Update version to 1.2.1 in source files

Fix critical CVEs by using official Caddy image instead of Alpine package
Copy Caddy binary from caddy:2-alpine multi-stage build to avoid stale smallstep/certificates (CVE CVSS 10) and grpc vulnerabilities shipped with the Alpine caddy package.
2026-03-30 16:50:37 +02:00 · 2026-03-30 16:39:15 +02:00
3 changed files with 8 additions and 3 deletions
--- a/7
+++ b/7
@@ -1,7 +1,12 @@
+FROM caddy:2-alpine AS caddy
+
 FROM php:8.3-fpm-alpine AS base

+# Copy Caddy binary from official image (avoids stale Alpine package)
+COPY --from=caddy /usr/bin/caddy /usr/sbin/caddy
+
 # Install PHP curl extension (needed for API proxies)
-RUN apk add --no-cache caddy curl-dev \
+RUN apk add --no-cache curl-dev \
    && docker-php-ext-install curl \
    && rm -rf /var/cache/apk/*

--- a/i18n.js
+++ b/i18n.js
@@ -12,7 +12,7 @@ var I18n = (function () {
    tr: { name: 'Türkçe' }
  };

-  var VERSION = '1.1.1';
+  var VERSION = '1.2.1';

  var footer = 'Open Source &middot; No Tracking &middot; No KYC<br /><a href="https://github.com/schmidt1024/xmrpay" target="_blank" rel="noopener noreferrer">Source</a> &middot; <a href="http://mc6wfeaqc7oijgdcudrr5zsotmwok3jzk3tu2uezzyjisn7nzzjjizyd.onion" title="Tor Hidden Service">Onion</a> &middot; <a href="/privacy.html">Privacy &amp; Terms</a><br /><span class="version">v' + VERSION + '</span>';

--- a/index.html
+++ b/index.html
@@ -120,7 +120,7 @@
  </main>

  <footer>
-    <p data-i18n-html="footer">Open Source &middot; No Tracking &middot; No KYC<br /><a href="https://github.com/schmidt1024/xmrpay" target="_blank" rel="noopener noreferrer">Source</a> &middot; <a href="http://mc6wfeaqc7oijgdcudrr5zsotmwok3jzk3tu2uezzyjisn7nzzjjizyd.onion" title="Tor Hidden Service">Onion</a> &middot; <a href="/privacy.html">Privacy &amp; Terms</a><br /><span class="version">v1.1.1</span></p>
+    <p data-i18n-html="footer">Open Source &middot; No Tracking &middot; No KYC<br /><a href="https://github.com/schmidt1024/xmrpay" target="_blank" rel="noopener noreferrer">Source</a> &middot; <a href="http://mc6wfeaqc7oijgdcudrr5zsotmwok3jzk3tu2uezzyjisn7nzzjjizyd.onion" title="Tor Hidden Service">Onion</a> &middot; <a href="/privacy.html">Privacy &amp; Terms</a><br /><span class="version">v1.2.1</span></p>
  </footer>

  <div class="lang-picker" id="langPicker">
Author	SHA1	Message	Date
schmidt1024	604d6aa1f4	Update version to 1.2.1 in source files Some checks failed Build & Push Docker Image / build (push) Has been cancelled Details	2026-03-30 16:50:37 +02:00
schmidt1024	acac49969d	Fix critical CVEs by using official Caddy image instead of Alpine package Copy Caddy binary from caddy:2-alpine multi-stage build to avoid stale smallstep/certificates (CVE CVSS 10) and grpc vulnerabilities shipped with the Alpine caddy package.	2026-03-30 16:39:15 +02:00