Merge pull request 'chore(deps): update docker/login-action action to v4.7.0' (#118) from renovate/docker-login-action-4.x into master

The workflows pulled tonistiigi/binfmt through an unauthenticated request, either directly from docker.io or from
harbor.cryptic.systems before any credentials had been configured. Both variants are subject to upstream rate limiting
and made the multi arch builds fail sporadically.

The docker/login-action steps are now placed in front of docker/setup-qemu-action and docker/setup-buildx-action, and a
second login against harbor.cryptic.systems was added so that the binfmt image is always pulled from the internal
registry with valid credentials. Leftover setup-qemu-action and setup-buildx-action steps from the previous ordering
were removed.

All pinned actions were additionally bumped to their latest upstream release to remove the version drift between the
repositories.

.drone.yml

@@ -1,627 +0,0 @@
----
-kind: pipeline
-type: kubernetes
-name: linter
-
-platform:
-  os: linux
-
-steps:
-- name: markdown lint
-  commands:
-  - markdownlint *.md
-  image: docker.io/volkerraschek/markdownlint:0.33.0
-  resources:
-    limits:
-      cpu: 150
-      memory: 150M
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  resources:
-    limits:
-      cpu: 150
-      memory: 150M
-  when:
-    status:
-    - changed
-    - failure
-
-trigger:
-  event:
-    exclude:
-    - tag
-
----
-kind: pipeline
-type: docker
-name: dry-run-amd64
-
-platform:
-  os: linux
-  arch: amd64
-
-steps:
-- name: build
-  image: docker.io/plugins/docker:latest
-  settings:
-    auto_tag: false
-    dry_run: true
-    force_tag: true
-    no_cache: true
-    purge: true
-    tags: latest-amd64
-    repo: volkerraschek/jq
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  when:
-    status:
-    - changed
-    - failure
-
-depends_on:
-- linter
-
-trigger:
-  branch:
-    exclude:
-    - master
-  event:
-  - pull_request
-  - push
-  repo:
-  - volker.raschek/jq-docker
-
----
-kind: pipeline
-type: docker
-name: dry-run-arm-v7
-
-platform:
-  os: linux
-  arch: arm
-
-steps:
-- name: build
-  image: docker.io/plugins/docker:latest
-  settings:
-    auto_tag: false
-    dry_run: true
-    force_tag: true
-    no_cache: true
-    purge: true
-    tags: latest-arm-v7
-    repo: volkerraschek/jq
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  when:
-    status:
-    - changed
-    - failure
-
-depends_on:
-- linter
-
-trigger:
-  branch:
-    exclude:
-    - master
-  event:
-  - pull_request
-  - push
-  repo:
-  - volker.raschek/jq-docker
-
----
-kind: pipeline
-type: docker
-name: dry-run-arm64-v8
-
-platform:
-  os: linux
-  arch: arm64
-
-steps:
-- name: build
-  image: docker.io/plugins/docker:latest
-  settings:
-    auto_tag: false
-    dry_run: true
-    force_tag: true
-    no_cache: true
-    purge: true
-    tags: latest-arm64-v8
-    repo: volkerraschek/jq
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  when:
-    status:
-    - changed
-    - failure
-
-depends_on:
-- linter
-
-trigger:
-  branch:
-    exclude:
-    - master
-  event:
-  - pull_request
-  - push
-  repo:
-  - volker.raschek/jq-docker
-
----
-kind: pipeline
-type: docker
-name: latest-amd64
-
-platform:
-  os: linux
-  arch: amd64
-
-steps:
-- name: build
-  image: docker.io/plugins/docker:latest
-  settings:
-    auto_tag: false
-    force_tag: true
-    no_cache: true
-    purge: true
-    tags: latest-amd64
-    repo: volkerraschek/jq
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  when:
-    status:
-    - changed
-    - failure
-
-depends_on:
-- linter
-
-trigger:
-  branch:
-  - master
-  event:
-  - cron
-  - push
-  repo:
-  - volker.raschek/jq-docker
-
----
-kind: pipeline
-type: docker
-name: latest-arm-v7
-
-platform:
-  os: linux
-  arch: arm
-
-steps:
-- name: build
-  image: docker.io/plugins/docker:latest
-  settings:
-    auto_tag: false
-    force_tag: true
-    no_cache: true
-    purge: true
-    tags: latest-arm-v7
-    repo: volkerraschek/jq
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  when:
-    status:
-    - changed
-    - failure
-
-depends_on:
-- linter
-
-trigger:
-  branch:
-  - master
-  event:
-  - cron
-  - push
-  repo:
-  - volker.raschek/jq-docker
-
----
-kind: pipeline
-type: docker
-name: latest-arm64-v8
-
-platform:
-  os: linux
-  arch: arm64
-
-steps:
-- name: build
-  image: docker.io/plugins/docker:latest
-  settings:
-    auto_tag: false
-    force_tag: true
-    no_cache: true
-    purge: true
-    tags: latest-arm64-v8
-    repo: volkerraschek/jq
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  when:
-    status:
-    - changed
-    - failure
-
-depends_on:
-- linter
-
-trigger:
-  branch:
-  - master
-  event:
-  - cron
-  - push
-  repo:
-  - volker.raschek/jq-docker
-
----
-kind: pipeline
-type: kubernetes
-name: latest-manifest
-
-steps:
-- name: build-manifest
-  image: docker.io/plugins/manifest:latest
-  settings:
-    auto_tag: false
-    ignore_missing: true
-    spec: manifest.tmpl
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  resources:
-    limits:
-      cpu: 150
-      memory: 150M
-  when:
-    status:
-    - changed
-    - failure
-
-depends_on:
-- latest-amd64
-- latest-arm-v7
-- latest-arm64-v8
-
-trigger:
-  branch:
-  - master
-  event:
-  - cron
-  - push
-  repo:
-  - volker.raschek/jq-docker
-
----
-kind: pipeline
-type: docker
-name: tagged-amd64
-
-platform:
-  os: linux
-  arch: amd64
-
-steps:
-- name: build
-  image: docker.io/plugins/docker:latest
-  settings:
-    auto_tag: true
-    auto_tag_suffix: amd64
-    force_tag: true
-    no_cache: true
-    purge: true
-    repo: volkerraschek/jq
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-    build_args:
-    - JQ_VERSION=${DRONE_TAG}
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  when:
-    status:
-    - changed
-    - failure
-
-trigger:
-  event:
-  - tag
-  repo:
-  - volker.raschek/jq-docker
-
----
-kind: pipeline
-type: docker
-name: tagged-arm-v7
-
-platform:
-  os: linux
-  arch: arm
-
-steps:
-- name: build
-  image: docker.io/plugins/docker:latest
-  settings:
-    auto_tag: true
-    auto_tag_suffix: arm-v7
-    force_tag: true
-    no_cache: true
-    purge: true
-    repo: volkerraschek/jq
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-    build_args:
-    - JQ_VERSION=${DRONE_TAG}
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  when:
-    status:
-    - changed
-    - failure
-
-trigger:
-  event:
-  - tag
-  repo:
-  - volker.raschek/jq-docker
-
----
-kind: pipeline
-type: docker
-name: tagged-arm64-v8
-
-platform:
-  os: linux
-  arch: arm64
-
-steps:
-- name: build
-  image: docker.io/plugins/docker:latest
-  settings:
-    auto_tag: true
-    auto_tag_suffix: arm64-v8
-    force_tag: true
-    no_cache: true
-    purge: true
-    repo: volkerraschek/jq
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-    build_args:
-    - JQ_VERSION=${DRONE_TAG}
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  when:
-    status:
-    - changed
-    - failure
-
-trigger:
-  event:
-  - tag
-  repo:
-  - volker.raschek/jq-docker
-
----
-kind: pipeline
-type: kubernetes
-name: tagged-manifest
-
-steps:
-- name: build-manifest
-  image: docker.io/plugins/manifest:latest
-  settings:
-    auto_tag: true
-    ignore_missing: true
-    spec: manifest.tmpl
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  resources:
-    limits:
-      cpu: 150
-      memory: 150M
-  when:
-    status:
-    - changed
-    - failure
-
-depends_on:
-- tagged-amd64
-- tagged-arm-v7
-- tagged-arm64-v8
-
-trigger:
-  event:
-  - tag
-  repo:
-  - volker.raschek/jq-docker

