From 5b7c76c159f4e77b8815363084cdc17dddd1f381 Mon Sep 17 00:00:00 2001
From: DrPsychick <drpsychick@drsick.net>
Date: Wed, 13 Aug 2025 00:29:49 +0200
Subject: [PATCH] fix: explicit alpine version, so dependabot detects it
 (#2061)

---
 .github/dependabot.yml | 6 +++++-
 cmd/proxy/Dockerfile   | 3 +--
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 9671fe04..54690657 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -21,7 +21,11 @@ updates:
     target-branch: main
   - package-ecosystem: docker
     directories:
-      - /
       - /cmd/proxy
     schedule:
       interval: weekly
+    commit-message:
+      prefix: update-docker-image
+      include: scope
+    open-pull-requests-limit: 2
+    target-branch: main
diff --git a/cmd/proxy/Dockerfile b/cmd/proxy/Dockerfile
index ad53e3a9..10746160 100644
--- a/cmd/proxy/Dockerfile
+++ b/cmd/proxy/Dockerfile
@@ -6,7 +6,6 @@
 # See project Makefile if using make.
 # See docker --build-arg if building directly.
 ARG GOLANG_VERSION=1.23.5
-ARG ALPINE_VERSION=3.20
 
 FROM golang:${GOLANG_VERSION}-alpine AS builder
 
@@ -27,7 +26,7 @@ RUN DATE="$(date -u +%Y-%m-%d-%H:%M:%S-%Z)" && \
     -ldflags "-X github.com/gomods/athens/pkg/build.version=$VERSION -X github.com/gomods/athens/pkg/build.buildDate=$DATE -s -w" \
     -o /bin/athens-proxy ./cmd/proxy
 
-FROM alpine:${ALPINE_VERSION}
+FROM alpine:3.20
 ARG TARGETARCH
 
 ENV GOROOT="/usr/local/go" \