fix(ci): avoid docker's pull rate limit

.gitea/workflows/build.yaml

@@ -17,6 +17,8 @@ jobs:
     steps:
       - uses: actions/checkout@v6.0.2
       - uses: docker/setup-qemu-action@v4.0.0
+        with:
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
       - uses: docker/setup-buildx-action@v4.0.0
 
       - name: Build image
@@ -35,6 +37,8 @@ jobs:
     steps:
       - uses: actions/checkout@v6.0.2
       - uses: docker/setup-qemu-action@v4.0.0
+        with:
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
       - uses: docker/setup-buildx-action@v4.0.0
 
       - name: Build image

.gitea/workflows/release.yaml

@@ -11,6 +11,8 @@ jobs:
     steps:
       - uses: actions/checkout@v6.0.2
       - uses: docker/setup-qemu-action@v4.0.0
+        with:
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
       - uses: docker/setup-buildx-action@v4.0.0
 
       - uses: docker/login-action@v4.1.0
@@ -37,6 +39,8 @@ jobs:
     steps:
       - uses: actions/checkout@v6.0.2
       - uses: docker/setup-qemu-action@v4.0.0
+        with:
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
       - uses: docker/setup-buildx-action@v4.0.0
 
       - uses: docker/login-action@v4.1.0
@@ -98,4 +102,4 @@ jobs:
           --src-password ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }} \
           --src-username volker.raschek \
             docker://git.cryptic.systems/volker.raschek/jq:${TAG} \
-            docker://docker.io/volkerraschek/jq:${TAG}
+            docker://docker.io/volkerraschek/jq:${TAG}

Dockerfile

@@ -1,4 +1,4 @@
-FROM docker.io/library/alpine:3.23.3 AS build
+FROM docker.io/library/alpine:3.23.4 AS build
 
 ARG JQ_VERSION