Update Github Actions #none major

.github/workflows/docker-build.yml

@@ -7,33 +7,37 @@ on:
       registry:  # id of input
         description: 'docker regisry host name'
         required: true
+        type: string
         default: 'gitea.phadric.de'
       cache-registry:  # id of input
         description: 'docker regisry host name'
         required: true
         default: 'imagecache.phadric.de'
+        type: string
       image_name:
         description: 'name of the dockerimage'
         required: true
-        default: ${{ github.repository }}
+        type: string
       checkout:
         description: 'checkout repo first'
         default: 'true'
+        type: string
       tag:
         description: 'checkout repo first'
         default: 'true'
-    secrets:
-      TOKEN:
-        description: 'repo auth token'
-        required: true
+        type: string
+   # secrets:
+   #   TOKEN:
+   #     description: 'repo auth token'
+   #     required: true
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: slim
     steps:
       - name: Checkout repository
         if: ${{ inputs.checkout == 'true' }}
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: '0'
       - name: Bump version and push tag
@@ -49,7 +53,7 @@ jobs:
           PRERELEASE_SUFFIX: ${{ github.ref_name }}
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
         with:
           flavor: |
             latest=${{ github.ref_name == 'main' || github.ref_name == 'master' }}                                                       
@@ -67,16 +71,16 @@ jobs:
           image: ${{ inputs.cache-registry }}/${{ inputs.image_name }}-cache
           extra-cache-to: image-manifest=true
       - name: Setup Docker buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
       - name: Log into registry ${{ inputs.registry }}
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
         with:
           registry: ${{ inputs.registry }}
           username: ${{ github.actor }}
           password: ${{ secrets.TOKEN }}
       - name: Build and push Docker image
         id: build-and-push
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
         with:
           context: .
           push: true

.github/workflows/lint.yml

@@ -17,7 +17,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
     - name: Verify Action
       run: actionlint -ignore 'unexpected key "description" for "workflow" section' -ignore 'nexpected key "inputs" for "workflow" section.' -ignore 'unexpected key "runs" for "workflow" section.' -ignore '"on" section is missing in workflow' -ignore '"jobs" section is missing in workflow' action.yml
     - name: tag latest after success

action.yml

@@ -29,7 +29,7 @@ runs:
   steps:
       - name: Checkout repository
         if: ${{ inputs.checkout == 'true' }}
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: '0'
       - name: Bump version and push tag
@@ -45,7 +45,7 @@ runs:
           PRERELEASE_SUFFIX: ${{ github.ref_name }}
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
         with:
           flavor: |
             latest=${{ github.ref_name == 'main' || github.ref_name == 'master' }}                                                       
@@ -63,16 +63,16 @@ runs:
           image: ${{ inputs.cache-registry }}/${{ inputs.image_name }}-cache
           extra-cache-to: image-manifest=true
       - name: Setup Docker buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
       - name: Log into registry ${{ inputs.registry }}
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
         with:
           registry: ${{ inputs.registry }}
           username: ${{ github.actor }}
           password: ${{ inputs.token }}
       - name: Build and push Docker image
         id: build-and-push
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
         with:
           context: .
           push: true