From 5028524537888f60cc565dab2333c9101be2032a Mon Sep 17 00:00:00 2001
From: Stan Runge <stan@stanrunge.dev>
Date: Sun, 25 Oct 2026 20:08:51 +0000
Subject: [PATCH] chore: bump bun to 1.4.4 (CVE-2026-111497)

---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 87570db..f26b4a6 100755
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM oven/bun:1.4.0 AS builder
+FROM oven/bun:1.4.4 AS builder
 WORKDIR /app
 COPY package.json bun.lock ./
 RUN bun install --frozen-lockfile
@@ -6,7 +6,7 @@ COPY . .
 RUN bun run test:unit -- --run
 RUN bun run build
 
-FROM oven/bun:1.4.0
+FROM oven/bun:1.4.4
 WORKDIR /app
 ARG GIT_SHA=dev
 ENV APP_VERSION=$GIT_SHA