[Snyk] Security upgrade caddy from alpine to 2.11-alpine

[ajhalili2006]

Snyk has created this PR to fix 2 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• docker/caddy/Dockerfile

We recommend upgrading to caddy:2.11-alpine, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	CVE-2025-46394 SNYK-ALPINE322-BUSYBOX-14091698	364
	CVE-2025-46394 SNYK-ALPINE322-BUSYBOX-14091698	364
	CVE-2025-46394 SNYK-ALPINE322-BUSYBOX-14091698	364
	CVE-2024-58251 SNYK-ALPINE322-BUSYBOX-14091701	364
	CVE-2024-58251 SNYK-ALPINE322-BUSYBOX-14091701	364

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

This PR upgrades the Caddy Docker base image from caddy:alpine to caddy:2.11-alpine to address security vulnerabilities in busybox (CVE-2025-46394 and CVE-2024-58251). This is an automated security fix proposed by Snyk.

Changes:

• Updated Caddy base image to a specific versioned tag (2.11-alpine) to fix low-severity busybox vulnerabilities

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[ajhalili2006]

LGTMing this soon (after doing the DCO checks bypass one for the meanwhile)