security: update base image (nginx 1.23→1.30 (stable))

[beauremus]

Summary

Automated base image update to resolve HIGH/CRITICAL CVEs detected in Harbor.

Upgrade: nginx 1.23→1.30 (stable)

Changes

  - FROM nginx:1.23
  + FROM nginx:1.30  (nginx 1.23→1.30 (stable))

CVE Impact

This change addresses security vulnerabilities detected by Harbor/Trivy in the
applications/ap-python-launcher-app:34 image:

• 0 CRITICAL severity CVEs
• 105 HIGH severity CVEs
• 210 total unique CVEs resolved by this base image update

The majority of these CVEs are in OS-level packages (openssl, curl, libxml2,
krb5, expat) that are patched in the updated base image but unfixed in the
current one.

How to verify

After merging, Harbor will automatically rescan the rebuilt image. Check
https://adregistry.fnal.gov for updated vulnerability counts.

Notes

• This PR was generated automatically by propose_fixes.py
• Only the FROM line(s) in Dockerfile were changed
• Application code is untouched
• Please review that the new base image is compatible with your build
• Test your image build locally before merging: docker build -t test .

/cc Security team

[github-actions]

Code Coverage Report - 400 of 531 lines covered ( ⛔ 75.33%)

lib - 400 of 531 lines covered ( ⛔ 75.33%)

lib/api_service.dart - 27 of 68 lines covered ( ⛔ 39.71%)

Uncovered lines: ⚠️ 50-53, 55, 75, 77-79, 102-106, 134-137, 197, 199, 213, 219, 221-223, 226, 228, 232, 234, 237, 239-240, 243, 247, 251, 253, 255-257, 260, 262

lib/config.dart - 1 of 9 lines covered ( ⛔ 11.11%)

Uncovered lines: ⚠️ 33, 39-43, 47-48

lib/connect.dart - 0 of 1 lines covered ( ⛔ 0.00%)

⛔ This file is missing coverage.

lib/connect_stub.dart - 0 of 1 lines covered ( ⛔ 0.00%)

⛔ This file is missing coverage.

lib/connect_web.dart - 0 of 7 lines covered ( ⛔ 0.00%)

⛔ This file is missing coverage.

lib/job_store.dart - 1 of 38 lines covered ( ⛔ 2.63%)

Uncovered lines: ⚠️ 15-19, 33-36, 43-46, 49-50, 52-56, 58-59, 66, 71, 73-77, 79, 84-89, 91

lib/launcher - 323 of 350 lines covered ( ✅ 92.29%)

lib/launcher/launcher_controller.dart - 123 of 130 lines covered ( ✅ 94.62%)

Uncovered lines: ⚠️ 192-194, 197, 331, 334, 338

lib/launcher/launcher_models.dart - 1 of 7 lines covered ( ⛔ 14.29%)

Uncovered lines: ⚠️ 51, 57-61

lib/launcher/launcher_poller.dart - 72 of 77 lines covered ( ✅ 93.51%)

Uncovered lines: ⚠️ 104-107, 110

lib/launcher/launcher_widgets.dart - 127 of 136 lines covered ( ✅ 93.38%)

Uncovered lines: ⚠️ 48, 68, 144, 153, 166, 179, 182-183, 353

lib/launcher_screen.dart - 42 of 47 lines covered ( ✅ 89.36%)

Uncovered lines: ⚠️ 45, 47-48, 50, 54

lib/main.dart - 6 of 10 lines covered ( ⛔ 60.00%)

Uncovered lines: ⚠️ 9-12