[docker] Bump node from 24.19.0-alpine3.23 to 24.20.0-alpine3.23

[dependabot]

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps node from 24.19.0-alpine3.23 to 24.20.0-alpine3.23.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dbmi-svc-checkmarx]

Checkmarx One – Scan Summary & Details – 02d5ab13-2913-427a-9172-7ec3af68616a

---

New Issues (3)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		CVE-2026-82417	Npm-qs-6.15.3	details Description: ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable `isBuff... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
2		CVE-2026-82562	Npm-qs-6.15.3	details Description: ### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
3		Unpinned Package Version in Apk Add	Dockerfile: 3	details Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

---

Fixed Issues (1)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	Unpinned Package Version in Apk Add	Dockerfile: 3

---

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR