Merge pull request 'chore(deps): update docker/build-push-action action to v7.4.0' (#31 ) from renovate/docker-build-push-action-7.x into master

chore(deps): update docker/build-push-action action to v7.4.0
Merge pull request 'fix(ci): SHA corrompu pour anothrNick/github-tag-action (job tag casse sur master)' (#29 ) from fix/ci-tag-action-sha into master
2026-09-17 05:32:19 -04:00 · 2026-09-17 09:13:13 +00:00 · 2026-09-15 17:39:46 -04:00 · 2026-09-13 14:57:01 +00:00 · 2026-09-13 10:46:25 -04:00 · 2026-09-13 14:41:49 +00:00
7 changed files with 28 additions and 99 deletions
@@ -9,9 +9,9 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: Hadolint
-        uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        uses: hadolint/hadolint-action@06be81baf89a55ffd0e24b8f04a4185738dd3387 # v3.5.0
        continue-on-error: true

  build:
@@ -19,9 +19,9 @@ jobs:
    needs: lint
    steps:
      - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: Login to Docker Hub
-        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -34,9 +34,9 @@ jobs:
            type=raw,value=latest,enable=true
            type=sha,format=long
      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
      - name: Build and push
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
        with:
          context: .
          push: true
@@ -9,16 +9,16 @@ jobs:
    runs-on: ubuntu-latest
    continue-on-error: true
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
-      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: hadolint/hadolint-action@06be81baf89a55ffd0e24b8f04a4185738dd3387 # v3.5.0
        with:
          dockerfile: Dockerfile

  test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
-      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
      - run: docker build -t ci-image:${{ github.sha }} .
      - run: bash tests/test.sh ci-image:${{ github.sha }}

@@ -26,21 +26,21 @@ jobs:
    needs: [test]
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
-      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
      - run: docker build -t jcabillot/mysql-client:${{ github.sha }} .

  tag:
    needs: [build]
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
          fetch-depth: 0
      - name: Configure git auth
        run: |
          git remote set-url origin "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@scm.cabillot.eu/perso/mysql-client.git"
-      - uses: anothrNick/github-tag-action@4ed44965e0db2c5b5e8b8c7c7c8c9c9c9c9c9c9c9 # v1.75.0
+      - uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          DEFAULT_BUMP: patch
@@ -8,15 +8,15 @@ jobs:
  hadolint:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
-      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: hadolint/hadolint-action@06be81baf89a55ffd0e24b8f04a4185738dd3387 # v3.5.0
        with:
          dockerfile: Dockerfile

  build-test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
-      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
      - run: docker build -t ci-image:${{ github.sha }} .
      - run: bash tests/test.sh ci-image:${{ github.sha }}
@@ -10,9 +10,9 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: Hadolint
-        uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        uses: hadolint/hadolint-action@06be81baf89a55ffd0e24b8f04a4185738dd3387 # v3.5.0
        continue-on-error: true

  build:
@@ -20,9 +20,9 @@ jobs:
    needs: lint
    steps:
      - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: Login to Docker Hub
-        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -36,9 +36,9 @@ jobs:
            type=semver,pattern={{major}}.{{minor}}
            type=semver,pattern={{major}}
      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
      - name: Build and push
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
        with:
          context: .
          push: true
@@ -1,35 +0,0 @@
-image: docker:latest
-
-services:
-  - "docker:dind"
-
-before_script:
-  - "docker login -u \"$CI_REGISTRY_USER\" -p \"$CI_REGISTRY_PASSWORD\" $CI_REGISTRY"
-
-build-master:
-  stage: "build"
-  script:
-    - "docker build --pull -t \"$CI_REGISTRY_IMAGE\" ."
-    - "docker push \"$CI_REGISTRY_IMAGE\""
-  only:
-    - "master"
-
-build:
-  stage: "build"
-  script:
-    - "docker build --pull -t \"$CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG\" ."
-    - "docker push \"$CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG\""
-  except:
-    - "master"
-
-deploy-dockerhub:
-  stage: "deploy"
-  before_script:
-    - "docker login -u \"$DOCKERHUB_USER\" -p \"$DOCKERHUB_PASSWORD\""
-    - "docker login -u \"$CI_REGISTRY_USER\" -p \"$CI_REGISTRY_PASSWORD\" $CI_REGISTRY"
-  script:
-    - "docker pull \"$CI_REGISTRY_IMAGE\""
-    - "docker tag \"$CI_REGISTRY_IMAGE\" \"$DOCKERHUB_USER/$DOCKERHUB_PROJECT\""
-    - "docker push \"$DOCKERHUB_USER/$DOCKERHUB_PROJECT\""
-  only:
-    - "master"
@@ -4,8 +4,10 @@ LABEL maintainer="Cabillot Julien <dockerimages@cabillot.eu>"
 # hadolint ignore=DL3018
 RUN apk add --no-cache mysql-client && \
    rm -rf /usr/share/apk/keys && \
-    adduser -D muser
+    addgroup -g 1000 muser && \
+    adduser -D -u 1000 -G muser muser

-USER muser
+# Numeric uid/gid (DL3066): identity stays resolvable by the host
+USER 1000:1000

 ENTRYPOINT [ "/usr/bin/mysql" ]
@@ -1,38 +0,0 @@
-pipeline {
-  environment {
-    registry = 'https://registry.hub.docker.com'
-    registryCredential = 'dockerhub_jcabillot'
-    dockerImage = 'jcabillot/mysql-client'
-  }
-
-  agent any
-
-  triggers {
-    cron('@midnight')
-  }
-
-  stages {
-    stage('Clone repository') {
-      steps{
-        checkout scm
-      }
-    }
-
-    stage('Build image') {
-      steps{
-        sh 'docker build --force-rm=true --no-cache=true --pull -t ${dockerImage} .'
-      }
-    }
-
-    stage('Deploy Image') {
-      steps{
-        script {
-          withCredentials([usernamePassword(credentialsId: 'dockerhub_jcabillot', usernameVariable: 'DOCKER_USER', passwordVariable: 'DOCKER_PASS')]) {
-            sh 'docker login --username ${DOCKER_USER} --password ${DOCKER_PASS}'
-            sh 'docker push ${dockerImage}'
-          }
-        }
-      }
-    }
-  }
-}
Author	SHA1	Message	Date
opencodecabilloteu	7158362382	Merge pull request 'chore(deps): update docker/build-push-action action to v7.4.0' (#31 ) from renovate/docker-build-push-action-7.x into master Main Release / hadolint (push) Successful in 11s Details Main Release / test (push) Successful in 27s Details Renovate / renovate (push) Successful in 47s Details Main Release / build (push) Successful in 21s Details Main Release / tag (push) Successful in 11s Details	2026-09-17 05:32:19 -04:00
renovate	da5180be9a	chore(deps): update docker/build-push-action action to v7.4.0 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 11s Details PR Checks / build-test (pull_request) Successful in 29s Details	2026-09-17 09:13:13 +00:00
jcabillot	2f1f4d7320	Merge pull request 'fix(ci): SHA corrompu pour anothrNick/github-tag-action (job tag casse sur master)' (#29 ) from fix/ci-tag-action-sha into master Main Release / hadolint (push) Successful in 22s Details Main Release / test (push) Successful in 1m5s Details Main Release / build (push) Successful in 38s Details Renovate / renovate (push) Successful in 1m30s Details Main Release / tag (push) Successful in 23s Details Reviewed-on: #29	2026-09-15 17:39:46 -04:00
OpenCode Cabillot	42ff058a6f	fix(ci): correct handed-corrupted SHA for anothrNick/github-tag-action PR Checks / hadolint (pull_request) Successful in 12s Details PR Checks / build-test (pull_request) Successful in 26s Details The tag job in main.yaml references anothrNick/github-tag-action@4ed44965e0 which does not exist upstream: the runner fails with Unable to resolve 4ed44965...: reference not found ##[error]reference not found The first 12 chars match the real commit, the rest is fabricated - the signature of a hand-rewritten YAML (commit `5e1827b` re-added the step with a bad SHA after `8b583cc` had removed it). The correct commit for tag v1.75.0 is 4ed44965e0db8dab2b466a16da04aec3cc312fd8. Impact: main.yaml has been red on every push to master since (runs 8197 and 8616: hadolint/test/build green, tag failed), so no release tag is created and tag.yaml never runs -> no release build pushed to Docker Hub. Verified against the upstream repo: tag 1.75.0 (and the v1 alias) both point at 4ed44965e0db8dab2b466a16da04aec3cc312fd8.	2026-09-13 14:57:01 +00:00
jcabillot	d2b11aefeb	Merge pull request 'fix(docker): numeric uid/gid pour hadolint DL3066 + bump hadolint-action v3.5.0' (#27 ) from fix/dl3066-numeric-uid into master Main Release / hadolint (push) Successful in 8s Details Renovate / renovate (push) Successful in 22s Details Main Release / test (push) Successful in 30s Details Main Release / build (push) Successful in 28s Details Main Release / tag (push) Failing after 8s Details Reviewed-on: #27	2026-09-13 10:46:25 -04:00
OpenCode Cabillot	fb061f33a1	fix(docker): pin numeric uid/gid so hadolint DL3066 passes PR Checks / hadolint (pull_request) Successful in 11s Details PR Checks / build-test (pull_request) Successful in 31s Details hadolint 2.15.x - pulled in by hadolint-action v3.5.0 - adds DL3066 ("Non-numeric user-id may not be resolvable by host system"). The Dockerfile's `USER muser` trips it and the hadolint job exits 1 (hadolint fails on info-level findings by default), turning the PR Checks pipeline red on the Renovate bump PR. muser was created without an explicit uid/gid, so its numeric identity depended on busybox's auto-assignment. Both ids are now pinned at 1000:1000 - the values Alpine was already assigning - and USER uses the numeric form, which is always resolvable by the host. Verified with the upstream hadolint v2.15.1 binary: the previous Dockerfile reports "Dockerfile:9 DL3066 info" and exits 1, the fixed one lints clean and exits 0. The hadolint-action v3.3.0 -> v3.5.0 bump is included here (all four workflows, SHA 06be81ba) so that master ends up on v3.5.0 with a clean lint - superseding Renovate PR #23.	2026-09-13 14:41:49 +00:00
jcabillot	78d4ce958a	Merge pull request 'chore(deps): update actions/checkout digest to 3d3c42e' (#20 ) from renovate/actions-checkout-digest into master Main Release / hadolint (push) Successful in 17s Details Main Release / test (push) Successful in 46s Details Renovate / renovate (push) Successful in 1m13s Details Main Release / build (push) Successful in 1m4s Details Main Release / tag (push) Failing after 10s Details Reviewed-on: #20	2026-09-08 21:17:34 -04:00
renovate	57171f2cb2	chore(deps): update actions/checkout digest to 3d3c42e renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 28s Details PR Checks / build-test (pull_request) Successful in 58s Details	2026-09-08 00:22:48 +00:00
opencodecabilloteu	d402e22cb7	Merge pull request 'chore(deps): update docker/login-action digest to dbcb813' (#21 ) from renovate/docker-login-action-digest into master Main Release / hadolint (push) Successful in 30s Details Renovate / renovate (push) In progress Details Main Release / test (push) Successful in 1m34s Details Main Release / build (push) Successful in 1m15s Details Main Release / tag (push) Failing after 25s Details	2026-09-07 19:31:36 -04:00
renovate	0a421529fe	chore(deps): update docker/login-action digest to dbcb813 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 1m19s Details PR Checks / build-test (pull_request) Successful in 1m25s Details	2026-09-07 23:20:43 +00:00
opencodecabilloteu	9d40a91bba	Merge pull request 'chore(deps): update docker/setup-buildx-action digest to 37fe631' (#22 ) from renovate/docker-setup-buildx-action-digest into master Main Release / hadolint (push) Successful in 36s Details Main Release / test (push) Successful in 1m35s Details Main Release / build (push) Successful in 59s Details Main Release / tag (push) Failing after 16s Details Renovate / renovate (push) Successful in 4m3s Details	2026-09-07 18:31:17 -04:00
renovate	1b0967895c	chore(deps): update docker/setup-buildx-action digest to 37fe631 renovate/stability-days Updates have met minimum release age requirement Details PR Checks / hadolint (pull_request) Successful in 40s Details PR Checks / build-test (pull_request) Successful in 1m10s Details	2026-09-07 22:20:40 +00:00
jcabillot	0990c05e07	Merge pull request 'chore: remove legacy GitLab CI and Jenkins files' (#19 ) from ci/remove-legacy-ci into master Main Release / hadolint (push) Successful in 1m28s Details Main Release / test (push) Successful in 3m4s Details Renovate / renovate (push) Successful in 1m10s Details Main Release / build (push) Successful in 1m47s Details Main Release / tag (push) Failing after 11s Details Reviewed-on: #19	2026-09-02 09:49:45 -04:00
OpenCode Cabillot	e7a3584fd2	chore: remove legacy GitLab CI and Jenkins files PR Checks / hadolint (pull_request) Successful in 1m18s Details PR Checks / build-test (pull_request) Successful in 2m49s Details	2026-09-02 13:47:31 +00:00
jcabillot	b838a95470	Merge pull request 'ci: add Renovate workflow' (#18 ) from add-renovate-workflow into master Main Release / hadolint (push) Successful in 45s Details Main Release / test (push) Successful in 1m8s Details Renovate / renovate (push) Successful in 1m27s Details Main Release / build (push) Successful in 49s Details Main Release / tag (push) Failing after 20s Details Reviewed-on: #18	2026-08-03 16:17:14 -04:00