chore(cve): upgrade debian to fix some CVEs (#2937)

Dockerfile

@@ -2,8 +2,9 @@ FROM ruby:3.3.4-slim AS build
 
 WORKDIR /app
 
-RUN apt update -qq && apt install nodejs curl build-essential git pkg-config libpq-dev libclang-dev curl -y && \
-  curl https://sh.rustup.rs -sSf | bash -s -- -y
+RUN apt update && apt upgrade -y
+RUN apt install nodejs curl build-essential git pkg-config libpq-dev libclang-dev curl -y && \
+    curl https://sh.rustup.rs -sSf | bash -s -- -y
 
 COPY ./Gemfile /app/Gemfile
 COPY ./Gemfile.lock /app/Gemfile.lock
@@ -13,7 +14,7 @@ ENV PATH="$PATH:/root/.cargo/bin/"
 RUN gem install bundler --no-document -v '2.5.5'
 
 RUN bundle config build.nokogiri --use-system-libraries &&\
-  bundle install --jobs=3 --retry=3 --without development test
+    bundle install --jobs=3 --retry=3 --without development test
 
 FROM ruby:3.3.4-slim
 
@@ -25,7 +26,8 @@ ARG SEGMENT_WRITE_KEY
 ARG GOCARDLESS_CLIENT_ID
 ARG GOCARDLESS_CLIENT_SECRET
 
-RUN apt update -qq && apt install git libpq-dev curl -y
+RUN apt update && apt upgrade -y
+RUN apt install git libpq-dev curl -y
 
 ENV SEGMENT_WRITE_KEY=$SEGMENT_WRITE_KEY
 ENV GOCARDLESS_CLIENT_ID=$GOCARDLESS_CLIENT_ID