.woodpecker/build-container.yml

@@ -7,7 +7,7 @@ when:
 
 steps:
   - name: security-build
-    image: quay.io/thegeeklab/wp-docker-buildx:4
+    image: quay.io/thegeeklab/wp-docker-buildx:3
     settings:
       containerfile: Containerfile
       output: type=oci,dest=oci/${CI_REPO_NAME},tar=false
@@ -26,7 +26,7 @@ steps:
       TRIVY_TIMEOUT: 1m
 
   - name: publish-dockerhub
-    image: quay.io/thegeeklab/wp-docker-buildx:4
+    image: quay.io/thegeeklab/wp-docker-buildx:3
     group: container
     settings:
       auto_tag: true
@@ -44,7 +44,7 @@ steps:
           - ${CI_REPO_DEFAULT_BRANCH}
 
   - name: publish-quay
-    image: quay.io/thegeeklab/wp-docker-buildx:4
+    image: quay.io/thegeeklab/wp-docker-buildx:3
     group: container
     settings:
       auto_tag: true

Containerfile

@@ -1,4 +1,4 @@
-FROM docker.io/node:lts-bookworm-slim@sha256:a16301294ba66d2ad22d3beded4a52720f96ab208c1db0973c034d0127a4ccb0
+FROM docker.io/node:lts-bullseye-slim@sha256:3ac772bcf5c1c0680d890f251c314acd253f4816149c758987ec9ede9e12a10c
 
 LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
 LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
@@ -13,7 +13,7 @@ ARG YQ_VERSION
 # renovate: datasource=npm depName=@lhci/cli
 ENV LHCI_VERSION="${BUILD_VERSION:-0.13.0}"
 # renovate: datasource=github-releases depName=mikefarah/yq
-ENV YQ_VERSION="${YQ_VERSION:-v4.44.1}"
+ENV YQ_VERSION="${YQ_VERSION:-v4.40.5}"
 
 ENV LHCI_BASE_DIR=/drone/src \
     FORCE_COLOR=true \
@@ -22,7 +22,7 @@ ENV LHCI_BASE_DIR=/drone/src \
 
 ADD overlay/ /
 
-RUN apt-get update && apt-get install -y git curl wget gnupg jq bash bc libc-bin libc6 && \
+RUN apt-get update && apt-get install -y git curl wget gnupg jq bash bc && \
     curl -SsfL -o /usr/local/bin/yq "https://github.com/mikefarah/yq/releases/download/${YQ_VERSION}/yq_linux_amd64" && \
     chmod 755 /usr/local/bin/yq && \
     wget -qO - "https://dl-ssl.google.com/linux/linux_signing_key.pub" | apt-key add - && \