Move devcontainer image reference into Dockerfile

[lurtz]

dependabot can only check for devcontainer feature updates, but not image updates. Via the Dockerfile we work around this by using the docker ecosystem.

See also eclipse-score/score#2393 and dependabot/dependabot-core#7000 (comment)

[lurtz]

intentionally not using the most recent version for testing

[lurtz]

It is expected that QNX builds fail, because the SDK cannot be downloaded. See eclipse-score/.eclipsefdn#141

[github-actions]

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run //:license-check

Status: ⚠️ Needs Review

Click to expand output

[License Check Output]
2026/02/24 21:32:50 Downloading https://releases.bazel.build/8.3.0/release/bazel-8.3.0-linux-x86_64...
Extracting Bazel installation...
Starting local Bazel server (8.3.0) and connecting to it...
INFO: Invocation ID: fe602db6-4941-4bfd-9f86-76432870305b
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
WARNING: For repository 'googletest', the root module requires module version googletest@1.17.0, but got googletest@1.17.0.bcr.2 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Loading: 
Loading: 5 packages loaded
Loading: 5 packages loaded
    currently loading: 
Loading: 5 packages loaded
    currently loading: 
Loading: 5 packages loaded
    currently loading: 
Analyzing: target //:license-check (6 packages loaded, 0 targets configured)
Analyzing: target //:license-check (6 packages loaded, 0 targets configured)

Analyzing: target //:license-check (50 packages loaded, 9 targets configured)

Analyzing: target //:license-check (94 packages loaded, 9 targets configured)

Analyzing: target //:license-check (101 packages loaded, 9 targets configured)

Analyzing: target //:license-check (153 packages loaded, 946 targets configured)

Analyzing: target //:license-check (170 packages loaded, 4455 targets configured)

Analyzing: target //:license-check (175 packages loaded, 7636 targets configured)

Analyzing: target //:license-check (175 packages loaded, 7636 targets configured)

Analyzing: target //:license-check (180 packages loaded, 9645 targets configured)

Analyzing: target //:license-check (180 packages loaded, 9645 targets configured)

Analyzing: target //:license-check (180 packages loaded, 9645 targets configured)

Analyzing: target //:license-check (181 packages loaded, 9769 targets configured)

Analyzing: target //:license-check (181 packages loaded, 9769 targets configured)

Analyzing: target //:license-check (182 packages loaded, 9889 targets configured)

Analyzing: target //:license-check (182 packages loaded, 9889 targets configured)

INFO: Analyzed target //:license-check (183 packages loaded, 11824 targets configured).
[9 / 13] JavaToolchainCompileClasses external/rules_java+/toolchains/platformclasspath_classes; 0s disk-cache
INFO: From Generating Dash formatted dependency file ...:
INFO: Successfully converted 2 packages from Cargo.lock to bazel-out/k8-fastbuild/bin/formatted.txt
[11 / 13] JavaToolchainCompileBootClasspath external/rules_java+/toolchains/platformclasspath.jar; 0s disk-cache, processwrapper-sandbox
INFO: Found 1 target...
Target //:license.check.license_check up-to-date:
  bazel-bin/license.check.license_check
  bazel-bin/license.check.license_check.jar
INFO: Elapsed time: 199.247s, Critical Path: 2.33s
INFO: 13 processes: 9 internal, 3 processwrapper-sandbox, 1 worker.
INFO: Build completed successfully, 13 total actions
INFO: Running command line: bazel-bin/license.check.license_check ./formatted.txt <args omitted>
usage: org.eclipse.dash.licenses.cli.Main [-batch <int>] [-cd <url>]
       [-confidence <int>] [-ef <url>] [-excludeSources <sources>] [-help] [-lic
       <url>] [-project <shortname>] [-repo <url>] [-review] [-summary <file>]
       [-timeout <seconds>] [-token <token>]

[github-actions]

The created documentation from the pull request is available at: docu-html

[AlexanderLanin]

@lurtz the ticket you linked was closed 2 weeks ago as completed?!

[lurtz]

@lurtz the ticket you linked was closed 2 weeks ago as completed?!

It has been reopened before closing it again. It seems the devcontainer ecosystem can only update devcontainer features, but not images. Because there was no pull request linked, I would be surprised that there is any change since it has been reopened and closed again.