fix/partial/CVE-2025-68121/crypto/tls

Dockerfile

@@ -1,3 +1,12 @@
+# Build stage for NATS CLI
+FROM golang:1.26-alpine AS nats-builder
+RUN apk add --no-cache git
+RUN git clone --depth 1 https://github.com/nats-io/natscli.git /src
+WORKDIR /src/nats
+RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o nats .
+
+
+
 FROM php:8.4-fpm-alpine3.23
 
 ENV APP_ENV=production
@@ -30,11 +39,8 @@ RUN apk update && apk add --no-cache \
     jq \
     && rm -rf /var/cache/apk/*
 
-RUN curl -sSL https://github.com/nats-io/natscli/releases/download/v0.3.1/nats-0.3.1-linux-amd64.zip -o /tmp/nats.zip \
-    && unzip /tmp/nats.zip -d /tmp/nats \
-    && mv /tmp/nats/nats-0.3.1-linux-amd64/nats /usr/local/bin/nats \
-    && chmod +x /usr/local/bin/nats \
-    && rm -rf /tmp/nats /tmp/nats.zip    
+COPY --from=nats-builder /src/nats/nats /usr/local/bin/nats
+RUN chmod +x /usr/local/bin/nats
 
 RUN rm -rf /var/cache/apk/*
 RUN docker-php-ext-install mbstring zip exif pcntl intl gd pdo pdo_sqlite bcmath