chore(deps): update docker.io/alpine docker tag to v3.20 (#193)

Reviewed-on: #193
Co-authored-by: Renovator Bot <renovator@rknet.org>
Co-committed-by: Renovator Bot <renovator@rknet.org>

.woodpecker/build-container.yml

@@ -6,14 +6,15 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
 
 steps:
-  security-build:
+  - name: security-build
-    image: quay.io/thegeeklab/wp-docker-buildx:1
+    image: quay.io/thegeeklab/wp-docker-buildx:4
     settings:
       containerfile: Containerfile
       output: type=oci,dest=oci/${CI_REPO_NAME},tar=false
       repo: thegeeklab/${CI_REPO_NAME}
+      cache_to: type=local,dest=oci/cache/${CI_REPO_NAME},mode=max
 
-  security-scan:
+  - name: security-scan
     image: ghcr.io/aquasecurity/trivy
     commands:
       - trivy -v
@@ -24,11 +25,10 @@ steps:
       TRIVY_NO_PROGRESS: "true"
       TRIVY_SEVERITY: HIGH,CRITICAL
       TRIVY_TIMEOUT: 1m
-      TRIVY_SKIP_FILES: /usr/local/bin/gomplate
 
-  publish-dockerhub:
+  - name: publish-dockerhub
+    image: quay.io/thegeeklab/wp-docker-buildx:4
     group: container
-    image: quay.io/thegeeklab/wp-docker-buildx:1
     settings:
       auto_tag: true
       containerfile: Containerfile
@@ -38,15 +38,17 @@ steps:
       repo: thegeeklab/${CI_REPO_NAME}
       username:
         from_secret: docker_username
+      cache_from:
+        - 'type=local\\,src=oci/cache/${CI_REPO_NAME}'
     when:
       - event: [tag]
       - event: [push, manual]
         branch:
           - ${CI_REPO_DEFAULT_BRANCH}
 
-  publish-quay:
+  - name: publish-quay
+    image: quay.io/thegeeklab/wp-docker-buildx:4
     group: container
-    image: quay.io/thegeeklab/wp-docker-buildx:1
     settings:
       auto_tag: true
       containerfile: Containerfile
@@ -57,6 +59,8 @@ steps:
       repo: quay.io/thegeeklab/${CI_REPO_NAME}
       username:
         from_secret: quay_username
+      cache_from:
+        - 'type=local\\,src=oci/cache/${CI_REPO_NAME}'
     when:
       - event: [tag]
       - event: [push, manual]

.woodpecker/build-package.yml

@@ -6,22 +6,20 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
 
 steps:
-  changelog:
+  - name: changelog
     image: quay.io/thegeeklab/git-sv
     commands:
-      - git fetch --depth=2147483647
       - git sv current-version
       - git sv release-notes -t ${CI_COMMIT_TAG:-next} -o CHANGELOG.md
       - cat CHANGELOG.md
 
-  publish-gitea:
+  - name: publish-gitea
-    image: plugins/gitea-release
+    image: quay.io/thegeeklab/wp-gitea-release
     settings:
       api_key:
         from_secret: gitea_token
       base_url: https://gitea.rknet.org
       note: CHANGELOG.md
-      overwrite: true
       title: ${CI_COMMIT_TAG}
     when:
       - event: [tag]

.woodpecker/docs.yml

@@ -6,26 +6,27 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
 
 steps:
-  markdownlint:
+  - name: markdownlint
     image: quay.io/thegeeklab/markdownlint-cli
+    group: test
     commands:
       - markdownlint 'README.md'
 
-  spellcheck:
+  - name: spellcheck
     image: quay.io/thegeeklab/alpine-tools
+    group: test
     commands:
       - spellchecker --files '_docs/**/*.md' 'README.md' -d .dictionary -p spell indefinite-article syntax-urls
     environment:
       FORCE_COLOR: "true"
-      NPM_CONFIG_LOGLEVEL: "error"
 
-  link-validation:
+  - name: link-validation
     image: docker.io/lycheeverse/lychee
     group: test
     commands:
       - lychee --no-progress --format detailed README.md
 
-  pushrm-dockerhub:
+  - name: pushrm-dockerhub
     image: docker.io/chko/docker-pushrm:1
     secrets:
       - source: docker_password
@@ -42,7 +43,7 @@ steps:
           - ${CI_REPO_DEFAULT_BRANCH}
         status: [success]
 
-  pushrm-quay:
+  - name: pushrm-quay
     image: docker.io/chko/docker-pushrm:1
     secrets:
       - source: quay_token

.woodpecker/notify.yml

@@ -8,7 +8,7 @@ when:
 runs_on: [success, failure]
 
 steps:
-  matrix:
+  - name: matrix
     image: quay.io/thegeeklab/wp-matrix
     settings:
       homeserver:

Containerfile

@@ -1,4 +1,4 @@
-FROM docker.io/clux/muslrust:1.74.0-stable@sha256:37ba39a117840fd3a75d8be237687c4d69c1d647d75072a17452efd91a67badd as build
+FROM docker.io/clux/muslrust:1.78.0-stable@sha256:cbc004d60c76bb716abcb0bf9d1ec3fcaf13f7f096fa0c86891a5b6b311e6481 as build
 
 ARG WEBVAULT_VERSION
 ARG VAULTWARDEN_VERSION
@@ -12,9 +12,9 @@ ARG DB=sqlite,postgresql
 ARG TARGETPLATFORM
 
 # renovate: datasource=github-releases depName=dani-garcia/bw_web_builds versioning=loose
-ENV WEBVAULT_VERSION="${WEBVAULT_VERSION:-v2023.10.0}"
+ENV WEBVAULT_VERSION="${WEBVAULT_VERSION:-v2024.3.1}"
 # renovate: datasource=github-releases depName=dani-garcia/vaultwarden
-ENV VAULTWARDEN_VERSION="${VAULTWARDEN_VERSION:-1.30.1}"
+ENV VAULTWARDEN_VERSION="${VAULTWARDEN_VERSION:-1.30.5}"
 
 WORKDIR /src
 
@@ -38,13 +38,13 @@ esac
 
 RUN rustup set profile minimal && \
     rustup target add $(cat rust_target) && \
-    VW_VERSION="${VAULTWARDEN_VERSION##v}" cargo build -j 8 --features "$DB" --target $(cat rust_target) --release
+    VW_VERSION="${VAULTWARDEN_VERSION##v}" cargo build -j 4 --features "$DB" --target $(cat rust_target) --release
 
 RUN ldd target/$(cat rust_target)/release/vaultwarden && \
     target/$(cat rust_target)/release/vaultwarden --help && \
     target/$(cat rust_target)/release/vaultwarden --version
 
-FROM docker.io/alpine:3.18@sha256:34871e7290500828b39e22294660bee86d966bc0017544e848dd9a255cdf59e0
+FROM docker.io/alpine:3.20@sha256:77726ef6b57ddf65bb551896826ec38bc3e53f75cdde31354fbffb4f25238ebd
 
 LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
 LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"