.gitea/workflows/build.yaml

@@ -0,0 +1,68 @@
+name: Build
+
+on:
+  pull_request:
+    types:
+    - opened
+    - reopened
+    - synchronize
+  push:
+    branches:
+    - master
+  workflow_dispatch: {}
+
+jobs:
+  build-arm64:
+    runs-on: ubuntu-latest-arm64
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
+        with:
+          registry: harbor.cryptic.systems
+          username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
+          password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}
+
+      - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
+        with:
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
+
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
+
+      - name: Build image
+        run: |
+          TAG=latest
+
+          docker buildx build \
+            --platform linux/arm64 \
+            --file Dockerfile \
+            --provenance false \
+            --tag git.cryptic.systems/volker.raschek/jq:${TAG}-arm64 \
+            .
+
+  build-amd64:
+    runs-on: ubuntu-latest-amd64
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
+        with:
+          registry: harbor.cryptic.systems
+          username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
+          password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}
+
+      - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
+        with:
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
+
+      - name: Build image
+        run: |
+          TAG=latest
+
+          docker buildx build \
+            --platform linux/amd64 \
+            --file Dockerfile \
+            --provenance false \
+            --tag git.cryptic.systems/volker.raschek/jq:${TAG}-amd64 \
+            .

.gitea/workflows/markdown-linters.yaml

@@ -0,0 +1,22 @@
+name: 'Lint Markdown files'
+
+on:
+  pull_request:
+    types:
+    - opened
+    - reopened
+    - synchronize
+  push:
+    branches:
+    - master
+  workflow_dispatch: {}
+
+jobs:
+  markdown-lint:
+    runs-on:
+    - ubuntu-latest
+    steps:
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+    - uses: DavidAnson/markdownlint-cli2-action@21c1be1b93ad9ed58fa840aacc3f279cde2a72ff # v24.2.0
+      with:
+        globs: '**/*.md'

.gitea/workflows/release.yaml

@@ -0,0 +1,121 @@
+name: Release
+
+on:
+  push:
+    tags:
+    - "**"
+
+jobs:
+  push-arm64:
+    runs-on: ubuntu-latest-arm64
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
+        with:
+          registry: git.cryptic.systems
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
+
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
+        with:
+          registry: harbor.cryptic.systems
+          username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
+          password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}
+
+      - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
+        with:
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
+
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
+
+      - name: Build and push image
+        run: |
+          TAG=$(echo ${{ github.ref_name }} | sed 's/v//gm')
+
+          docker buildx build \
+            --build-arg JQ_VERSION=${{ github.ref_name }} \
+            --file Dockerfile \
+            --platform linux/arm64 \
+            --provenance false \
+            --push \
+            --tag git.cryptic.systems/volker.raschek/jq:${TAG}-arm64 \
+            .
+
+  push-amd64:
+    runs-on: ubuntu-latest-amd64
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
+        with:
+          registry: git.cryptic.systems
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
+
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
+        with:
+          registry: harbor.cryptic.systems
+          username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
+          password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}
+
+      - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
+        with:
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
+
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
+
+      - name: Build and push image
+        run: |
+          TAG=$(echo ${{ github.ref_name }} | sed 's/v//gm')
+
+          docker buildx build \
+            --build-arg JQ_VERSION=${{ github.ref_name }} \
+            --file Dockerfile \
+            --platform linux/amd64 \
+            --provenance false \
+            --push \
+            --tag git.cryptic.systems/volker.raschek/jq:${TAG}-amd64 \
+            .
+
+  push-manifest:
+    runs-on: ubuntu-latest
+    needs:
+    - push-arm64
+    - push-amd64
+    steps:
+      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
+        with:
+          registry: git.cryptic.systems
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
+
+      - name: Create and push manifest
+        run: |
+          TAG=$(echo ${{ github.ref_name }} | sed 's/v//gm')
+
+          docker manifest create git.cryptic.systems/volker.raschek/jq:${TAG} \
+            --amend git.cryptic.systems/volker.raschek/jq:${TAG}-amd64 \
+            --amend git.cryptic.systems/volker.raschek/jq:${TAG}-arm64
+
+          docker manifest push git.cryptic.systems/volker.raschek/jq:${TAG}
+
+  sync-to-hub-docker-io:
+    needs:
+    - push-manifest
+    runs-on: ubuntu-latest
+    steps:
+    - name: Copy images to docker.io
+      run: |
+        TAG=$(echo ${{ github.ref_name }} | sed 's/v//gm')
+
+        apt-get update --yes
+        apt-get install --yes skopeo
+        skopeo copy \
+          --all \
+          --dest-password ${{ secrets.DOCKER_IO_PASSWORD }} \
+          --dest-username ${{ secrets.DOCKER_IO_USERNAME }} \
+          --src-password ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }} \
+          --src-username volker.raschek \
+            docker://git.cryptic.systems/volker.raschek/jq:${TAG} \
+            docker://docker.io/volkerraschek/jq:${TAG}

