From 0f8d77a5c697556763af70d6d11f31f5b3e2b184 Mon Sep 17 00:00:00 2001
From: Isaac Good <github@isaacgood.com>
Date: Mon, 11 May 2026 09:35:01 -0700
Subject: [PATCH] Bump and pin the base layer

---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 92ecf20..9451ce6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM php:8.4.10-cli-alpine3.22 AS build
+FROM php:8.4.21-cli-alpine3.23@sha256:4f4fc56fe4ba7b7d241c371eda011b27ca4f3b25bf2a37956ee06e966777d696 AS build
 
 RUN apk add --no-cache ca-certificates curl jo zip unzip
 
@@ -23,7 +23,7 @@ RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini" \
         COMPOSER_ALLOW_SUPERUSER=1 \
         composer install --no-cache --no-dev --no-interaction --no-progress
 
-FROM php:8.4.10-cli-alpine3.22 AS runtime
+FROM php:8.4.21-cli-alpine3.23@sha256:4f4fc56fe4ba7b7d241c371eda011b27ca4f3b25bf2a37956ee06e966777d696
 
 COPY --from=build /usr/bin/jo /usr/bin/jo
 COPY --from=build /usr/local/lib/php/extensions /usr/local/lib/php/extensions