Merge branch 'main' into symfony

Author: williamdes

.github/workflows/build.yml

@@ -11,7 +11,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Checkout repository
-              uses: actions/checkout@v4
+              uses: actions/checkout@v6
             - name: Build image
               run: make docker-build
             - name: Test image
@@ -39,7 +39,7 @@ jobs:
                     #- { platform: "linux/mips64", platform-tag: "mips64" }
         steps:
             - name: Checkout repository
-              uses: actions/checkout@v4
+              uses: actions/checkout@v6
             # https://github.com/docker/setup-qemu-action
             - name: Set up QEMU
               uses: docker/setup-qemu-action@v3

.github/workflows/publish.yml

@@ -40,7 +40,7 @@ jobs:
           #- { platform: "linux/mips64", internal-tag: "mips64" }
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       # https://github.com/docker/setup-qemu-action
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
@@ -83,7 +83,7 @@ jobs:
           - { docker-hub-tag: "build-version-tag-name" }
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Get the version
         run: echo "BUILD_VERSION=$(make version)" >> $GITHUB_ENV
       - name: Login to DockerHub
@@ -111,6 +111,17 @@ jobs:
       - name: Inspect the manifest
         run: docker manifest inspect ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}
 
+      - name: Sign the manifest
+        uses: sudo-bot/action-docker-sign@latest
+        with:
+          image-ref: "${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}"
+          private-key-id: "${{ vars.DOCKER_PRIVATE_KEY_ID }}"
+          private-key-name: "${{ vars.DOCKER_PRIVATE_KEY_NAME }}"
+          private-key: ${{ secrets.DOCKER_PRIVATE_KEY }}
+          private-key-passphrase: ${{ secrets.DOCKER_PRIVATE_KEY_PASSPHRASE }}
+          sign-manifest: true
+          notary-auth: "${{ secrets.DOCKER_REPOSITORY_LOGIN }}:${{ secrets.DOCKER_REPOSITORY_PASSWORD }}"
+
   tags-cleanup:
     environment:
       name: Docker Hub

docker/Dockerfile

@@ -1,4 +1,4 @@
-FROM ruby:3-alpine3.21 AS builder
+FROM ruby:3-alpine3.23 AS builder
 
 COPY Gemfile ./
 
@@ -9,7 +9,7 @@ RUN apk add --update --no-cache make ruby-dev gcc musl-dev && \
     apk del gcc make musl-dev ruby-dev && \
     rm -rf /usr/local/bundle/cache /root/.bundle
 
-FROM ruby:3-alpine3.21
+FROM ruby:3-alpine3.23
 
 # Metadata params
 ARG VCS_REF

docker/Gemfile

@@ -1,6 +1,6 @@
 source 'https://rubygems.org'
 
-gem 'capistrano', '3.19.2'
+gem 'capistrano', '3.20.0'
 gem 'capistrano-symfony', '~> 2.0.0'
 # For SSH to work on some machines
 gem 'ed25519', '~> 1.3'

docker/docker-compose-latest.test.yml

@@ -1,5 +1,3 @@
-version: "3.3"
-
 services:
     sut:
         build: .