Fix vulnerabilities

- Fix composer build
- Upgrade packages

Author: vpmv

.docker/php/bin/composer-install.sh

@@ -0,0 +1,17 @@
+#!/bin/sh
+
+EXPECTED_CHECKSUM="$(php -r 'copy("https://composer.github.io/installer.sig", "php://stdout");')"
+php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
+ACTUAL_CHECKSUM="$(php -r "echo hash_file('sha384', 'composer-setup.php');")"
+
+if [ "$EXPECTED_CHECKSUM" != "$ACTUAL_CHECKSUM" ]
+then
+    >&2 echo 'ERROR: Invalid installer checksum'
+    rm composer-setup.php
+    exit 1
+fi
+
+php composer-setup.php --quiet
+RESULT=$?
+rm composer-setup.php
+exit $RESULT

Dockerfile

@@ -19,17 +19,17 @@ RUN docker-php-ext-install intl \
     && docker-php-ext-install zip \
     && docker-php-ext-install pdo_mysql
 
-RUN  php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" && \
-     php -r "if (hash_file('sha384', 'composer-setup.php') === 'dac665fdc30fdd8ec78b38b9800061b4150413ff2e3b6f88543c636f7cd84f6db9189d43a81e5503cda447da73c7e5b6') { echo 'Installer verified'.PHP_EOL; } else { echo 'Installer corrupt'.PHP_EOL; unlink('composer-setup.php'); exit(1); }" && \
-     php composer-setup.php && \
-     php -r "unlink('composer-setup.php');"
-RUN mv composer.phar /usr/local/bin/composer
 
- # PROJECT
+
 RUN mkdir -p $dir
 WORKDIR $dir
 
 COPY .docker/php/bin bin/
+RUN bin/composer-install.sh
+
+RUN mv composer.phar /usr/local/bin/composer
+
+ # PROJECT
 RUN chmod +x bin/entrypoint.sh
 
 COPY composer.* ./

composer.lock

@@ -1,7 +1,7 @@
 {
     "devDependencies": {
         "@babel/preset-env": "^7.28.0",
-        "webpack": "^5.100.2",
+        "webpack": "^5.105.4",
         "webpack-cli": "^6.0.1",
         "yarn-audit-fix": "^10.1.1"
     },
@@ -17,7 +17,7 @@
         "@babel/core": "^7.28.0",
         "@fortawesome/fontawesome-free": "^7.0.0",
         "@popperjs/core": "^2.11.8",
-        "@symfony/webpack-encore": "^0.",
+        "@symfony/webpack-encore": "^6.0.0",
         "bootstrap": "^5.2",
         "bootstrap-icons": "^1.13.1",
         "bootstrap-select": "^1.14.0-beta3",