Bump version to 1.2.2, update SRI hash for i18n.min.js

Update version to 1.2.1 in source files
Fix critical CVEs by using official Caddy image instead of Alpine package
2026-03-30 16:54:08 +02:00 · 2026-03-30 16:50:37 +02:00 · 2026-03-30 16:39:15 +02:00
4 changed files with 10 additions and 5 deletions
--- a/7
+++ b/7
@@ -1,7 +1,12 @@
+FROM caddy:2-alpine AS caddy
+
 FROM php:8.3-fpm-alpine AS base

+# Copy Caddy binary from official image (avoids stale Alpine package)
+COPY --from=caddy /usr/bin/caddy /usr/sbin/caddy
+
 # Install PHP curl extension (needed for API proxies)
-RUN apk add --no-cache caddy curl-dev \
+RUN apk add --no-cache curl-dev \
    && docker-php-ext-install curl \
    && rm -rf /var/cache/apk/*

--- a/i18n.js
+++ b/i18n.js
@@ -12,7 +12,7 @@ var I18n = (function () {
    tr: { name: 'Türkçe' }
  };

-  var VERSION = '1.1.1';
+  var VERSION = '1.2.2';

  var footer = 'Open Source &middot; No Tracking &middot; No KYC<br /><a href="https://github.com/schmidt1024/xmrpay" target="_blank" rel="noopener noreferrer">Source</a> &middot; <a href="http://mc6wfeaqc7oijgdcudrr5zsotmwok3jzk3tu2uezzyjisn7nzzjjizyd.onion" title="Tor Hidden Service">Onion</a> &middot; <a href="/privacy.html">Privacy &amp; Terms</a><br /><span class="version">v' + VERSION + '</span>';

--- a/i18n.min.js
+++ b/i18n.min.js
--- a/index.html
+++ b/index.html
@@ -120,7 +120,7 @@
  </main>

  <footer>
-    <p data-i18n-html="footer">Open Source &middot; No Tracking &middot; No KYC<br /><a href="https://github.com/schmidt1024/xmrpay" target="_blank" rel="noopener noreferrer">Source</a> &middot; <a href="http://mc6wfeaqc7oijgdcudrr5zsotmwok3jzk3tu2uezzyjisn7nzzjjizyd.onion" title="Tor Hidden Service">Onion</a> &middot; <a href="/privacy.html">Privacy &amp; Terms</a><br /><span class="version">v1.1.1</span></p>
+    <p data-i18n-html="footer">Open Source &middot; No Tracking &middot; No KYC<br /><a href="https://github.com/schmidt1024/xmrpay" target="_blank" rel="noopener noreferrer">Source</a> &middot; <a href="http://mc6wfeaqc7oijgdcudrr5zsotmwok3jzk3tu2uezzyjisn7nzzjjizyd.onion" title="Tor Hidden Service">Onion</a> &middot; <a href="/privacy.html">Privacy &amp; Terms</a><br /><span class="version">v1.2.2</span></p>
  </footer>

  <div class="lang-picker" id="langPicker">
@@ -137,7 +137,7 @@
  <div class="toast" id="toast"></div>

  <script src="lib/qrcode.min.js?v=20260326-3" integrity="sha384-3zSEDfvllQohrq0PHL1fOXJuC/jSOO34H46t6UQfobFOmxE5BpjjaIJY5F2/bMnU" crossorigin="anonymous" defer></script>
-  <script src="i18n.min.js?v=20260326-3" integrity="sha384-GS62r/FP1LcB9Ec+ow+45oUWdQsjZKKwtPT6D/YXBfgGjUCjtpuxeLE3GMtbItgx" crossorigin="anonymous" defer></script>
+  <script src="i18n.min.js?v=20260326-3" integrity="sha384-SypYeUOf8lYxhYo3OFpksBwpz36UeFwEJ8PcBpjrpkPGDsU67gGCjGiNDf/TN7K1" crossorigin="anonymous" defer></script>
  <script src="app.min.js?v=20260326-3" integrity="sha384-Y8cPBLtvKkMhHUuD+ElA1hWJHo86yO5MRs8HTUvhuK9h+lwo9WT9eBvRM7mRgtCr" crossorigin="anonymous" defer></script>
 </body>
 </html>
Author	SHA1	Message	Date
schmidt1024	dad2caf69f	Bump version to 1.2.2, update SRI hash for i18n.min.js Some checks failed Build & Push Docker Image / build (push) Has been cancelled Details	2026-03-30 16:54:08 +02:00
schmidt1024	604d6aa1f4	Update version to 1.2.1 in source files Some checks failed Build & Push Docker Image / build (push) Has been cancelled Details	2026-03-30 16:50:37 +02:00
schmidt1024	acac49969d	Fix critical CVEs by using official Caddy image instead of Alpine package Copy Caddy binary from caddy:2-alpine multi-stage build to avoid stale smallstep/certificates (CVE CVSS 10) and grpc vulnerabilities shipped with the Alpine caddy package.	2026-03-30 16:39:15 +02:00