From f8364ae5ab91a000d79620e0b68ea1462dfd1240 Mon Sep 17 00:00:00 2001
From: Harshit Jain <48647625+Harshit28j@users.noreply.github.com>
Date: Sat, 7 Mar 2026 15:16:46 +0530
Subject: [PATCH] Update Dockerfile

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index f3d01156e59..0c1d96ea9e0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -73,7 +73,7 @@ RUN apk add --no-cache bash openssl tzdata nodejs npm python3 py3-pip libsndfile
     # SECURITY FIX: patch npm's own package.json metadata so scanners see the
     # actual installed versions instead of the stale declared dependencies.
     find / -path "*/node_modules/npm/package.json" -exec \
-        sed -i 's/"tar": "\^7\.5\.[0-9]*"/"tar": "^7.5.10"/g; s/"minimatch": "\^[0-9.]*"/"minimatch": "^10.2.4"/g' {} + 2>/dev/null && \
+sed -i 's/"tar": "\^7\.5\.[0-9]*"/"tar": "^7.5.10"/g; s/"minimatch": "\^10\.[0-9.]*"/"minimatch": "^10.2.4"/g' {} + 2>/dev/null && \
     npm cache clean --force && \
     # Remove the apk-tracked npm so its stale SBOM metadata (tar 7.5.9) is
     # no longer visible to image scanners.  The globally installed npm@latest