chore(deps): pin dependencies

chore(deps): update docker/login-action action to v4.4.0
chore(deps): update docker/setup-qemu-action action to v4.2.0
2026-07-03 18:05:01 +00:00 · 2026-07-03 15:04:43 +00:00 · 2026-07-02 21:07:11 +00:00 · 2026-07-02 19:35:56 +00:00 · 2026-07-02 19:31:30 +00:00 · 2026-07-02 18:06:06 +00:00
7 changed files with 66 additions and 24 deletions
@@ -0,0 +1,41 @@
+name: Upload ArtifactHub Metadata
+
+on:
+  schedule:
+    - cron: '0 3 1 * *'
+  workflow_dispatch:
+
+jobs:
+  upload-metadata:
+    name: "Upload artifacthub-repo.yml to OCI registry"
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
+      with:
+        registry: ${{ github.server_url }}
+        username: ${{ github.repository_owner }}
+        password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
+    - uses: oras-project/setup-oras@38de303aac69abb66f3e6255b7198bff35f323e3 # v2.0.0
+      with:
+        version: 1.3.2 # renovate: datasource=github-tags depName=oras-project/oras extractVersion='^v?(?<version>.*)$'
+    - name: Extract meta information
+      run: |
+        echo "GITEA_SERVER_HOSTNAME=$(echo "${GITHUB_SERVER_URL}" | cut -d '/' -f 3)" >> $GITHUB_ENV
+        echo "PACKAGE_VERSION=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
+        echo "REPOSITORY_NAME=$(echo ${GITHUB_REPOSITORY} | cut -d '/' -f 2 | sed --regexp-extended 's/-charts?//g')" >> $GITHUB_ENV
+        echo "REPOSITORY_OWNER=$(echo ${GITHUB_REPOSITORY} | cut -d '/' -f 1)" >> $GITHUB_ENV
+    - name: Push artifacthub-repo.yml
+      run: |
+        oras push ${GITEA_SERVER_HOSTNAME}/${REPOSITORY_OWNER}/${REPOSITORY_NAME}:artifacthub.io \
+          --config /dev/null:application/vnd.cncf.artifacthub.config.v1+yaml \
+          artifacthub-repo.yml:application/vnd.cncf.artifacthub.repository-metadata.layer.v1.yaml
+    - name: Push public cosign key
+      env:
+        COSIGN_PUBLIC_KEY: ${{ vars.COSIGN_PUBLIC_KEY }}
+      run: |
+        echo "${COSIGN_PUBLIC_KEY}" > cosign.pub
+        oras push ${GITEA_SERVER_HOSTNAME}/${REPOSITORY_OWNER}/${REPOSITORY_NAME}:cosign.pub \
+          --artifact-type application/vnd.dev.cosign.public-key.v1 \
+          --annotation org.opencontainers.image.title=cosign.pub \
+          cosign.pub:application/vnd.dev.cosign.public-key.v1
@@ -13,8 +13,8 @@ jobs:
    runs-on: ubuntu-latest-arm64
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
-      - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+      - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
+      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0

      - name: Build image
        run: |
@@ -31,8 +31,8 @@ jobs:
    runs-on: ubuntu-latest-amd64
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
-      - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+      - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
+      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0

      - name: Build image
        run: |
@@ -9,12 +9,12 @@ jobs:
  push-arm64:
    runs-on: ubuntu-latest-arm64
    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

-      - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+      - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
+      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0

-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+      - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
@@ -34,12 +34,12 @@ jobs:
  push-amd64:
    runs-on: ubuntu-latest-amd64
    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

-      - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+      - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
+      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0

-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+      - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
@@ -62,7 +62,7 @@ jobs:
    - push-arm64
    - push-amd64
    steps:
-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+      - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
@@ -32,10 +32,10 @@ jobs:
          fetch-tags: true
          ref: "${{ steps.version_extraction.outputs.version_raw }}"

-      - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+      - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
+      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0

-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+      - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
@@ -73,10 +73,10 @@ jobs:
          fetch-tags: true
          ref: "${{ steps.version_extraction.outputs.version_raw }}"

