From 59d80edb0f80ff47f9b6d409047b65a6ef1d4459 Mon Sep 17 00:00:00 2001
From: Jan-Kazlouski-elastic <jan.kazlouski@elastic.co>
Date: Wed, 26 Aug 2026 14:12:59 +0300
Subject: [PATCH] fix(docker): bump runtime git apk to 2.54.0-r0 for
 CVE-2026-32631

Resolves information exposure in git 2.50.1-r1 (Wolfi runtime dependency).

Part of https://github.com/elastic/security/issues/13623
---
 Dockerfile.wolfi | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile.wolfi b/Dockerfile.wolfi
index 51cbc9e7..7a828f30 100644
--- a/Dockerfile.wolfi
+++ b/Dockerfile.wolfi
@@ -92,7 +92,7 @@ USER root
 
 # Create java user and install runtime dependencies
 RUN addgroup -g 1000 java && adduser -u 1000 -G java -s /bin/bash -D java && \
-    apk update && apk add --no-cache libcurl-openssl4=~8.12.1 git=~2.50.1-r1 bash=~5.3.0
+    apk update && apk add --no-cache libcurl-openssl4=~8.12.1 git=~2.54.0-r0 bash=~5.3.0
 
 # Set environment variables
 ENV JAVA_HOME=/opt/jdk-crawler \