Merge pull request 'Update Github Actions #none minor (main)' (#62) from renovate-main-github-actions into main

.github/workflows/docker-build.yml

@@ -34,9 +34,11 @@ jobs:
     steps:
       - name: Checkout repository
         if: ${{ inputs.checkout == 'true' }}
-        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: '0'
+      - name: Copy Git Credentials
+        run: cat /tmp/git-credentials* >> .git/config
       - name: Bump version and push tag
         id: tag
         if: ${{ inputs.tag == 'true' }}
@@ -62,22 +64,22 @@ jobs:
             # disabled if major zero
             type=semver,pattern={{major}},value=${{steps.tag.outputs.tag}},enable=${{ !startsWith(steps.tag.outputs.tag, 'v0.') }}                                                
           images: ${{ inputs.registry }}/${{ inputs.image_name }}
-      - uses: int128/docker-build-cache-config-action@8e8b3ba8f4b330eb0e3deedf1d7893ecec5824e5 # v1.65.0
+      - uses: int128/docker-build-cache-config-action@97740da6c51c4bcd68c7519e2179e6a93389b027 # v1.71.0
         id: cache
         with:
           image: ${{ inputs.cache-registry }}/${{ inputs.image_name }}-cache
           extra-cache-to: image-manifest=true
       - name: Setup Docker buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+        uses: docker/setup-buildx-action@594f3bf4285d9ea8dc53c9a0c9c4092420091003 # v4.4.0
       - name: Log into registry ${{ inputs.registry }}
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ${{ inputs.registry }}
           username: ${{ github.actor }}
           password: ${{ secrets.TOKEN }}
       - name: Build and push Docker image
         id: build-and-push
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
         with:
           context: .
           push: true

.github/workflows/lint.yml

@@ -17,11 +17,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Verify Action
       run: actionlint -ignore 'unexpected key "description" for "workflow" section' -ignore 'nexpected key "inputs" for "workflow" section.' -ignore 'unexpected key "runs" for "workflow" section.' -ignore '"on" section is missing in workflow' -ignore '"jobs" section is missing in workflow' action.yml
     - name: Verify Workflow
-      run: actionlint -ignore 'label "slim" is unknown' .github/workflows/docker-build.yml
+      run: actionlint -ignore 'label "slim" is unknown' -ignore 'label "test-runner" is unknown' .github/workflows/*.yml
     - name: tag latest after success
       if: github.ref == 'refs/heads/main'
       id: tag

.github/workflows/verify_compose.yml

@@ -0,0 +1,38 @@
+name: VerifyCompose
+
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+on:
+  workflow_call:
+    inputs:
+      ref:  # id of input
+        description: 'ref to tag e.g. refs/heads/main'
+        type: string
+        default: 'refs/heads/main'
+      tagname:  # id of input
+        description: 'tag name (default: latest)'
+        default: 'latest'
+        type: string
+
+
+jobs:
+  build:
+    runs-on: slim
+    permissions:
+      contents: write
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+    - name: Verify Compose File
+      run: docker compose config -q
+    - name: tag latest after success
+      if: ${{ github.ref == inputs.ref }}
+      id: tag
+      run: |
+        git tag -f ${{ inputs.tagname }}
+        git push --tags -f
+      

action.yml

@@ -29,9 +29,11 @@ runs:
   steps:
       - name: Checkout repository
         if: ${{ inputs.checkout == 'true' }}
-        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: '0'
+      - name: Copy Git Credentials
+        run: cat /tmp/git-credentials* >> .git/config
       - name: Bump version and push tag
         id: tag
         if: ${{ inputs.tag == 'true' }}
@@ -45,7 +47,7 @@ runs:
           PRERELEASE_SUFFIX: ${{ github.ref_name }}
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
         with:
           flavor: |
             latest=${{ github.ref_name == 'main' || github.ref_name == 'master' }}                                                       
@@ -57,22 +59,22 @@ runs:
             # disabled if major zero
             type=semver,pattern={{major}},value=${{steps.tag.outputs.tag}},enable=${{ !startsWith(steps.tag.outputs.tag, 'v0.') }}                                                
           images: ${{ inputs.registry }}/${{ inputs.image_name }}
-      - uses: int128/docker-build-cache-config-action@8e8b3ba8f4b330eb0e3deedf1d7893ecec5824e5 # v1.65.0
+      - uses: int128/docker-build-cache-config-action@97740da6c51c4bcd68c7519e2179e6a93389b027 # v1.71.0
         id: cache
         with:
           image: ${{ inputs.cache-registry }}/${{ inputs.image_name }}-cache
           extra-cache-to: image-manifest=true
       - name: Setup Docker buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+        uses: docker/setup-buildx-action@594f3bf4285d9ea8dc53c9a0c9c4092420091003 # v4.4.0
       - name: Log into registry ${{ inputs.registry }}
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ${{ inputs.registry }}
           username: ${{ github.actor }}
           password: ${{ inputs.token }}
       - name: Build and push Docker image
         id: build-and-push
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
         with:
           context: .
           push: true