-      - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+      - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
+      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0

-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+      - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
@@ -112,7 +112,7 @@ jobs:
          echo "version_raw=${VERSION}" >> $GITHUB_OUTPUT
          echo "version_cleaned=${VERSION/v/}" >> $GITHUB_OUTPUT

-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+      - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
@@ -1,6 +1,6 @@
 FROM docker.io/library/ubuntu:26.04 AS download

-ARG DC_VERSION=v5.1.4
+ARG DC_VERSION=v5.3.0

 RUN NAME=docker-compose-$(uname | tr [:upper:] [:lower:])-$(uname -m); \
    apt update --yes && \
@@ -19,10 +19,10 @@ RUN NAME=docker-compose-$(uname | tr [:upper:] [:lower:])-$(uname -m); \

 FROM scratch

-ARG DC_VERSION=v5.1.4
+ARG DC_VERSION=v5.3.0
 ARG BUILD_DATE

-LABEL io.artifacthub.package.readme-url="https://github.com/docker/compose" \
+LABEL io.artifacthub.package.readme-url="https://raw.githubusercontent.com/docker/compose/refs/tags/${DC_VERSION}/README.md" \
      org.opencontainers.image.created="${BUILD_DATE}" \
      org.opencontainers.image.description="Define and run multi-container applications with Docker" \
      org.opencontainers.image.version=${DC_VERSION}
@@ -11,7 +11,7 @@ The workflow or how `docker-compose` can in general be used is documented at
 image.

 ```bash
-IMAGE_VERSION=5.1.4
+IMAGE_VERSION=5.3.0
 docker run \
  --rm \
  --volume "$(pwd):$(pwd)" \
@@ -0,0 +1 @@
+repositoryID: c7576fb6-9bfd-44ad-a7a5-fd80465f0b65
Author	SHA1	Message	Date
CSRBot	1b4f90802f	chore(deps): pin dependencies Build / build-arm64 (pull_request) Successful in 2m4s Details Lint Markdown files / markdown-lint (pull_request) Successful in 14s Details Build / build-amd64 (pull_request) Successful in 59s Details	2026-07-03 18:05:01 +00:00
CSRBot	3288287f6e	chore(deps): update docker/login-action action to v4.4.0 Build / build-arm64 (pull_request) Successful in 2m14s Details Lint Markdown files / markdown-lint (pull_request) Successful in 11s Details Build / build-amd64 (pull_request) Successful in 56s Details Lint Markdown files / markdown-lint (push) Successful in 6s Details Release latest / push-amd64 (push) Successful in 1m2s Details Release latest / push-arm64 (push) Successful in 2m8s Details Release latest / sync-to-hub-docker-io (push) Successful in 39s Details Release latest / push-manifest (push) Successful in 6s Details	2026-07-03 15:04:43 +00:00
CSRBot	405400049d	chore(deps): update docker/setup-qemu-action action to v4.2.0 Build / build-amd64 (pull_request) Successful in 48s Details Lint Markdown files / markdown-lint (pull_request) Successful in 6s Details Build / build-arm64 (pull_request) Successful in 1m41s Details Release latest / push-amd64 (push) Successful in 53s Details Lint Markdown files / markdown-lint (push) Successful in 5s Details Release latest / push-arm64 (push) Successful in 1m50s Details Release latest / push-manifest (push) Successful in 5s Details Release latest / sync-to-hub-docker-io (push) Successful in 37s Details	2026-07-02 21:07:11 +00:00
CSRBot	884596b232	chore(deps): update docker/setup-buildx-action action to v4.2.0 Lint Markdown files / markdown-lint (push) Successful in 5s Details Release latest / push-amd64 (push) Successful in 52s Details Release latest / push-arm64 (push) Successful in 1m55s Details Release latest / push-manifest (push) Successful in 5s Details Release latest / sync-to-hub-docker-io (push) Successful in 18s Details	2026-07-02 19:35:56 +00:00
