Dockerfile: run apt-get upgrade

The GDAL image in the "FROM" directive
can be several months old, this ensures
the latest Ubuntu package updates
(with security fixes) are in
the OWS image.

Dockerfile

@@ -3,8 +3,10 @@ FROM ghcr.io/osgeo/gdal:ubuntu-small-3.8.0 as builder
 
 # Setup build env for postgresql-client-14
 USER root
-RUN apt-get update -y \
-    && DEBIAN_FRONTEND=noninteractive apt-get install -y --fix-missing --no-install-recommends \
+RUN export DEBIAN_FRONTEND=noninteractive \
+    && apt-get update -y \
+    && apt-get upgrade -y \
+    && apt-get install -y --fix-missing --no-install-recommends \
             git \
             # For pybabel
             python3-distutils \
@@ -38,6 +40,12 @@ RUN pip freeze
 # Should match builder base.
 FROM ghcr.io/osgeo/gdal:ubuntu-small-3.8.0
 
+RUN export DEBIAN_FRONTEND=noninteractive \
+    && apt-get update -y \
+    && apt-get upgrade -y \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/* /var/dpkg/* /var/tmp/* /var/log/dpkg.log
+
 # all the python pip installed libraries
 COPY --from=builder  /usr/local/lib/python3.10/dist-packages /usr/local/lib/python3.10/dist-packages
 COPY --from=builder  /usr/lib/python3/dist-packages /usr/lib/python3/dist-packages