.woodpecker/build-container.yml

@@ -6,14 +6,14 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
 
 steps:
-  - name: security-build
-    image: quay.io/thegeeklab/wp-docker-buildx:4
+  security-build:
+    image: quay.io/thegeeklab/wp-docker-buildx:2
     settings:
       containerfile: Containerfile
       output: type=oci,dest=oci/${CI_REPO_NAME},tar=false
       repo: thegeeklab/${CI_REPO_NAME}
 
-  - name: security-scan
+  security-scan:
     image: ghcr.io/aquasecurity/trivy
     commands:
       - trivy -v
@@ -24,10 +24,11 @@ steps:
       TRIVY_NO_PROGRESS: "true"
       TRIVY_SEVERITY: HIGH,CRITICAL
       TRIVY_TIMEOUT: 1m
+      TRIVY_SKIP_FILES: /usr/local/bin/gomplate,/usr/local/bin/yq
 
-  - name: publish-dockerhub
-    image: quay.io/thegeeklab/wp-docker-buildx:4
+  publish-dockerhub:
     group: container
+    image: quay.io/thegeeklab/wp-docker-buildx:2
     settings:
       auto_tag: true
       containerfile: Containerfile
@@ -43,9 +44,9 @@ steps:
         branch:
           - ${CI_REPO_DEFAULT_BRANCH}
 
-  - name: publish-quay
-    image: quay.io/thegeeklab/wp-docker-buildx:4
+  publish-quay:
     group: container
+    image: quay.io/thegeeklab/wp-docker-buildx:2
     settings:
       auto_tag: true
       containerfile: Containerfile

.woodpecker/build-package.yml

@@ -6,20 +6,22 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
 
 steps:
-  - name: changelog
+  changelog:
     image: quay.io/thegeeklab/git-sv
     commands:
+      - git fetch --depth=2147483647
       - git sv current-version
       - git sv release-notes -t ${CI_COMMIT_TAG:-next} -o CHANGELOG.md
       - cat CHANGELOG.md
 
-  - name: publish-gitea
-    image: quay.io/thegeeklab/wp-gitea-release
+  publish-gitea:
+    image: plugins/gitea-release
     settings:
       api_key:
         from_secret: gitea_token
       base_url: https://gitea.rknet.org
       note: CHANGELOG.md
+      overwrite: true
       title: ${CI_COMMIT_TAG}
     when:
       - event: [tag]

.woodpecker/docs.yml

@@ -6,27 +6,26 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
 
 steps:
-  - name: markdownlint
+  markdownlint:
     image: quay.io/thegeeklab/markdownlint-cli
-    group: test
     commands:
       - markdownlint 'README.md'
 
-  - name: spellcheck
+  spellcheck:
     image: quay.io/thegeeklab/alpine-tools
-    group: test
     commands:
       - spellchecker --files '_docs/**/*.md' 'README.md' -d .dictionary -p spell indefinite-article syntax-urls
     environment:
       FORCE_COLOR: "true"
+      NPM_CONFIG_LOGLEVEL: "error"
 
-  - name: link-validation
+  link-validation:
     image: docker.io/lycheeverse/lychee
     group: test
     commands:
       - lychee --no-progress --format detailed README.md
 
-  - name: pushrm-dockerhub
+  pushrm-dockerhub:
     image: docker.io/chko/docker-pushrm:1
     secrets:
       - source: docker_password
@@ -43,7 +42,7 @@ steps:
           - ${CI_REPO_DEFAULT_BRANCH}
         status: [success]
 
-  - name: pushrm-quay
+  pushrm-quay:
     image: docker.io/chko/docker-pushrm:1
     secrets:
       - source: quay_token

.woodpecker/notify.yml

@@ -8,7 +8,7 @@ when:
 runs_on: [success, failure]
 
 steps:
-  - name: matrix
+  matrix:
     image: quay.io/thegeeklab/wp-matrix
     settings:
       homeserver:

Containerfile

@@ -1,4 +1,4 @@
-FROM docker.io/node:lts-bookworm-slim@sha256:a16301294ba66d2ad22d3beded4a52720f96ab208c1db0973c034d0127a4ccb0
+FROM docker.io/node:lts-bullseye-slim@sha256:664dbe4900f10ecef7ae888e621dc597ca57d07a64a632894fff8f49f32b1925
 
 LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
 LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
@@ -11,9 +11,9 @@ ARG BUILD_VERSION
 ARG YQ_VERSION
 
 # renovate: datasource=npm depName=@lhci/cli
-ENV LHCI_VERSION="${BUILD_VERSION:-0.13.0}"
+ENV LHCI_VERSION="${BUILD_VERSION:-0.12.0}"
 # renovate: datasource=github-releases depName=mikefarah/yq
-ENV YQ_VERSION="${YQ_VERSION:-v4.44.1}"
+ENV YQ_VERSION="${YQ_VERSION:-v4.40.5}"
 
 ENV LHCI_BASE_DIR=/drone/src \
     FORCE_COLOR=true \
@@ -22,7 +22,7 @@ ENV LHCI_BASE_DIR=/drone/src \
 
 ADD overlay/ /
 
-RUN apt-get update && apt-get install -y git curl wget gnupg jq bash bc libc-bin libc6 && \
+RUN apt-get update && apt-get install -y git curl wget gnupg jq bash bc && \
     curl -SsfL -o /usr/local/bin/yq "https://github.com/mikefarah/yq/releases/download/${YQ_VERSION}/yq_linux_amd64" && \
     chmod 755 /usr/local/bin/yq && \
     wget -qO - "https://dl-ssl.google.com/linux/linux_signing_key.pub" | apt-key add - && \

trivy.yaml

@@ -1,5 +0,0 @@
----
-scan:
-  skip-files:
-    - /usr/local/bin/gomplate
-    - /usr/local/bin/yq