.gitea/workflows/update-docker-hub-description.yaml

@@ -0,0 +1,22 @@
+name: Update Docker Hub Description
+
+on:
+  push:
+    branches:
+    - master
+    paths:
+    - README.md
+  workflow_dispatch: {}
+
+jobs:
+  update-description-on-hub-docker-io:
+    runs-on:
+    - ubuntu-latest
+    steps:
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+    - uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0
+      with:
+        username: ${{ secrets.DOCKER_IO_USERNAME }}
+        password: ${{ secrets.DOCKER_IO_PASSWORD }}
+        repository: volkerraschek/jq
+        readme-filepath: README.md

.markdownlint.yaml

@@ -45,19 +45,17 @@ MD012:
 # MD013/line-length - Line length
 MD013:
   # Number of characters
-  line_length: 80
+  line_length: 120
   # Number of characters for headings
-  heading_line_length: 80
+  heading_line_length: 120
   # Number of characters for code blocks
-  code_block_line_length: 80
+  code_block_line_length: 120
   # Include code blocks
   code_blocks: false
   # Include tables
   tables: false
   # Include headings
   headings: true
-  # Include headings
-  headers: true
   # Strict length checking
   strict: false
   # Stern length checking
@@ -70,11 +68,6 @@ MD022:
   # Blank lines below heading
   lines_below: 1
 
-# MD024/no-duplicate-heading/no-duplicate-header - Multiple headings with the same content
-MD024:
-  # Only check sibling headings
-  allow_different_nesting: true
-
 # MD025/single-title/single-h1 - Multiple top-level headings in the same document
 MD025:
   # Heading level

Dockerfile

@@ -1,4 +1,4 @@
-FROM docker.io/library/alpine:3.17.2 AS build
+FROM docker.io/library/alpine:3.24.3 AS build
 
 ARG JQ_VERSION
 

Makefile

@@ -1,5 +1,5 @@
 # JQ_VERSION
-# Only required to install a specifiy version
+# Only required to install a specify version
 JQ_VERSION?=1.6 # renovate: datasource=github-releases depName=stedolan/jq
 
 # CONTAINER_RUNTIME
@@ -9,14 +9,13 @@ CONTAINER_RUNTIME?=$(shell which podman)
 
 # JQ_IMAGE_REGISTRY_NAME
 # Defines the name of the new container to be built using several variables.
-JQ_IMAGE_REGISTRY_NAME:=docker.io
+JQ_IMAGE_REGISTRY_NAME?=git.cryptic.systems
-JQ_IMAGE_REGISTRY_USER:=volkerraschek
+JQ_IMAGE_REGISTRY_USER?=volker.raschek
 
 JQ_IMAGE_NAMESPACE?=${JQ_IMAGE_REGISTRY_USER}
 JQ_IMAGE_NAME:=jq
 JQ_IMAGE_VERSION?=latest
 JQ_IMAGE_FULLY_QUALIFIED=${JQ_IMAGE_REGISTRY_NAME}/${JQ_IMAGE_NAMESPACE}/${JQ_IMAGE_NAME}:${JQ_IMAGE_VERSION}
-JQ_IMAGE_UNQUALIFIED=${JQ_IMAGE_NAMESPACE}/${JQ_IMAGE_NAME}:${JQ_IMAGE_VERSION}
 
 # BUILD CONTAINER IMAGE
 # ==============================================================================
@@ -28,15 +27,13 @@ container-image/build:
 		--no-cache \
 		--pull \
 		--tag ${JQ_IMAGE_FULLY_QUALIFIED} \
-		--tag ${JQ_IMAGE_UNQUALIFIED} \
 		.
 
