From 7d2fe7a8801bd615de74c65079d3ea2197664f0a Mon Sep 17 00:00:00 2001
From: "slominskir-coding-agent[bot]"
 <335168828+slominskir-coding-agent[bot]@users.noreply.github.com>
Date: Sun, 4 Oct 2026 10:18:51 -0400
Subject: [PATCH] Pin the Docker base images

The image used tomcat:11-jdk21 and gradle:9-jdk21-alpine, so each build
took whatever versions were newest. Tests ran against Tomcat 11.0.26
while production runs 11.0.10, and the image was built with Gradle 9.8
while the wrapper, used locally and in CI, pins 9.0.0.

Pin tomcat:11.0.26-jdk21, the latest Tomcat 11 and what the tests
already ran on, and gradle:9.0.0-jdk21-alpine, matching the wrapper.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index aeead54..b4218a8 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
-ARG BUILD_IMAGE=gradle:9-jdk21-alpine
-ARG RUN_IMAGE=tomcat:11-jdk21
+ARG BUILD_IMAGE=gradle:9.0.0-jdk21-alpine
+ARG RUN_IMAGE=tomcat:11.0.26-jdk21
 
 ################## Stage 0
 FROM ${BUILD_IMAGE} AS builder