chore(deps): pin dependencies

chore(deps): update actions/checkout action to v6.0.3
chore(artifacthub): update repository id
2026-06-07 21:03:51 +00:00 · 2026-06-07 18:06:02 +00:00 · 2026-06-07 18:07:08 +02:00 · 2026-06-07 18:06:19 +02:00 · 2026-06-07 17:54:56 +02:00 · 2026-06-05 12:50:15 +00:00
9 changed files with 71 additions and 29 deletions
@@ -0,0 +1,41 @@
+name: Upload ArtifactHub Metadata
+
+on:
+  schedule:
+    - cron: '0 3 1 * *'
+  workflow_dispatch:
+
+jobs:
+  upload-metadata:
+    name: "Upload artifacthub-repo.yml to OCI registry"
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+      with:
+        registry: ${{ github.server_url }}
+        username: ${{ github.repository_owner }}
+        password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
+    - uses: oras-project/setup-oras@38de303aac69abb66f3e6255b7198bff35f323e3 # v2.0.0
+      with:
+        version: 1.3.2 # renovate: datasource=github-tags depName=oras-project/oras extractVersion='^v?(?<version>.*)$'
+    - name: Extract meta information
+      run: |
+        echo "GITEA_SERVER_HOSTNAME=$(echo "${GITHUB_SERVER_URL}" | cut -d '/' -f 3)" >> $GITHUB_ENV
+        echo "PACKAGE_VERSION=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
+        echo "REPOSITORY_NAME=$(echo ${GITHUB_REPOSITORY} | cut -d '/' -f 2 | sed --regexp-extended 's/-charts?//g')" >> $GITHUB_ENV
+        echo "REPOSITORY_OWNER=$(echo ${GITHUB_REPOSITORY} | cut -d '/' -f 1)" >> $GITHUB_ENV
+    - name: Push artifacthub-repo.yml
+      run: |
+        oras push ${GITEA_SERVER_HOSTNAME}/${REPOSITORY_OWNER}/${REPOSITORY_NAME}:artifacthub.io \
+          --config /dev/null:application/vnd.cncf.artifacthub.config.v1+yaml \
+          artifacthub-repo.yml:application/vnd.cncf.artifacthub.repository-metadata.layer.v1.yaml
+    - name: Push public cosign key
+      env:
+        COSIGN_PUBLIC_KEY: ${{ vars.COSIGN_PUBLIC_KEY }}
+      run: |
+        echo "${COSIGN_PUBLIC_KEY}" > cosign.pub
+        oras push ${GITEA_SERVER_HOSTNAME}/${REPOSITORY_OWNER}/${REPOSITORY_NAME}:cosign.pub \
+          --artifact-type application/vnd.dev.cosign.public-key.v1 \
+          --annotation org.opencontainers.image.title=cosign.pub \
+          cosign.pub:application/vnd.dev.cosign.public-key.v1
@@ -18,7 +18,7 @@ jobs:

    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          fetch-depth: 0

@@ -55,7 +55,7 @@ jobs:

      - name: Trigger "Push tagged images" workflow
        if: steps.check_change.outputs.changed == 'true'
-        uses: actions/github-script@v9.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
        with:
          script: |
            const workflowFileName = 'release-tagged.yaml';
@@ -12,9 +12,9 @@ jobs:
  build-arm64:
    runs-on: ubuntu-latest-arm64
    steps:
-      - uses: actions/checkout@v6.0.3
-      - uses: docker/setup-qemu-action@v4.1.0
-      - uses: docker/setup-buildx-action@v4.1.0
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0

      - name: Build image
        run: |
@@ -30,9 +30,9 @@ jobs:
  build-amd64:
    runs-on: ubuntu-latest-amd64
    steps:
-      - uses: actions/checkout@v6.0.3
-      - uses: docker/setup-qemu-action@v4.1.0
-      - uses: docker/setup-buildx-action@v4.1.0
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0

      - name: Build image
        run: |
@@ -15,7 +15,7 @@ jobs:
  markdown-lint:
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v6.0.3
-    - uses: DavidAnson/markdownlint-cli2-action@v23.2.0
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: DavidAnson/markdownlint-cli2-action@ded1f9488f68a970bc66ea5619e13e9b52e601cd # v23.2.0
      with:
        globs: '**/*.md'
@@ -11,10 +11,10 @@ jobs:
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

-      - uses: docker/setup-qemu-action@v4.1.0
-      - uses: docker/setup-buildx-action@v4.1.0
+      - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0

-      - uses: docker/login-action@v4.2.0
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
@@ -36,10 +36,10 @@ jobs:
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

-      - uses: docker/setup-qemu-action@v4.1.0
-      - uses: docker/setup-buildx-action@v4.1.0
+      - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0

-      - uses: docker/login-action@v4.2.0
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
@@ -62,7 +62,7 @@ jobs:
    - push-arm64
    - push-amd64
    steps:
-      - uses: docker/login-action@v4.2.0
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
@@ -27,15 +27,15 @@ jobs:
          echo "version_raw=${VERSION}" >> $GITHUB_OUTPUT
          echo "version_cleaned=${VERSION/v/}" >> $GITHUB_OUTPUT

-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          fetch-tags: true
          ref: "${{ steps.version_extraction.outputs.version_raw }}"