 # DELETE CONTAINER IMAGE
 # ==============================================================================
 PHONY:=container-image/delete
 container-image/delete:
-	- ${CONTAINER_RUNTIME} image rm ${JQ_IMAGE_FULLY_QUALIFIED} ${JQ_IMAGE_UNQUALIFIED}
+	- ${CONTAINER_RUNTIME} image rm ${JQ_IMAGE_FULLY_QUALIFIED}
-	- ${CONTAINER_RUNTIME} image rm ${BASE_IMAGE_FULL}
 
 # PUSH CONTAINER IMAGE
 # ==============================================================================

README.md

@@ -1,12 +1,24 @@
-# jq-docker
+# jq
 
-[![Build Status](https://drone.cryptic.systems/api/badges/volker.raschek/jq-docker/status.svg)](https://drone.cryptic.systems/volker.raschek/jq-docker)
 [![Docker Pulls](https://img.shields.io/docker/pulls/volkerraschek/jq)](https://hub.docker.com/r/volkerraschek/jq)
 
-This project contains all sources to build the container image
+This project contains all sources to build the container image `git.cryptic.systems/volker.raschek/jq`. The primary goal
-`docker.io/volkerraschek/jq`. The primary goal of this project is to package the
+of this project is to package the binary `jq` as container image. The source code of the binary can be found in the
-binary `jq` as container image. The source code of the binary can be found in
+upstream project of [adrienverge](https://github.com/adrienverge/jq).
-the upstream project of [adrienverge](https://github.com/adrienverge/jq).
 
-The workflow or how `jq` can in general be used is documented
+A documentation or how to use `jq` is available on [readthedocs.io](https://jq.readthedocs.io/en/stable/). An example
-[here](https://jq.readthedocs.io/en/stable/).
+how to use this image and read a JSON file from stdin is documented below. Pleas adapt the path of the JSON file.
+
+```bash
+# read file (stdin)
+docker run \
+  --interactive \
+  --rm \
+    git.cryptic.systems/volker.raschek/jq:latest < /etc/docker/daemon.json
+
+# cat (stdin)
+cat /etc/docker/daemon.json | docker run \
+  --interactive \
+  --rm \
+    git.cryptic.systems/volker.raschek/jq:latest
+```

manifest.tmpl

@@ -1,26 +0,0 @@
-image: volkerraschek/jq:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}
-{{#if build.tags}}
-tags:
-{{#each build.tags}}
-  - {{this}}
-{{/each}}
-  - "latest"
-{{/if}}
-manifests:
-  -
-    image: volkerraschek/jq:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-amd64
-    platform:
-      architecture: amd64
-      os: linux
-  -
-    image: volkerraschek/jq:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-arm-v7
-    platform:
-      architecture: arm
-      os: linux
-      variant: v7
-  -
-    image: volkerraschek/jq:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-arm64-v8
-    platform:
-      architecture: arm64
-      os: linux
-      variant: v8

renovate.json

@@ -1,34 +1,16 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "assignees": [ "volker.raschek" ],
+  "extends": [
-  "automergeStrategy": "merge-commit",
+    "local>volker.raschek/renovate-config:default#master",
-  "automergeType": "pr",
+    "local>volker.raschek/renovate-config:container#master",
-  "labels": [ "renovate" ],
+    "local>volker.raschek/renovate-config:actions#master",
+    "local>volker.raschek/renovate-config:regexp#master"
+  ],
   "packageRules": [
     {
-      "addLabels": [ "renovate/droneci", "renovate/automerge" ],
-      "automerge": true,
-      "matchManagers": "droneci",
-      "matchUpdateTypes": [ "minor", "patch"]
-    },
-    {
-      "addLabels": [ "renovate/jq", "renovate/automerge" ],
       "automerge": false,
       "matchPackageNames": [ "jq" ],
       "matchManagers": [ "regex" ]
     }
-  ],
-  "rebaseLabel": "renovate/rebase",
-  "rebaseWhen": "behind-base-branch",
-  "regexManagers": [
-    {
-      "description": "Update version",
-      "fileMatch": [
-        "^Makefile$"
-      ],
-      "matchStrings": [
-        "JQ_VERSION\\?=(?<currentValue>.*) # renovate: datasource=(?<datasource>.*) depName=(?<depName>.*)( lookupName=(?<lookupName>.*))?( versioning=(?<versioning>.*))?"
-      ]
-    }
   ]
 }