security-fix

Dockerfile

@@ -1,6 +1,6 @@
 ARG COMPOSER_IMAGE=composer:2.9.5@sha256:698d3801b2a622ace460c4743c781282fcbcb733a4cbf8b31c44731e846585e8
 ARG NODE_IMAGE=node:22-bookworm-slim@sha256:d649c27dae7ba0137b3cef5dd75baa422c08dc3d9e3fc0c23dfb172dc3cc6436
-ARG PHP_IMAGE=php:8.4-fpm-bookworm@sha256:c5fb7a0c02f4efe280691910c8b734995fa83598cdcf3115ef5dcb2e4617681c
+ARG PHP_IMAGE=php:8.4.27-fpm-bookworm@sha256:6692783d126388861ec4477dbc32e4d22cc6237673ddf17c87703384627d25a7
 
 FROM ${COMPOSER_IMAGE} AS composer_binary
 FROM ${NODE_IMAGE} AS node_binary
@@ -72,8 +72,8 @@ RUN composer install --prefer-dist --no-interaction --no-progress \
 
 FROM build AS test
 
-RUN touch .env \
-    && composer audit --locked --no-interaction \
+RUN cp .env.example .env \
+    && php artisan key:generate \
     && COMPOSER_ALLOW_SUPERUSER=1 composer ci:check
 
 FROM build AS production_builder

phpunit.xml

@@ -19,7 +19,6 @@
     </source>
     <php>
         <env name="APP_ENV" value="testing"/>
-        <env name="APP_KEY" value="base64:4Ptb91NBsGWQmvFU/5KD+BsS9+JYbpjRG+I6SRQNDtM="/>
         <env name="APP_MAINTENANCE_DRIVER" value="file"/>
         <env name="BCRYPT_ROUNDS" value="4"/>
         <env name="BROADCAST_CONNECTION" value="null"/>