chore(deps): update quay.io/thegeeklab/wp-docker-buildx docker tag to v6 (#157)

Reviewed-on: #157
Co-authored-by: Renovator Bot <renovator@rknet.org>
Co-committed-by: Renovator Bot <renovator@rknet.org>

.woodpecker/build-container.yml

@@ -6,15 +6,18 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
 
 steps:
-  security-build:
-    image: quay.io/thegeeklab/wp-docker-buildx:2
+  - name: security-build
+    image: quay.io/thegeeklab/wp-docker-buildx:6
     settings:
       containerfile: Containerfile.multiarch
       output: type=oci,dest=oci/${CI_REPO_NAME},tar=false
       repo: thegeeklab/${CI_REPO_NAME}
+      registry_config:
+        from_secret: DOCKER_REGISTRY_CONFIG_PULL
 
-  security-scan:
-    image: ghcr.io/aquasecurity/trivy
+  - name: security-scan
+    image: docker.io/aquasec/trivy
+    depends_on: security-build
     commands:
       - trivy -v
       - trivy image --input oci/${CI_REPO_NAME}
@@ -24,10 +27,11 @@ steps:
       TRIVY_NO_PROGRESS: "true"
       TRIVY_SEVERITY: HIGH,CRITICAL
       TRIVY_TIMEOUT: 1m
+      TRIVY_DB_REPOSITORY: docker.io/aquasec/trivy-db:2
 
-  publish-dockerhub:
-    group: container
-    image: quay.io/thegeeklab/wp-docker-buildx:2
+  - name: publish-dockerhub
+    image: quay.io/thegeeklab/wp-docker-buildx:6
+    depends_on: security-scan
     settings:
       auto_tag: true
       containerfile: Containerfile.multiarch
@@ -46,9 +50,9 @@ steps:
         branch:
           - ${CI_REPO_DEFAULT_BRANCH}
 
-  publish-quay:
-    group: container
-    image: quay.io/thegeeklab/wp-docker-buildx:2
+  - name: publish-quay
+    image: quay.io/thegeeklab/wp-docker-buildx:6
+    depends_on: security-scan
     settings:
       auto_tag: true
       containerfile: Containerfile.multiarch

.woodpecker/build-package.yml

@@ -6,14 +6,14 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
 
 steps:
-  changelog:
+  - name: changelog
     image: quay.io/thegeeklab/git-sv
     commands:
       - git sv current-version
       - git sv release-notes -t ${CI_COMMIT_TAG:-next} -o CHANGELOG.md
       - cat CHANGELOG.md
 
-  publish-gitea:
+  - name: publish-gitea
     image: quay.io/thegeeklab/wp-gitea-release
     settings:
       api_key:

.woodpecker/docs.yml

@@ -6,34 +6,31 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
 
 steps:
-  markdownlint:
+  - name: markdownlint
     image: quay.io/thegeeklab/markdownlint-cli
-    group: test
     commands:
       - markdownlint 'README.md'
 
-  spellcheck:
+  - name: spellcheck
     image: quay.io/thegeeklab/alpine-tools
-    group: test
     commands:
       - spellchecker --files '_docs/**/*.md' 'README.md' -d .dictionary -p spell indefinite-article syntax-urls
     environment:
       FORCE_COLOR: "true"
 
-  link-validation:
+  - name: link-validation
     image: docker.io/lycheeverse/lychee
-    group: test
     commands:
       - lychee --no-progress --format detailed README.md
 
-  pushrm-dockerhub:
+  - name: pushrm-dockerhub
     image: docker.io/chko/docker-pushrm:1
-    secrets:
-      - source: docker_password
-        target: DOCKER_PASS
-      - source: docker_username
-        target: DOCKER_USER
+    depends_on: [markdownlint, spellcheck, link-validation]
     environment:
+      DOCKER_PASS:
+        from_secret: docker_password
+      DOCKER_USER:
+        from_secret: docker_username
       PUSHRM_FILE: README.md
       PUSHRM_SHORT: Custom image for Hugo
       PUSHRM_TARGET: thegeeklab/${CI_REPO_NAME}
@@ -43,12 +40,12 @@ steps:
           - ${CI_REPO_DEFAULT_BRANCH}
         status: [success]
 
-  pushrm-quay:
+  - name: pushrm-quay
     image: docker.io/chko/docker-pushrm:1
-    secrets:
-      - source: quay_token
-        target: APIKEY__QUAY_IO
+    depends_on: [markdownlint, spellcheck, link-validation]
     environment:
+      APIKEY__QUAY_IO:
+        from_secret: quay_token
       PUSHRM_FILE: README.md
       PUSHRM_TARGET: quay.io/thegeeklab/${CI_REPO_NAME}
     when:

.woodpecker/notify.yml

@@ -8,17 +8,17 @@ when:
 runs_on: [success, failure]
 
 steps:
-  matrix:
+  - name: matrix
     image: quay.io/thegeeklab/wp-matrix
     settings:
       homeserver:
         from_secret: matrix_homeserver
-      password:
-        from_secret: matrix_password
-      roomid:
-        from_secret: matrix_roomid
-      username:
-        from_secret: matrix_username
+      room_id:
+        from_secret: matrix_room_id
+      user_id:
+        from_secret: matrix_user_id
+      access_token:
+        from_secret: matrix_access_token
     when:
       - status: [success, failure]
 

Containerfile.multiarch

@@ -1,4 +1,4 @@
-FROM docker.io/thegeeklab/alpine:latest@sha256:a0578a5a454f4492c892c985affda27d02e8096dbcc6d6bc19efbf319eb4c3f6
+FROM docker.io/alpine:3.20@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a
 
 LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
 LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
@@ -14,7 +14,7 @@ ARG TARGETVARIANT
 ARG HUGO_VERSION
 
 # renovate: datasource=github-releases depName=gohugoio/hugo
-ENV HUGO_VERSION="${HUGO_VERSION:-v0.121.2}"
+ENV HUGO_VERSION="${HUGO_VERSION:-v0.136.5}"
 
 ENV HUGO_ENV=production