chore: update orb, node, grype, image and deps (#230)

Co-authored-by: Juan Correa <gibaros@users.noreply.github.com>

Author: gibaros

.circleci/config.yml

@@ -1,7 +1,7 @@
 version: 2.1
 setup: true
 orbs:
-  build: mojaloop/build@1.1.0
+  build: mojaloop/build@1.1.7
 workflows:
   setup:
     jobs:

.grype.yaml

@@ -1,7 +1,11 @@
 ignore:
-  # Ignore cross-spawn vulnerabilities by CVE ID due to false positive
-  # as grype looks at package-lock.json where it shows versions with
-  # vulnerabilities, npm ls shows only 7.0.6 verion is used
+  - vulnerability: CVE-2025-46394
+    reason: "No fixes to busybox apk available as of 2025-10-16 on Dockerfile base image 22.20.0-alpine3.22"
+  - vulnerability: CVE-2024-58251
+    reason: "No fixes to busybox apk available as of 2025-10-16 on Dockerfile base image 22.20.0-alpine3.22"
+  - vulnerability: CVE-2025-56200
+    include-aliases: true
+    reason: "No fixes available as of 2025-10-16 on validator npm package"
 
 
 # Set output format defaults

.nvmrc

@@ -1 +1 @@
-22.15.1
+22.20.0

Dockerfile

@@ -1,5 +1,5 @@
 # Arguments
-ARG NODE_VERSION=lts-alpine
+ARG NODE_VERSION=22.20.0-alpine3.22
 
 # NOTE: Ensure you set NODE_VERSION Build Argument as follows...
 #