[Snyk] Security upgrade node from 24.10.0-alpine3.22 to 24.13.1-alpine3.22

[turboOrange]

Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• readcode-backend/Dockerfile

We recommend upgrading to node:24.13.1-alpine3.22, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Race Condition SNYK-UPSTREAM-NODE-14928492	861
	UNIX Symbolic Link (Symlink) Following SNYK-UPSTREAM-NODE-14928586	761
	Uncaught Exception SNYK-UPSTREAM-NODE-14929624	761
	Reliance on Undefined, Unspecified, or Implementation-Defined Behavior SNYK-UPSTREAM-NODE-14975915	721
	CVE-2025-69421 SNYK-ALPINE322-OPENSSL-15121226	686

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Race Condition
🦉 Uncaught Exception

[Copilot]

Pull request overview

This is a security-focused pull request that upgrades the Node.js Docker base image in the backend service from version 24.10.0 to 24.13.1, both using Alpine Linux 3.22. The upgrade addresses 5 security vulnerabilities (1 critical and 4 high severity) including race conditions, symlink following, uncaught exceptions, and OpenSSL vulnerabilities.

Changes:

• Upgraded Node.js base image from 24.10.0-alpine3.22 to 24.13.1-alpine3.22 in the backend Dockerfile

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.