[Snyk] Security upgrade flyway/flyway from 11.1-alpine to 11.20.3-alpine

[simensma-fresh]

Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• migrations/Dockerfile.flyway.ci

We recommend upgrading to flyway/flyway:11.20.3-alpine, as this image has only 24 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Out-of-bounds Read SNYK-ALPINE320-LIBPNG-15062382	686
	Out-of-bounds Read SNYK-ALPINE320-LIBPNG-15062385	686
	Uncontrolled Recursion SNYK-ALPINE320-EXPAT-9459842	614
	Out-of-bounds Write SNYK-ALPINE320-GNUPG-14845617	614
	CVE-2025-26519 SNYK-ALPINE320-MUSL-8720638	614

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Out-of-bounds Read
🦉 Out-of-bounds Write

[sonarqubecloud]

Quality Gate passed for 'bcgov-sonarcloud_mds_core-api'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud