Skip to content

refactor(deps): update all dependencies (dev) #418

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
AnotherStranger merged 2 commits into from
Jul 28, 2026
Merged

refactor(deps): update all dependencies (dev) #418

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
046b87c
refactor(deps): update all dependencies
renovate[bot] Jul 28, 2026
7764727
fix(renovate): update alpine package ref to 3.24 so renovate uses the…
AnotherStranger Jul 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 10 additions & 10 deletions .github/workflows/docker-build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,12 +25,12 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
- name: Install cosign
uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
- name: Docker meta
id: meta
uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6
with:
# list of Docker images to use as base name for tags
images: |
Expand All @@ -47,17 +47,17 @@ jobs:
type=sha,format=long
type=raw,value=latest,enable={{is_default_branch}}
- name: Set up QEMU
uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4
uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
- name: Login to Docker Hub
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4
if: github.event_name != 'pull_request'
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
- name: Login to GitHub Container Registry
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4
if: github.event_name != 'pull_request'
with:
registry: ghcr.io
Expand All @@ -66,7 +66,7 @@ jobs:
- name: Get Git commit timestamps
run: echo "TIMESTAMP=$(git log -1 --pretty=%ct)" >> $GITHUB_ENV
- name: Build Testimage
uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
env:
SOURCE_DATE_EPOCH: ${{ env.TIMESTAMP }}
with:
Expand All @@ -77,7 +77,7 @@ jobs:
- name: Run small selftest on build container image
run: docker run -v "./tests/selftest.sh:/selftest.sh" "${{ env.TEST_TAG }}" ./selftest.sh
- name: Build and push
uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
id: docker-build
env:
SOURCE_DATE_EPOCH: ${{ env.TIMESTAMP }}
Expand All @@ -103,15 +103,15 @@ jobs:
COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@bfa4b33a029b9aa80ddb784b45574c30e072c59e # master
uses: aquasecurity/trivy-action@c07df6fec6fa692e6fd1200d50aaa1fdd66f03c8 # master
if: ${{ github.event_name != 'pull_request' }}
with:
image-ref: "ghcr.io/anotherstranger/borg-server:sha-${{ github.sha }}"
format: 'sarif'
output: "trivy-results.sarif"
severity: "CRITICAL,HIGH"
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4
if: ${{ github.event_name != 'pull_request' }}
with:
sarif_file: "trivy-results.sarif"
4 changes: 2 additions & 2 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,11 +15,11 @@ jobs:
contents: write
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
with:
fetch-depth: 0
- name: Setup Node.js
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
with:
node-version: "lts/*"
- name: Release
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/security.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
- name: Run Trivy vulnerability scanner in repo mode
uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
with:
Expand All @@ -26,6 +26,6 @@ jobs:
output: 'trivy-results-fs.sarif'
severity: 'CRITICAL,HIGH,MEDIUM'
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4
with:
sarif_file: 'trivy-results-fs.sarif'
8 changes: 4 additions & 4 deletions .pre-commit-config.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ repos:
- id: end-of-file-fixer
- id: check-added-large-files
- repo: https://github.com/commitizen-tools/commitizen
rev: v4.16.2
rev: v4.16.5
hooks:
- id: commitizen
stages:
Expand All @@ -24,21 +24,21 @@ repos:
- -t
- warning
- repo: https://github.com/igorshubovych/markdownlint-cli
rev: v0.48.0
rev: v0.49.1
hooks:
- id: markdownlint-fix
args:
- "-i"
- "CHANGELOG.md"
- repo: https://github.com/renovatebot/pre-commit-hooks
rev: 43.150.0
rev: 43.272.6
hooks:
- id: renovate-config-validator
- repo: https://github.com/google/yamlfmt.git
rev: v0.21.0
hooks:
- id: yamlfmt
- repo: https://github.com/biomejs/pre-commit
rev: v2.4.15
rev: v2.5.4
hooks:
- id: biome-format
36 changes: 18 additions & 18 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,43 +4,43 @@
# renovate: datasource=repology depName=pypi/borgbackup versioning=python
ARG BORGBACKUP_VERSION="1.4.3"

# renovate: datasource=repology depName=alpine_3_23/openssh-server versioning=loose
# renovate: datasource=repology depName=alpine_3_24/openssh-server versioning=loose
ARG OPENSSH_VERSION="10.2_p1-r0"

# renovate: datasource=repology depName=alpine_3_23/sed versioning=loose
# renovate: datasource=repology depName=alpine_3_24/sed versioning=loose
ARG SED_VERSION="4.9-r2"

# renovate: datasource=repology depName=alpine_3_23/bash versioning=loose
# renovate: datasource=repology depName=alpine_3_24/bash versioning=loose
ARG BASH_VERSION="5.3.3-r1"

# renovate: datasource=repology depName=alpine_3_23/shadow versioning=loose
# renovate: datasource=repology depName=alpine_3_24/shadow versioning=loose
ARG SHADOW_VERSION="4.18.0-r0"

# renovate: datasource=repology depName=alpine_3_23/openssl versioning=loose
ARG OPENSSL_VERSION="3.5.6-r0"
# renovate: datasource=repology depName=alpine_3_24/openssl versioning=loose
ARG OPENSSL_VERSION="3.5.7-r0"

# renovate: datasource=repology depName=alpine_3_23/pkgconf versioning=loose
# renovate: datasource=repology depName=alpine_3_24/pkgconf versioning=loose
ARG PKG_CONF_VERSION="2.5.1-r0"

# renovate: datasource=repology depName=alpine_3_23/build-base versioning=loose
ARG BUILD_BASE_VERSION="0.5-r3"
# renovate: datasource=repology depName=alpine_3_24/build-base versioning=loose
ARG BUILD_BASE_VERSION="0.5-r4"

# renovate: datasource=repology depName=alpine_3_23/acl-dev versioning=loose
# renovate: datasource=repology depName=alpine_3_24/acl-dev versioning=loose
ARG ACL_VERSION="2.3.2-r1"

# renovate: datasource=repology depName=alpine_3_23/xxhash-dev versioning=loose
ARG XXHASH_VERSION="0.8.3-r0"
# renovate: datasource=repology depName=alpine_3_24/xxhash-dev versioning=loose
ARG XXHASH_VERSION="0.8.3-r1"

# renovate: datasource=repology depName=alpine_3_23/zstd versioning=loose
# renovate: datasource=repology depName=alpine_3_24/zstd versioning=loose
ARG ZSTD_VERSION="1.5.7-r2"

# renovate: datasource=repology depName=alpine_3_23/lz4 versioning=loose
ARG LZ4_VERSION="1.10.0-r0"
# renovate: datasource=repology depName=alpine_3_24/lz4 versioning=loose
ARG LZ4_VERSION="1.10.0-r1"

# renovate: datasource=repology depName=alpine_3_23/linux-headers versioning=loose
ARG LINUX_HEADERS_VERSION="6.16.12-r0"
# renovate: datasource=repology depName=alpine_3_24/linux-headers versioning=loose
ARG LINUX_HEADERS_VERSION="7.0.0-r1"

FROM python:3.14.5-alpine3.23@sha256:5a824eb82cc75361f98611f3cfc5091ea33f10a6ccea4d4ebdabbc523b9a1614 AS base
FROM python:3.14.6-alpine3.24@sha256:26730869004e2b9c4b9ad09cab8625e81d256d1ce97e72df5520e806b1709f92 AS base

################################################################################
# BUILD BORGBACKUP FROM SOURCE USING PIP #
Expand Down
Loading