apk upgrade --no-cache -a --prune

[Zoey2936]

Since alpine sometimes updates apk packages included by default in the alpine docker image (because of CVEs or other reasons), without updating the docker image, we should run apk upgrade --no-cache -a --prune as the first line each Dockerfile, for the debian based images I think we should do the same (bit with apt)

[szaimen]

Hm... honestly I am not completely sure about this as dependencies are currently not pinned already and in that case it gets even worse...

[szaimen]

Made a typo and corrected to *pinned instead of fixed

[Zoey2936]

but this line would only affect the preinstalled apks? apks we installed are always the newest version, even without this line

[szaimen]

Right. Would you mind opening a PR that implements this?

[szaimen]

Will be done in #4559