-      - uses: docker/setup-qemu-action@v4.1.0
-      - uses: docker/setup-buildx-action@v4.1.0
+      - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0

-      - uses: docker/login-action@v4.2.0
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
@@ -68,15 +68,15 @@ jobs:
          echo "version_raw=${VERSION}" >> $GITHUB_OUTPUT
          echo "version_cleaned=${VERSION/v/}" >> $GITHUB_OUTPUT

-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          fetch-tags: true
          ref: "${{ steps.version_extraction.outputs.version_raw }}"

-      - uses: docker/setup-qemu-action@v4.1.0
-      - uses: docker/setup-buildx-action@v4.1.0
+      - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0

-      - uses: docker/login-action@v4.2.0
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
@@ -112,7 +112,7 @@ jobs:
          echo "version_raw=${VERSION}" >> $GITHUB_OUTPUT
          echo "version_cleaned=${VERSION/v/}" >> $GITHUB_OUTPUT

-      - uses: docker/login-action@v4.2.0
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
@@ -12,8 +12,8 @@ jobs:
  update-description-on-hub-docker-io:
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v6.0.3
-    - uses: peter-evans/dockerhub-description@v5.0.0
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0
      with:
        username: ${{ secrets.DOCKER_IO_USERNAME }}
        password: ${{ secrets.DOCKER_IO_PASSWORD }}
@@ -22,7 +22,7 @@ FROM scratch
 ARG DC_VERSION=v5.1.4
 ARG BUILD_DATE

-LABEL io.artifacthub.package.readme-url="https://github.com/docker/compose" \
+LABEL io.artifacthub.package.readme-url="https://raw.githubusercontent.com/docker/compose/refs/tags/${DC_VERSION}/README.md" \
      org.opencontainers.image.created="${BUILD_DATE}" \
      org.opencontainers.image.description="Define and run multi-container applications with Docker" \
      org.opencontainers.image.version=${DC_VERSION}
@@ -0,0 +1 @@
+repositoryID: c7576fb6-9bfd-44ad-a7a5-fd80465f0b65
Author	SHA1	Message	Date
CSRBot	d7767f4450	chore(deps): pin dependencies Build / build-amd64 (pull_request) Successful in 51s Details Lint Markdown files / markdown-lint (pull_request) Successful in 6s Details Build / build-arm64 (pull_request) Successful in 1m39s Details	2026-06-07 21:03:51 +00:00
CSRBot	a11f19bde1	chore(deps): update actions/checkout action to v6.0.3 Lint Markdown files / markdown-lint (pull_request) Successful in 5s Details Build / build-amd64 (pull_request) Successful in 1m1s Details Build / build-arm64 (pull_request) Successful in 1m47s Details Lint Markdown files / markdown-lint (push) Successful in 5s Details Release latest / push-amd64 (push) Successful in 57s Details Release latest / push-arm64 (push) Successful in 1m56s Details Release latest / push-manifest (push) Successful in 5s Details Release latest / sync-to-hub-docker-io (push) Successful in 45s Details	2026-06-07 18:06:02 +00:00
volker.raschek	77d7368753	chore(artifacthub): update repository id Lint Markdown files / markdown-lint (push) Successful in 4s Details Release latest / push-amd64 (push) Successful in 1m13s Details Release latest / push-arm64 (push) Successful in 2m3s Details Release latest / push-manifest (push) Successful in 5s Details Release latest / sync-to-hub-docker-io (push) Successful in 33s Details	2026-06-07 18:07:08 +02:00
volker.raschek	01db5f2086	fix(ci): add upload workflow to upload metadata for artifacthub Lint Markdown files / markdown-lint (push) Successful in 9s Details Release latest / push-amd64 (push) Successful in 59s Details Release latest / push-arm64 (push) Successful in 1m56s Details Release latest / push-manifest (push) Successful in 5s Details Release latest / sync-to-hub-docker-io (push) Successful in 51s Details	2026-06-07 18:06:19 +02:00
volker.raschek	7646fdb91f	fix(Dockerfile): adapt README URL Lint Markdown files / markdown-lint (push) Successful in 5s Details Auto release tagged / tag_on_change (push) Successful in 24s Details Release latest / push-amd64 (push) Successful in 1m3s Details Release latest / push-arm64 (push) Successful in 2m1s Details Release latest / push-manifest (push) Successful in 6s Details Release latest / sync-to-hub-docker-io (push) Successful in 46s Details	2026-06-07 17:54:56 +02:00
CSRBot	feaf09a116	chore(deps): pin dependencies Build / build-amd64 (pull_request) Successful in 47s Details Lint Markdown files / markdown-lint (pull_request) Successful in 6s Details Build / build-arm64 (pull_request) Successful in 1m31s Details Lint Markdown files / markdown-lint (push) Successful in 5s Details Release latest / push-amd64 (push) Successful in 1m7s Details Release latest / push-arm64 (push) Successful in 2m31s Details Release latest / push-manifest (push) Successful in 5s Details Release latest / sync-to-hub-docker-io (push) Successful in 42s Details	2026-06-05 12:50:15 +00:00
				`@@ -0,0 +1 @@`
				`repositoryID: c7576fb6-9bfd-44ad-a7a5-fd80465f0b65`