From a13a201ae9485ba4a4ff1185db3346c34ce953d8 Mon Sep 17 00:00:00 2001
From: jxxghp <jxxghp@gmail.com>
Date: Sat, 12 Sep 2026 18:59:44 +0800
Subject: [PATCH] fix(docker): refresh vulnerable libevent package

---
 docker/Dockerfile                  | 1 +
 tests/test_release_supply_chain.py | 1 +
 2 files changed, 2 insertions(+)

diff --git a/docker/Dockerfile b/docker/Dockerfile
index 3c619621e..d15b7de04 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -93,6 +93,7 @@ RUN apt-get update \
     supervisor \
     postgresql-client-18 \
     libchromaprint-tools \
+    libevent-2.1-7t64 \
     libjemalloc2 \
     && dpkg-reconfigure --frontend noninteractive tzdata \
     && ln -s /usr/lib/*-linux-gnu/libjemalloc.so.2 /usr/local/lib/libjemalloc.so \
diff --git a/tests/test_release_supply_chain.py b/tests/test_release_supply_chain.py
index 1d19a7edc..aa938a68f 100644
--- a/tests/test_release_supply_chain.py
+++ b/tests/test_release_supply_chain.py
@@ -130,6 +130,7 @@ def test_base_image_uses_refreshable_tag_and_apt_does_not_upgrade_in_place() ->
         "apt-get install -y --no-install-recommends libde265-0"
         in dockerfile
     )
+    assert "\n    libevent-2.1-7t64 \\\n" in dockerfile
     assert "\n    openssl \\\n" in dockerfile
     assert "\n    util-linux \\\n" in dockerfile