.md | 2 +- setup.py | 2 +- tests/test_visual_comparison.py | 2 +- wayback_diff/__init__.py | 2 +- 5 files changed, 7 insertions(+), 5 deletions(-) diff --git a/Dockerfile b/Dockerfile index 8bd3210..b2b6c4c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -2,8 +2,10 @@ FROM python:3.14-slim WORKDIR /app -# Install system dependencies +# Install system dependencies. ca-certificates is listed to upgrade it: the base +# image ships 20250419, which still trusts the compromised eMudhra intermediates. RUN apt-get update && apt-get install -y \ + ca-certificates \ wget \ gnupg \ unzip \ diff --git a/docs/getting-started.md b/docs/getting-started.md index ea781c7..a0747f9 100644 --- a/docs/getting-started.md +++ b/docs/getting-started.md @@ -31,7 +31,7 @@ pip install -e ".[visual]" ## Docker ```bash -docker run --rm drumsergio/wayback-diff:1.1.0 https://example.com/a https://example.com/b +docker run --rm drumsergio/wayback-diff:1.1.1 https://example.com/a https://example.com/b ``` The image is built for `linux/amd64`; on Apple Silicon add `--platform linux/amd64`. To build the image from a checkout instead: `docker build -t wayback-diff .`, then `docker run --rm wayback-diff `. diff --git a/setup.py b/setup.py index 2b3c6b9..91f7b3a 100644 --- a/setup.py +++ b/setup.py @@ -7,7 +7,7 @@ setup( name="wayback-diff", - version="1.1.0", + version="1.1.1", author="geiserx", author_email="sergio@geiser.cloud", description="Compare web pages, with Wayback Machine artifact cleaning and significance scoring", diff --git a/tests/test_visual_comparison.py b/tests/test_visual_comparison.py index 27015f6..d1ccbef 100644 --- a/tests/test_visual_comparison.py +++ b/tests/test_visual_comparison.py @@ -870,4 +870,4 @@ def test_main_module_import(self): def test_package_version(self): """Test package version is set.""" from wayback_diff import __version__ - assert __version__ == "1.1.0" + assert __version__ == "1.1.1" diff --git a/wayback_diff/__init__.py b/wayback_diff/__init__.py index 578b2bc..c0e712e 100644 --- a/wayback_diff/__init__.py +++ b/wayback_diff/__init__.py @@ -1,3 +1,3 @@ """Wayback-Diff: A comprehensive tool for comparing web pages with Wayback Machine support.""" -__version__ = "1.1.0" +__version__ = "1.1.1"