updated nginx to version 1.29 to resolve CVE-2026-1642

UPGRADE.md

@@ -10,6 +10,10 @@
 2. Run `composer update shopsys/deployment`
 3. Check files in mentioned pull requests and if you have any of them extended in your project, apply changes manually
 
+## Upgrade from v4.5.0 to v4.6.0
+
+- upgraded nginx to version 1.29 ([#67](https://github.com/shopsys/deployment/pull/67))
+
 ## Upgrade from v4.4.0 to v4.5.0
 
 - added gopay payment notification url handled by backend with fallback to storefront ([#65](https://github.com/shopsys/deployment/pull/65))

kubernetes/deployments/webserver-php-fpm.yaml

@@ -120,7 +120,7 @@ spec:
                             cpu: "500m"
                             memory: 500Mi
 
-                -   image: nginx:1.27-alpine
+                -   image: nginx:1.29-alpine
                     name: webserver
                     ports:
                         -   containerPort: 8080

tests/scenarios/basic-production/expected/webserver.yaml

@@ -595,7 +595,7 @@ spec:
           name: fe-api-keys-volume
           readOnly: true
         workingDir: /var/www/html
-      - image: nginx:1.27-alpine
+      - image: nginx:1.29-alpine
         lifecycle:
           preStop:
             exec:

tests/scenarios/development-single-domain/expected/webserver.yaml

@@ -589,7 +589,7 @@ spec:
           name: fe-api-keys-volume
           readOnly: true
         workingDir: /var/www/html
-      - image: nginx:1.27-alpine
+      - image: nginx:1.29-alpine
         lifecycle:
           preStop:
             exec:

tests/scenarios/escaping-env/expected/webserver.yaml

@@ -599,7 +599,7 @@ spec:
           name: fe-api-keys-volume
           readOnly: true
         workingDir: /var/www/html
-      - image: nginx:1.27-alpine
+      - image: nginx:1.29-alpine
         lifecycle:
           preStop:
             exec:

tests/scenarios/production-with-cloudflare/expected/webserver.yaml

@@ -595,7 +595,7 @@ spec:
           name: fe-api-keys-volume
           readOnly: true
         workingDir: /var/www/html
-      - image: nginx:1.27-alpine
+      - image: nginx:1.29-alpine
         lifecycle:
           preStop:
             exec: