chore(deps): bump bellsoft/liberica-openjre-alpine from 17.0.12 to 23-38 in /docker-jans-keycloak-link

[dependabot]

Bumps bellsoft/liberica-openjre-alpine from 17.0.12 to 23-38.

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
bellsoft/liberica-openjre-alpine	[>= 21.pre.37.a, < 22]
bellsoft/liberica-openjre-alpine	[>= 20.pre.37.a, < 21]
bellsoft/liberica-openjre-alpine	[>= 19.pre.37.a, < 20]
bellsoft/liberica-openjre-alpine	[>= 18.pre.37.a, < 19]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dryrunsecurity]

DryRun Security Summary

The Dockerfile has been updated to use a newer Java runtime environment (version 23) with security improvements, but the added dependencies, such as Jetty web server and Jython integration, require careful review to ensure they are properly managed and secured.

Expand for full summary

Summary:

The code change in this Dockerfile is a significant update, as it upgrades the underlying Java runtime environment (JRE) from version 17 to version 23. This is an important security-related change, as newer Java versions often include critical security fixes and improvements. Additionally, the Dockerfile is using the Alpine Linux distribution as the base image, which is known for its security-focused approach. However, the Dockerfile also includes the installation of several dependencies, such as Jetty web server and Jython integration, which require careful review to ensure that they are properly managed and secured.

As an application security engineer, it's crucial to thoroughly review this Dockerfile update to ensure that the new Java version and dependencies do not introduce any new vulnerabilities or security risks. Additionally, it's important to review the security practices and configurations related to the Keycloak Link integration, as it may have security implications for the overall application.

Files Changed:

• docker-jans-keycloak-link/Dockerfile: This Dockerfile has been updated to use a newer base image, bellsoft/liberica-openjre-alpine:23-38, which upgrades the underlying Java runtime environment from version 17 to version 23. This change is significant from a security perspective, as it likely includes important security fixes and improvements. Additionally, the Dockerfile installs various Alpine packages, including Jetty web server and Jython integration, which require careful review to ensure they are properly managed and secured.

Code Analysis

We ran 9 analyzers against 1 file and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[iromli]

The suggested version is incompatible.

@dependabot ignore this major version

[dependabot]

OK, I won't notify you about version 23-38.x.x again, unless you re-open this PR.