chore(deps): update redis docker tag from 7.2.5 to v7.4.1 (docker-compose.yml)

[renovate]

This PR contains the following updates:

Package	Update	Change
redis	minor	7.2.5-alpine -> 7.4.1-alpine

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dryrunsecurity]

DryRun Security Summary

The provided code change updates the docker-compose.yml file to use the latest version of the Redis image, which is a routine update to keep the application's dependencies up-to-date and ensure the latest security patches are applied.

Expand for full summary

Summary:

The provided code change is an update to the docker-compose.yml file, which is used to deploy the DefectDojo application in a containerized environment. The key change is an update to the Redis image from version 7.2.5-alpine to 7.4.1-alpine. This is a minor version update, which typically includes bug fixes and performance improvements. From an application security perspective, this change is relatively low-risk, as Redis is used as a message broker and caching mechanism in the DefectDojo application, and version updates generally do not introduce significant security vulnerabilities, unless they specifically address known security issues. It is always a good practice to keep dependencies up-to-date to ensure you have the latest security patches. The rest of the docker-compose.yml file remains the same, with no other notable changes that would impact the application's security posture.

Files Changed:

• docker-compose.yml: This file has been updated to use the Redis image version 7.4.1-alpine instead of the previous version 7.2.5-alpine. This is a routine update to keep the Redis dependency up-to-date, which is a common practice to ensure the latest security patches are applied.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[cneill]

We're going to hold off on this one while we determine any implications of the change to Redis' licensing

Reviewing license change