From 691fb25f06a3d4a7a0631a1b36fbfee50efd5cab Mon Sep 17 00:00:00 2001
From: briskt <3172830+briskt@users.noreply.github.com>
Date: Wed, 15 Jul 2026 11:01:07 +0800
Subject: [PATCH 1/2] Update config-shim version to 1.3.2 in Dockerfile

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index fc2780c..3d5ee45 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -77,7 +77,7 @@ COPY vhost.conf /etc/apache2/sites-enabled/
 
 RUN echo "ServerName 127.0.0.1" >> /etc/apache2/apache2.conf
 
-ADD https://github.com/sil-org/config-shim/releases/download/v1.3.1/config-shim.gz config-shim.gz
+ADD https://github.com/sil-org/config-shim/releases/download/v1.3.2/config-shim.gz config-shim.gz
 RUN gzip -d config-shim.gz && chmod 755 config-shim && mv config-shim /usr/local/bin
 
 EXPOSE 80

From 50e246262cc59596b5d9d131acd9ae00664af3ec Mon Sep 17 00:00:00 2001
From: briskt <3172830+briskt@users.noreply.github.com>
Date: Wed, 15 Jul 2026 11:36:47 +0800
Subject: [PATCH 2/2] check the config-shim SHA256 hash

---
 Dockerfile | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 3d5ee45..c1ea89d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -77,8 +77,16 @@ COPY vhost.conf /etc/apache2/sites-enabled/
 
 RUN echo "ServerName 127.0.0.1" >> /etc/apache2/apache2.conf
 
+ADD https://github.com/sil-org/config-shim/releases/download/v1.3.2/checksums.txt checksums.txt
 ADD https://github.com/sil-org/config-shim/releases/download/v1.3.2/config-shim.gz config-shim.gz
-RUN gzip -d config-shim.gz && chmod 755 config-shim && mv config-shim /usr/local/bin
+
+RUN <<'EOF' bash -e
+sha256sum --check checksums.txt
+gzip -d config-shim.gz
+chmod 755 config-shim
+mv config-shim /usr/local/bin
+rm checksums.txt
+EOF
 
 EXPOSE 80