CSRBot	7535a0e96e	chore(deps): update docker/login-action action to v4.3.0 Lint Markdown files / markdown-lint (push) Successful in 5s Details Release latest / push-amd64 (push) Successful in 51s Details Release latest / push-arm64 (push) Successful in 1m49s Details Release latest / push-manifest (push) Successful in 5s Details Release latest / sync-to-hub-docker-io (push) Successful in 18s Details	2026-07-02 19:31:30 +00:00
CSRBot	1edc59795a	chore(deps): update dependency docker/compose to v5.3.0 Lint Markdown files / markdown-lint (pull_request) Successful in 4s Details Build / build-amd64 (pull_request) Successful in 59s Details Build / build-arm64 (pull_request) Successful in 1m57s Details Auto release tagged / tag_on_change (push) Successful in 6s Details Lint Markdown files / markdown-lint (push) Successful in 5s Details Release latest / push-amd64 (push) Successful in 52s Details Update Docker Hub Description / update-description-on-hub-docker-io (push) Successful in 6s Details Release latest / push-arm64 (push) Successful in 2m0s Details Release latest / push-manifest (push) Successful in 5s Details Release latest / sync-to-hub-docker-io (push) Successful in 36s Details	2026-07-02 18:06:06 +00:00
CSRBot	e4092a72ef	chore(deps): update dependency docker/compose to v5.2.0 Build / build-amd64 (pull_request) Successful in 52s Details Lint Markdown files / markdown-lint (pull_request) Successful in 6s Details Build / build-arm64 (pull_request) Successful in 1m33s Details Auto release tagged / tag_on_change (push) Successful in 8s Details Lint Markdown files / markdown-lint (push) Successful in 10s Details Release latest / push-amd64 (push) Successful in 59s Details Update Docker Hub Description / update-description-on-hub-docker-io (push) Successful in 7s Details Release latest / sync-to-hub-docker-io (push) Successful in 56s Details Release latest / push-arm64 (push) Successful in 1m54s Details Release latest / push-manifest (push) Successful in 6s Details	2026-06-23 15:04:05 +00:00
CSRBot	a11f19bde1	chore(deps): update actions/checkout action to v6.0.3 Lint Markdown files / markdown-lint (pull_request) Successful in 5s Details Build / build-amd64 (pull_request) Successful in 1m1s Details Build / build-arm64 (pull_request) Successful in 1m47s Details Lint Markdown files / markdown-lint (push) Successful in 5s Details Release latest / push-amd64 (push) Successful in 57s Details Release latest / push-arm64 (push) Successful in 1m56s Details Release latest / push-manifest (push) Successful in 5s Details Release latest / sync-to-hub-docker-io (push) Successful in 45s Details	2026-06-07 18:06:02 +00:00
volker.raschek	77d7368753	chore(artifacthub): update repository id Lint Markdown files / markdown-lint (push) Successful in 4s Details Release latest / push-amd64 (push) Successful in 1m13s Details Release latest / push-arm64 (push) Successful in 2m3s Details Release latest / push-manifest (push) Successful in 5s Details Release latest / sync-to-hub-docker-io (push) Successful in 33s Details	2026-06-07 18:07:08 +02:00
volker.raschek	01db5f2086	fix(ci): add upload workflow to upload metadata for artifacthub Lint Markdown files / markdown-lint (push) Successful in 9s Details Release latest / push-amd64 (push) Successful in 59s Details Release latest / push-arm64 (push) Successful in 1m56s Details Release latest / push-manifest (push) Successful in 5s Details Release latest / sync-to-hub-docker-io (push) Successful in 51s Details	2026-06-07 18:06:19 +02:00
volker.raschek	7646fdb91f	fix(Dockerfile): adapt README URL Lint Markdown files / markdown-lint (push) Successful in 5s Details Auto release tagged / tag_on_change (push) Successful in 24s Details Release latest / push-amd64 (push) Successful in 1m3s Details Release latest / push-arm64 (push) Successful in 2m1s Details Release latest / push-manifest (push) Successful in 6s Details Release latest / sync-to-hub-docker-io (push) Successful in 46s Details	2026-06-07 17:54:56 +02:00
				`@@ -0,0 +1 @@`
				`repositoryID: c7576fb6-9bfd-44ad-a7a5-fd80465f0b65`