Pin dependencies

.gitea/workflows/build-java.yml

@@ -4,6 +4,8 @@ on:
   push:
     branches: 
       - main
+  schedule:
+    - cron: "@weekly"
   workflow_dispatch:
 
 jobs:
@@ -13,19 +15,19 @@ jobs:
       matrix:
         java_version: [21]
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
     - name: Login to Registry
-      uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4
+      uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
       with:
-        registry: ${{ vars.REGISTRY_URL }}
+        registry: ${{ secrets.REGISTRY_URL }}
         username: ${{ secrets.REGISTRY_USER }}
         password: ${{ secrets.REGISTRY_PASSWORD }}
 
     - name: Build and Push
-      uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
+      uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
       with:
         context: .
         file: java/Dockerfile.java${{ matrix.java_version }}
         push: true
-        tags: ${{ vars.REGISTRY_URL }}/${{ secrets.REGISTRY_USER }}/coder-images:java${{ matrix.java_version }}
+        tags: ${{ vars.CI_REGISTRY_IMAGE }}:java${{ matrix.java_version }}

.gitea/workflows/build-php.yml

@@ -4,6 +4,8 @@ on:
   push:
     branches:
       - main
+  schedule:
+    - cron: "@weekly"
   workflow_dispatch:
 
 jobs:
@@ -13,19 +15,19 @@ jobs:
       matrix:
         php_version: [82, 84]
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
     - name: Login to Registry
-      uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4
+      uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
       with:
-        registry: ${{ vars.REGISTRY_URL }}
+        registry: ${{ secrets.REGISTRY_URL }}
         username: ${{ secrets.REGISTRY_USER }}
         password: ${{ secrets.REGISTRY_PASSWORD }}
 
     - name: Build and Push
-      uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
+      uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
       with:
         context: .
         file: php/Dockerfile.php${{ matrix.php_version }}
         push: true
-        tags: ${{ vars.REGISTRY_URL }}/${{ secrets.REGISTRY_USER }}/coder-images:php${{ matrix.php_version }}
+        tags: ${{ vars.CI_REGISTRY_IMAGE }}:php${{ matrix.php_version }}

.gitea/workflows/build-python.yml

@@ -4,25 +4,27 @@ on:
   push:
     branches: 
       - main
+  schedule:
+    - cron: "@weekly"
   workflow_dispatch:
 
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
     - name: Login to Registry
-      uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4
+      uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
       with:
-        registry: ${{ vars.REGISTRY_URL }}
+        registry: ${{ secrets.REGISTRY_URL }}
         username: ${{ secrets.REGISTRY_USER }}
         password: ${{ secrets.REGISTRY_PASSWORD }}
 
     - name: Build and Push
-      uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
+      uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
       with:
         context: .
         file: python/Dockerfile.python3
         push: true
-        tags: ${{ vars.REGISTRY_URL }}/${{ secrets.REGISTRY_USER }}/coder-images:python3
+        tags: ${{ vars.CI_REGISTRY_IMAGE }}:python3

java/Dockerfile.java21

@@ -1,4 +1,4 @@
-FROM gitea.bobert.me/anthorob/coder-base:latest@sha256:1ae71ab85f5e4e79dbcf6019a955037858e1618b3eac890f7abc2ef17a922de7
+FROM registry.bobert.me/anthorob/coder-base:latest@sha256:ff48bd8e316d473090f664a69514bc1efc1badfed81e293f97fcb610be8530b3
 
 USER root
 

php/Dockerfile.php82

@@ -1,4 +1,4 @@
-FROM gitea.bobert.me/anthorob/coder-base:latest@sha256:1ae71ab85f5e4e79dbcf6019a955037858e1618b3eac890f7abc2ef17a922de7
+FROM registry.bobert.me/anthorob/coder-base:latest@sha256:ff48bd8e316d473090f664a69514bc1efc1badfed81e293f97fcb610be8530b3
 
 USER root
 

php/Dockerfile.php84

@@ -1,4 +1,4 @@
-FROM gitea.bobert.me/anthorob/coder-base:latest@sha256:1ae71ab85f5e4e79dbcf6019a955037858e1618b3eac890f7abc2ef17a922de7
+FROM registry.bobert.me/anthorob/coder-base:latest@sha256:ff48bd8e316d473090f664a69514bc1efc1badfed81e293f97fcb610be8530b3
 
 USER root
 

python/Dockerfile.python3

@@ -1,4 +1,4 @@
-FROM gitea.bobert.me/anthorob/coder-base:latest@sha256:1ae71ab85f5e4e79dbcf6019a955037858e1618b3eac890f7abc2ef17a922de7
+FROM registry.bobert.me/anthorob/coder-base:latest@sha256:ff48bd8e316d473090f664a69514bc1efc1badfed81e293f97fcb610be8530b3
 
 USER root
 

renovate.json

@@ -2,5 +2,13 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "local>renovate/renovate-config"
+  ],
+  "packageRules": [
+    {
+      "matchPackageNames": [
+        "quay.io/buildah/stable"
+      ],
+      "enabled": false
+    }
   ]
 }