From b64a0c52ec1ea8d1efa99dd7f870e580d7c60df8 Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Sun, 11 Oct 2026 02:47:02 +0200
Subject: [PATCH] Refresh static publisher runtime and exact fixed Alpine
 packages

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
---
 Containerfile | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/Containerfile b/Containerfile
index a21e6f3..42d1bd4 100644
--- a/Containerfile
+++ b/Containerfile
@@ -1,6 +1,11 @@
 ARG SOURCE_SET_DIGEST=unknown
 
-FROM docker.io/nginxinc/nginx-unprivileged@sha256:65e3e85dbaed8ba248841d9d58a899b6197106c23cb0ff1a132b7bfe0547e4c0 AS runtime-base
+FROM docker.io/nginxinc/nginx-unprivileged@sha256:15c994d10d6d78658721c3bcafff14cb281fba2a4bdf9d5ba92c416a472516e3 AS runtime-base
+
+# Preserve the full upstream module set while applying fixed Alpine packages.
+USER root
+RUN apk add --no-cache --upgrade tiff=4.7.2-r0 zlib=1.3.2-r1
+USER 101:101
 
 ARG VCS_REVISION=unknown
 ARG SOURCE_SET_DIGEST